Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File: s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier: ZcNc0KUIzGuH7lOrIi9LNJ6nJlKYrGZQPkT8ZOWnM7U=
Subject key identifier: A0:2A:E9:96:CE:D9:70:83:47:5C:87:C8:C2:9C:57:1A:C8:78:B1:C4
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer: /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial: 0194BD4E89D093FACD7433CFC1162488E3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number: 0231
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: xc64EER3SHh2BvcNMEpLt2+Lb2Fz05rlurNQxwFdEFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:d0:93:fa:cd:74:33:cf:c1:16:24:88:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=a02ae996ced97083475c87c8c29c571ac878b1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:ea:59:ae:a8:c4:6c:bb:22:85:d4:8f:59:
60:81:96:9e:ee:49:bc:b2:f2:85:bb:f8:52:06:61:
4f:be:f7:33:6d:37:df:c8:bf:df:80:e0:13:a0:9e:
3d:c8:b4:4d:85:d5:22:96:fd:6a:61:85:68:4a:0d:
ec:4a:3f:6d:58:e0:f0:c8:db:06:b4:8e:cd:ee:cd:
46:78:88:1c:5c:e8:6c:28:cc:5b:3c:8c:8d:1a:42:
41:ac:62:f1:8b:49:86:06:1c:d2:62:b0:da:8f:0e:
92:b4:95:c4:d1:2f:bb:a2:0c:c3:d6:a2:03:15:29:
5d:4b:40:51:b7:1c:09:39:d1:20:be:b2:18:15:f8:
9d:95:29:ae:69:5a:2e:96:c0:46:bf:60:7c:d8:5b:
74:35:c2:49:0a:fa:8f:c2:c6:25:ef:29:4c:53:44:
7b:12:d4:4b:68:3b:62:be:d0:d4:65:d5:d6:79:41:
27:21:08:74:e6:45:ee:57:5a:e6:ed:20:60:1a:88:
40:c4:83:5a:67:f5:dc:02:4d:5d:36:34:32:4e:22:
ba:2d:43:4c:98:16:13:b9:92:5b:2f:96:a9:67:00:
95:32:6e:fd:fe:50:90:cf:bd:0d:c8:44:0e:93:d2:
23:31:47:37:16:5d:83:8b:8e:a3:ad:46:85:65:78:
54:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:E9:96:CE:D9:70:83:47:5C:87:C8:C2:9C:57:1A:C8:78:B1:C4
X509v3 Authority Key Identifier:
keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:56:0d:2c:de:6b:41:65:f1:85:72:17:ad:7f:d6:b2:e1:
11:2d:56:91:6f:a5:ec:9b:a7:63:5b:89:9b:0b:86:47:d4:dc:
e5:8c:74:5e:14:13:64:e5:40:29:c4:f3:f1:92:6d:19:8f:01:
0c:8c:64:4e:98:b5:cb:23:8d:89:60:e8:47:72:ce:12:f7:2d:
67:6e:50:28:2b:fb:d0:9a:e8:ba:9e:90:24:16:17:48:23:75:
bd:a6:8d:ab:fc:dc:01:7b:78:01:dc:7d:d7:39:66:dc:41:63:
1f:9b:a2:e2:67:66:ae:ab:c2:56:c0:6a:03:cb:9f:0b:0c:08:
24:6e:cb:02:3d:4c:e8:d6:ac:50:c8:0a:f2:2d:f1:74:97:36:
f2:ca:b9:75:f2:87:bb:6f:10:8f:7d:11:25:18:0a:a6:1e:ee:
94:83:52:bb:1d:ee:9b:04:9c:b7:72:17:60:6f:0a:c8:68:14:
89:1d:17:e9:8b:a4:fc:f6:98:d3:07:0d:fd:7d:58:3d:de:e5:
6b:58:6a:0c:06:6a:17:bc:ac:c1:5e:c9:c0:fd:75:05:67:a3:
b6:1e:43:3a:88:9e:4d:44:2b:47:3f:b5:cc:8b:ba:da:e7:24:
b0:30:f1:aa:82:17:ff:ca:8f:89:ab:22:79:a3:31:d0:aa:26:
b1:fb:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:08 2025 by rpki-client