Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: HFfmyasJUtbByunaQKzFzcNgJvv9RXEqgW16X4SFRJM=
Subject key identifier: 19:26:7D:B1:5E:2B:39:4E:EB:DD:A3:EB:45:3E:A7:24:8E:C6:67:04
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 0194BCA9977D09EBAD5D1C1C4D31C63E5C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 113D
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: ppV9yxhZdhnPoxj6MfS0rLJkyWqcEtW9/6CsgfYG5QI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:7d:09:eb:ad:5d:1c:1c:4d:31:c6:3e:5c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=19267db15e2b394eebdda3eb453ea7248ec66704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:ac:f7:dc:12:fb:ba:ee:a3:50:b2:27:2b:
0c:d9:35:b2:33:43:34:1b:8c:e3:29:07:7d:08:42:
11:20:91:e4:6a:e9:52:08:f6:29:51:63:01:21:e5:
c4:59:e7:94:e2:1c:e7:cd:9a:58:60:82:d6:bd:42:
6f:05:eb:40:13:8c:61:1a:d8:fb:00:13:19:8c:bd:
2a:ce:05:2a:0e:3e:da:a8:f8:6e:35:d9:31:10:9e:
7f:c7:6a:e0:53:ab:64:49:15:c0:42:20:15:83:e9:
d8:76:52:6c:b4:8b:51:e9:35:5d:88:86:be:1c:8e:
51:ad:65:01:b0:8c:27:32:8b:e5:05:8f:68:b4:60:
58:a1:3b:6e:e0:cb:05:87:6c:63:87:f1:eb:c8:00:
06:d2:c6:ce:b5:ae:48:31:96:5a:39:14:77:b2:e3:
98:d8:cf:b0:62:da:7a:de:e0:a0:d5:a5:11:f7:98:
ae:55:8a:ca:92:c5:48:29:e0:8f:6a:38:88:4c:e0:
05:91:ce:a2:bf:e7:4e:8a:3a:1e:b9:c2:a0:41:17:
5d:52:24:0d:8a:83:3f:e5:c2:2c:11:2b:27:44:4f:
80:5a:ab:0d:ee:0b:ae:52:ed:ac:68:55:b5:3f:c6:
eb:ee:6c:fe:38:66:02:5d:e5:49:f4:7d:74:10:c6:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:26:7D:B1:5E:2B:39:4E:EB:DD:A3:EB:45:3E:A7:24:8E:C6:67:04
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5e:69:3f:73:a7:01:83:4e:0c:f3:90:55:64:f8:6f:f2:f0:
06:fb:88:e8:af:f9:20:57:f9:bb:1d:9b:37:d8:ab:8a:82:0f:
42:c7:7d:93:df:fb:45:ba:70:1e:87:e9:87:a0:7b:76:83:df:
f2:05:69:a5:da:d5:86:b4:fb:12:1f:b7:e3:86:65:49:4f:e8:
7b:c8:ee:14:f3:42:e6:36:27:34:ff:a7:c7:4b:a3:cb:3f:a0:
48:4f:b4:13:80:65:d2:6b:39:8c:03:ff:bd:f3:79:3d:e9:bd:
a2:76:61:65:6a:51:86:45:f8:ea:97:f3:da:1e:4c:66:50:53:
bd:05:e0:21:81:a7:82:0a:74:f3:a9:0e:17:1c:25:d8:5e:9a:
3e:55:b8:d0:e2:6e:c7:b4:f7:0e:95:02:16:e4:51:01:86:b6:
c6:37:57:79:0c:d6:1d:20:d2:c3:64:d2:2f:56:2c:23:6f:9f:
71:a2:07:6f:49:5d:39:b0:1d:d9:77:1b:91:3e:eb:cf:6b:22:
a2:91:d3:f9:e5:57:0a:0c:da:ad:3c:3c:36:3c:81:ac:c6:7c:
51:bc:27:28:6a:32:d4:88:82:94:02:1f:41:f3:74:27:e0:b3:
ac:3a:c0:aa:c9:18:fa:4b:34:ad:fe:fc:16:dd:ca:9c:cf:f6:
25:08:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:29 2025 by rpki-client