Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: GkCV1V6C2rfmWMlt1vJLmYbdBg6O1raR0B5wsBgHx2A=
Subject key identifier: 7A:0E:5D:34:53:89:C7:30:A8:A9:73:4D:75:C8:B2:E9:C5:0E:E4:41
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 0194BCE0D4AB5A9EE1BB6C6EE6BCD7488D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 05DC
Signing time: Fri 31 Jan 2025 15:00:38 +0000
Manifest this update: Fri 31 Jan 2025 15:00:38 +0000
Manifest next update: Sat 01 Feb 2025 15:00:38 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: LtcwKTeAt86S/Oc51hpVCIhHFlFd+VDYJn21v4q5vTU=)
2: Z5QHoKQNr7K3ZZ1_pXiHs3_16g8.roa (hash: /CZOibzm07xlRo0dBVlbyqc4APuq7TkYKFvaBHtU91A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d4:ab:5a:9e:e1:bb:6c:6e:e6:bc:d7:48:8d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Jan 31 15:00:38 2025 GMT
Not After : Feb 1 15:00:38 2025 GMT
Subject: CN=7a0e5d345389c730a8a9734d75c8b2e9c50ee441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:b3:5e:6b:08:ed:da:ea:c1:be:9a:ad:2e:
e0:41:3b:52:cf:24:3b:e9:25:93:a7:e6:34:51:a5:
36:26:c5:7a:d7:0a:99:47:26:1a:19:d8:72:4b:01:
68:3f:85:98:5f:14:8d:91:16:de:8f:fc:18:e4:fe:
8f:8e:ae:a3:91:e2:1d:25:24:d6:a1:64:f9:c5:b3:
15:23:f7:28:33:f3:82:c1:cd:03:70:a3:b0:43:15:
6b:59:c7:74:03:56:3d:51:f1:03:0c:2e:6c:d6:2d:
22:a3:bf:8c:b4:96:1b:52:f0:9b:72:3d:a8:41:35:
0a:ca:3b:97:2e:5d:93:0f:68:71:22:c6:84:ca:1b:
bd:2d:59:be:33:1f:18:d4:cc:20:fc:4a:a3:62:21:
cf:b4:03:b6:2d:99:7d:d2:72:fa:e0:f1:a7:37:a5:
7b:21:b4:54:be:18:7d:70:60:af:85:e9:23:7f:41:
e4:4c:ed:45:cf:e9:f3:25:55:4f:46:7b:c4:20:78:
44:55:14:f8:48:6b:1b:d2:30:42:2a:8c:21:d3:d0:
db:95:df:1a:76:8e:6d:69:97:30:a1:2f:13:64:bd:
64:da:d3:47:ff:4a:0a:32:87:74:e7:37:d1:65:6c:
50:f4:69:db:5f:f8:21:82:20:f9:8d:b5:e5:c3:b4:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:5D:34:53:89:C7:30:A8:A9:73:4D:75:C8:B2:E9:C5:0E:E4:41
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:24:e6:d9:06:c8:6b:97:ca:21:49:e9:0a:f0:2e:4b:ac:7b:
88:29:3f:27:30:d7:bb:74:06:48:e6:d0:21:af:33:06:5b:25:
45:9e:5a:b5:9a:46:bb:c2:eb:50:79:8c:e3:9b:b4:95:5d:c4:
a1:ac:d9:ad:04:70:ca:8e:9d:90:41:1f:c7:7d:32:60:37:bf:
0b:b5:50:a5:21:d7:9a:be:49:a1:5b:aa:8c:89:cc:1b:32:e4:
09:78:20:29:3d:f0:94:ad:a6:de:93:fe:92:6c:88:f0:11:25:
ff:7c:6a:38:36:ef:9f:81:b8:38:17:90:20:c6:e4:fb:48:33:
21:aa:97:f6:ec:a3:f5:ef:e7:0d:d2:5d:ec:92:51:a1:ee:ec:
02:b4:56:95:81:a8:0f:b4:3a:57:14:46:a4:f6:f3:9d:41:f2:
80:86:e9:b0:61:09:da:3c:44:68:bc:b0:cc:a3:62:aa:96:77:
a9:d9:71:7b:11:e9:c3:af:26:f6:14:71:13:ac:f6:9a:53:52:
07:c9:13:aa:56:4e:30:8e:bf:ee:80:43:fb:bf:87:2e:31:8c:
f3:c9:84:39:40:ac:64:86:14:9b:ce:4b:86:b5:17:7f:63:b0:
7b:4c:af:48:68:25:36:76:6f:61:02:bf:b9:4f:d9:33:39:83:
d6:64:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:05 2025 by rpki-client