Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File: 5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier: VsuOyPyBXQjOHv1IOwuNmtLXQ4EG4VJHOSyfPsBEn0o=
Subject key identifier: 25:44:7D:A4:C8:23:0A:6F:A8:4B:92:F1:F2:AD:42:9B:B4:5F:00:71
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer: /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial: 0194BBCDFEE4D2A88CB2483CF8C4A0D6DED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number: 1249
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: PJak9hm4qdFU/9RNDIvD5Uq8QKj8DkDGFQkYhO550Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:e4:d2:a8:8c:b2:48:3c:f8:c4:a0:d6:de:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=25447da4c8230a6fa84b92f1f2ad429bb45f0071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:db:39:6b:65:f0:6c:14:85:35:32:cc:bc:
19:3e:a1:7d:53:8e:1a:8f:5a:cb:09:79:30:90:b0:
ec:5e:70:68:25:4a:f2:01:11:a5:4b:8a:4c:c5:b7:
6c:39:59:54:d9:36:09:44:2a:03:bc:1b:6f:b2:7f:
47:ee:2c:22:db:c4:a1:4c:12:25:08:23:ec:ff:c2:
b4:15:c2:1e:ee:ea:99:67:46:1d:ff:40:a6:c5:19:
10:73:15:c7:2c:f0:9d:6b:d9:4c:92:ce:9c:79:62:
ac:d0:11:a8:be:5c:01:8f:42:1b:c6:8e:8d:31:78:
57:2f:86:58:3e:ad:1f:e1:7b:a5:f5:4a:9a:ec:5d:
30:c4:e1:64:df:1a:3e:28:44:0b:d4:b2:a2:64:45:
98:a2:49:31:c5:aa:5e:15:2f:8b:f7:67:f7:62:fd:
e4:66:3c:38:f9:fc:d2:04:78:7c:8b:36:bb:d5:9b:
63:de:d9:2d:0b:6c:30:7b:35:f7:51:30:d4:38:08:
65:54:1c:93:99:d4:a4:28:72:a3:6d:97:68:71:ed:
ab:9c:71:5f:b1:23:9f:87:4e:88:d2:7e:e7:16:45:
8a:ff:9f:58:75:e8:fa:d3:c0:1e:7c:e7:ba:87:0a:
a8:8e:0c:c2:df:4d:7e:5c:24:23:88:d7:e9:88:63:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:7D:A4:C8:23:0A:6F:A8:4B:92:F1:F2:AD:42:9B:B4:5F:00:71
X509v3 Authority Key Identifier:
keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2b:3e:86:3b:34:ba:97:dd:c6:18:ff:cb:da:3d:fd:15:a7:
d8:b6:3e:ff:d0:ea:66:bd:80:16:f6:e7:46:b4:b6:34:68:4e:
8c:b3:d7:9e:f7:3b:55:ad:49:74:53:7e:9b:c5:08:4d:d9:7c:
86:a2:90:d4:57:65:cb:2b:15:c9:4b:be:b3:ca:28:24:ed:d5:
9d:10:64:fd:6a:71:ad:1a:c0:fb:08:8a:43:64:95:ab:e2:d0:
d0:64:65:55:84:cc:f4:d4:e6:fa:64:55:ea:d2:75:88:34:29:
61:e0:28:f4:2b:58:02:f6:99:b0:cf:54:b4:f8:a7:28:88:02:
77:6f:3d:27:d8:5a:5f:43:85:85:83:a5:4d:78:da:63:09:74:
4d:82:f1:6a:a0:7b:8a:f2:af:2f:8d:0b:07:60:0b:f8:4b:12:
dd:22:a0:ee:04:0f:ea:f3:2b:ae:84:38:77:53:31:c8:5c:63:
e0:c4:1f:06:1a:ed:87:ff:12:41:32:f4:04:66:58:e5:65:c5:
b7:2e:15:42:e4:00:bb:da:0d:4a:b5:e8:a5:9f:3b:95:9f:07:
61:9e:cd:10:85:6b:cd:5b:7c:8c:47:cb:99:c9:02:e9:56:4f:
07:13:3d:c3:af:af:88:a7:ac:1d:08:1c:e9:32:29:ca:7b:29:
2a:ed:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:34 2025 by rpki-client