Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File: 31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier: JxJlpD5mKwHWhzaZQ6retgWslGZcM2ZTaYRxfatYKBA=
Subject key identifier: B5:91:A0:39:C0:D9:33:AF:04:4A:6A:1D:3E:21:BA:6A:4F:EF:1C:02
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0194BC04AD844ABB727006554E115FB72737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: Sn487DN0Iws6F41jLpaiRGDJslB6WfiHe0iNKaSwtIo=)
2: 65Xlj195X-cGSev9DG8oGbd1-U4.roa (hash: K+xD/8At0190Enhc+vU1PDhREni4vKMCikS55k0TxlE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:84:4a:bb:72:70:06:55:4e:11:5f:b7:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=b591a039c0d933af044a6a1d3e21ba6a4fef1c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:17:ee:45:f0:74:12:b7:28:1a:80:57:29:
5f:41:2f:75:a5:d3:59:b6:08:96:7d:16:8d:79:74:
b9:c7:5d:21:7f:bc:ca:f9:da:5f:ab:49:58:4d:00:
73:98:79:fd:5a:99:df:6f:60:e7:b0:a5:24:07:0a:
7a:70:a5:81:b1:9d:e0:5d:46:8f:d1:8c:98:ff:2d:
25:ac:c7:09:ef:ce:32:ea:1a:26:24:e5:fb:2a:5d:
c1:d6:25:35:96:2e:ec:e3:6b:d3:5f:b3:f1:5f:62:
19:cf:b5:1f:4c:5a:f1:21:22:b0:c7:76:5f:95:02:
f8:51:81:87:da:ce:21:03:51:ec:86:11:4d:39:5f:
7f:28:b0:54:c2:4d:10:77:8f:5d:aa:2e:06:44:9c:
4a:24:f0:0d:a7:ee:61:1c:7b:a1:49:cf:d2:a4:0e:
03:a0:21:4e:58:ce:22:ee:fa:40:45:8c:d9:81:ff:
f6:2d:9f:97:ba:6b:cc:7c:71:81:d8:3a:9b:b2:61:
e5:87:be:a7:f4:e0:62:de:dd:6c:8e:c3:3d:fe:ac:
ef:47:71:02:56:89:76:c0:46:f8:ed:3a:51:1d:0f:
92:0b:67:ea:28:e0:4d:32:cc:f1:b2:6e:3a:70:77:
4a:85:7d:95:16:9b:ab:46:9e:6b:37:49:46:67:fa:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:91:A0:39:C0:D9:33:AF:04:4A:6A:1D:3E:21:BA:6A:4F:EF:1C:02
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:f1:04:7c:f2:41:fe:c1:dc:9c:3a:68:61:28:9f:df:86:
dd:66:a1:e5:e2:74:ce:4e:ba:36:05:75:09:f0:7e:05:ff:97:
48:26:64:5e:9c:7b:4a:46:d0:52:a4:89:d8:b3:00:26:f9:ae:
24:b8:2a:27:12:27:35:9b:f0:d4:cb:95:32:8c:20:43:03:b1:
94:f6:3c:bf:ce:61:32:c6:39:d1:e9:a4:33:04:37:8e:0c:92:
90:c2:00:3b:cd:ff:d3:22:7d:82:0f:72:05:fc:9c:b9:57:a8:
0c:b3:8a:1d:76:6b:e9:68:88:f1:e4:3a:6e:31:ac:56:1c:ca:
79:4c:7c:a0:8a:93:5d:29:53:78:b9:08:e5:34:8c:3c:88:da:
71:2e:c1:b7:d5:cd:59:fc:36:45:e5:40:ef:3f:54:1f:81:23:
b6:cf:26:54:34:ba:ef:f6:c0:4a:8e:9e:9c:07:8e:8d:fc:e8:
d6:b5:73:2e:a0:a3:c3:07:81:18:5e:2e:58:9f:10:3b:e2:40:
85:30:24:99:1b:00:85:a4:2c:94:c4:36:ad:d9:ae:38:18:0c:
5c:55:e3:4e:b7:76:15:83:04:b6:ab:20:22:05:fc:c1:b6:14:
6d:55:38:bf:88:d8:92:1d:7e:d0:68:d0:7d:31:8d:c3:be:10:
64:f8:d6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:36 2025 by rpki-client