Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: qZbvqr5D18LHphe4igtki/D2gQYbgwYGP4ievKvMp1A=
Subject key identifier: C8:77:73:E0:DA:0B:9B:0D:45:5B:E1:44:B7:D1:60:1D:D4:44:3D:BE
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 0194BD8557AB8EABCDC22B524AA9FB8C0597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0533
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: 6qvLdlVjJNsGQRlqPsS2asEpW1vlH7uNveg0bcASDm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:ab:8e:ab:cd:c2:2b:52:4a:a9:fb:8c:05:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=c87773e0da0b9b0d455be144b7d1601dd4443dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:89:37:ba:ff:d7:65:d8:89:53:2c:b7:3c:
de:15:e4:fb:1f:a9:d1:ab:34:84:96:0d:3f:1d:a5:
64:36:00:02:4a:0a:00:e4:9d:ae:04:13:3a:e0:43:
94:ae:dc:8e:20:80:16:49:5f:43:23:f2:34:4c:1b:
db:0c:58:81:d6:f8:dd:b8:02:f9:fb:87:c1:9d:d3:
66:36:91:6b:fb:83:20:2d:d2:29:c8:53:cf:5d:86:
08:26:2c:89:03:c5:e2:4d:dd:f7:dd:7a:79:d0:a1:
fe:f0:d6:52:fd:18:a1:3b:69:0e:47:0e:80:5f:53:
ea:07:98:05:70:c1:ff:df:b5:07:df:36:c5:71:61:
a8:f8:af:c6:13:d3:d0:88:22:ec:df:aa:ba:c1:45:
46:2a:be:0b:2f:10:bd:ab:43:b5:d0:ad:b0:36:cf:
fa:02:c0:cc:fa:ef:0b:d7:f4:a8:96:e1:42:ab:eb:
c5:10:70:c4:5d:8b:d4:26:a7:55:8d:b4:83:c2:5a:
a8:fe:64:d3:fa:8f:1f:01:24:de:40:6c:24:f2:54:
f8:5f:fa:52:9c:a3:d4:ea:42:71:c9:b9:a3:99:cc:
ff:f2:86:9c:d7:01:66:6e:e5:5b:d2:7c:99:1b:6e:
97:c6:5a:7c:ae:58:38:df:48:74:58:bb:af:fc:18:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:73:E0:DA:0B:9B:0D:45:5B:E1:44:B7:D1:60:1D:D4:44:3D:BE
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:a0:80:29:17:24:84:d0:86:a9:85:7a:d3:b1:8f:98:41:
27:95:96:13:48:42:a9:1f:d6:ae:7f:2b:af:87:36:18:c1:38:
b1:7c:9d:02:61:38:65:66:46:c8:88:5e:f7:8b:07:8b:ed:ef:
b8:d6:13:e5:08:e4:0a:67:ab:fb:d0:69:4b:e8:40:1c:ea:d3:
4a:4b:3f:0c:d6:d9:b2:fa:41:7f:05:be:46:06:ba:c1:fd:c8:
14:3a:8e:73:2f:a9:63:32:ae:cd:9e:eb:46:33:58:8b:48:87:
75:1f:f7:71:27:53:39:6e:67:c5:3b:20:0a:32:85:77:14:e9:
77:65:1d:cf:bd:b4:fa:23:b9:94:b1:19:d9:1f:26:b1:28:26:
4b:93:a3:21:82:f5:75:8c:2c:cd:5f:f3:c6:0e:2a:63:1a:ee:
ed:6a:44:a5:50:80:01:97:c4:ee:d4:a4:69:a8:14:02:a8:77:
89:ef:85:27:84:93:5a:68:58:4f:2b:40:59:fe:9b:8a:f9:9b:
b9:c6:e7:e4:58:12:4d:f1:60:62:de:58:03:6f:58:09:8f:99:
7e:d0:4d:3c:d3:6d:a9:2c:3a:ac:f1:fa:f4:61:11:5c:b8:6b:
65:b7:ce:5c:f6:0b:4b:df:97:f2:ef:ad:ee:8b:c9:3a:80:59:
74:57:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:18:02 2025 by rpki-client