Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
File: T51fuq92qApl4OksAgYeiVsrgRc.mft (raw, json)
Hash identifier: sFxQfdBWDq9ZVFa11vWZju57Z4VdiBpqOUeCfCV9xvM=
Subject key identifier: 5F:16:12:BD:4C:4D:28:CE:10:C7:93:57:AA:B9:3E:90:D1:57:90:5A
Authority key identifier: 4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
Certificate issuer: /CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Certificate serial: 0194BC04EFA420E5F19932C3CD1C70669A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: T51fuq92qApl4OksAgYeiVsrgRc.crl (hash: CYwTMHWy1NfBEf8N6ilINv5kpDtpcIOBImUudw98dRo=)
2: oudSfHdCLiNB6U8UydMcb_Ovg84.roa (hash: LQDm0fv1Tzx1NMtk5XfrPEJuzKPUwQiMUZ87fbukA4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:a4:20:e5:f1:99:32:c3:cd:1c:70:66:9a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9d5fbaaf76a80a65e0e92c02061e895b2b8117
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=5f1612bd4c4d28ce10c79357aab93e90d157905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d8:18:f8:c3:84:fe:20:93:7e:f0:d0:31:f0:
87:68:f9:cc:2e:cf:41:5f:10:3d:4d:11:1b:c1:e3:
b8:96:63:0f:4e:bf:33:a9:fe:c0:1f:88:94:6e:ce:
43:3e:5c:52:56:f1:57:ec:a6:50:e9:ca:d0:9d:02:
91:15:a5:7b:e7:04:b5:ad:16:18:23:b1:1c:24:5b:
25:79:50:37:68:75:b1:e7:45:5f:70:e1:84:9c:36:
3c:21:d6:3d:39:82:f9:71:0b:69:92:f1:b2:b1:99:
5d:f9:e3:50:d2:56:66:09:52:bb:e0:76:91:79:40:
1e:d1:4d:00:03:02:96:35:ef:c5:b3:71:1c:74:a3:
38:7f:69:f8:09:af:95:b3:88:01:7f:e3:6a:5e:48:
49:05:86:22:a0:19:ba:ce:4d:99:ed:dd:d1:6f:b4:
5d:c5:63:45:20:17:f6:12:76:c6:db:b2:a4:33:b6:
61:95:54:ba:cc:88:04:e9:ac:d8:e3:8c:ed:d7:61:
44:f3:0f:0b:7d:24:9a:b1:60:9a:4f:8c:d0:65:37:
3d:5c:b8:f3:dc:2d:0f:54:e9:ab:36:ac:96:dc:5b:
6f:66:de:95:4c:95:d2:2a:74:88:23:67:8c:f6:35:
04:3f:cc:5d:3d:bf:a7:a5:64:c2:f1:01:90:cd:4f:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:12:BD:4C:4D:28:CE:10:C7:93:57:AA:B9:3E:90:D1:57:90:5A
X509v3 Authority Key Identifier:
keyid:4F:9D:5F:BA:AF:76:A8:0A:65:E0:E9:2C:02:06:1E:89:5B:2B:81:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T51fuq92qApl4OksAgYeiVsrgRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c70928-cede-4b62-89a7-60f6fa9110e2/1/T51fuq92qApl4OksAgYeiVsrgRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:87:9c:79:12:c7:c8:67:05:b0:32:b3:d2:11:90:5f:3d:9a:
ea:81:34:30:16:a1:a6:b1:a9:0f:01:7f:09:82:f1:4b:5c:f2:
60:75:3a:8b:81:c0:45:83:4f:a3:36:91:90:94:57:86:b3:4b:
22:c7:b2:53:23:77:b1:e7:82:79:17:6d:a5:18:56:54:2c:0f:
61:a8:7b:11:5b:0d:c6:ab:e2:75:3b:80:d1:9a:eb:97:0f:3b:
65:ed:45:cf:42:b9:92:a2:83:8e:db:c2:1f:be:11:39:65:1d:
9c:19:e5:2b:9f:c8:ce:1f:41:72:bf:8e:69:d8:5f:64:fd:6a:
65:62:67:4a:12:13:f7:78:60:b7:45:a7:71:28:ea:01:fe:a3:
4b:5e:48:96:2e:cb:82:c9:8e:45:eb:75:22:43:c0:eb:a8:a1:
86:e0:bd:4d:21:8d:c0:97:f7:b4:2d:a9:c5:08:b1:5a:f3:74:
58:db:dd:ed:0e:36:eb:0e:1f:ec:58:1a:94:d5:60:03:f8:b6:
cd:8d:d3:bf:b4:82:fb:a8:84:ce:55:54:81:b6:6d:b5:5f:21:
1a:f9:52:2a:d3:82:c3:cf:2f:80:9c:e1:b1:e9:19:9c:16:75:
2a:eb:a9:77:44:e9:0c:7a:d9:ef:bc:d9:27:53:4e:eb:93:11:
6f:74:c8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:27 2025 by rpki-client