Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier: R2MyqegC0zslJvWQZ30U/jgvv2dUlEPQmUp/oV0GEIc=
Subject key identifier: C5:C4:7E:A3:50:E4:7D:4C:6D:13:C3:BE:BB:9F:3C:8D:AF:38:D8:50
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial: 0194BCA98875FF173DC6810D651972166029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number: 1281
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: G227Mv9IC3EK906eSNGf6RrDP6QNw/xRSjSX5BugXJg=)
2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:75:ff:17:3d:c6:81:0d:65:19:72:16:60:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=c5c47ea350e47d4c6d13c3bebb9f3c8daf38d850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:3d:7e:83:41:c7:98:05:5d:3c:cc:d0:5a:
cf:d3:5e:36:73:53:fc:45:04:44:a4:3e:3f:fa:28:
87:47:0e:08:24:28:d9:e2:d7:35:98:83:40:d4:97:
de:fe:57:c2:60:a7:26:92:99:7d:82:b8:c5:c3:87:
c1:e3:fb:77:f4:99:b6:f3:c4:0b:51:90:35:4d:af:
9d:85:9a:46:42:7d:35:ae:f6:23:ad:cf:15:db:e5:
d0:73:fd:24:5b:9d:3e:d7:9c:12:ef:44:e3:cb:b3:
ec:c0:f9:2f:77:b3:68:05:53:83:74:0d:ff:2b:2b:
73:94:6a:94:2f:77:1f:ad:ae:f6:15:07:1d:21:a3:
46:6a:3d:a0:0d:ff:71:77:18:c0:79:68:73:3d:ce:
f3:27:ae:e2:95:4a:13:e8:71:56:5a:4c:41:d3:4c:
78:3b:28:b9:ed:38:82:74:06:11:12:5d:74:d1:2b:
47:a2:f6:c1:48:30:ed:a8:07:24:61:0f:63:81:8f:
7d:a6:80:e6:a4:2e:a6:45:fc:d6:58:e4:06:30:8f:
15:18:31:4d:48:4a:e6:a7:9b:3e:66:b8:70:55:72:
7a:45:e0:03:b9:30:46:cf:a3:14:65:17:bc:13:31:
db:9c:ff:8a:a1:df:ce:46:ce:ae:17:db:d8:64:c8:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:7E:A3:50:E4:7D:4C:6D:13:C3:BE:BB:9F:3C:8D:AF:38:D8:50
X509v3 Authority Key Identifier:
keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:84:c7:fc:47:9e:f5:ff:d8:c0:5e:c8:1c:45:5a:0d:94:
9d:26:1c:fd:ba:ac:ac:08:a6:5b:b8:64:4c:85:ff:12:1f:bc:
98:eb:e8:5a:50:21:aa:b5:27:cc:e9:1e:4e:12:fc:59:e4:38:
4d:8c:2f:7c:28:d1:35:a3:e2:53:ce:a1:e9:19:c9:75:a3:90:
9e:58:cd:cc:d7:00:5c:f0:52:a4:5a:37:b4:b7:6f:05:33:9a:
b4:16:72:cb:e7:15:5c:c4:6a:62:bb:da:7c:0f:9d:47:0d:42:
e3:38:ca:f0:a3:a6:ab:b4:e3:52:ab:18:d2:48:56:dc:4b:00:
c9:c7:90:b8:f8:47:ab:69:1a:25:92:ec:62:26:0d:fd:98:a3:
ee:71:05:4e:43:1b:8d:a1:f1:b8:ed:1b:bb:00:16:cf:e4:ac:
65:97:40:a1:d3:d3:35:5d:03:92:de:ab:a7:c8:4d:56:dd:78:
a7:0a:bf:37:3d:09:35:74:65:33:9f:d4:cc:ac:26:01:13:83:
af:1b:af:d3:ea:fb:a4:b7:87:ed:c6:36:c9:95:f0:84:0d:80:
c2:70:a7:a7:a0:37:7a:59:87:16:07:08:0f:37:b9:8f:f8:5a:
61:bc:c7:4f:5c:68:ad:a8:17:79:33:20:61:d7:39:e8:33:98:
bf:e0:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:15:09 2025 by rpki-client