Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
File: t5im6ZG5VaKTURGf9312hksNOEo.mft (raw, json)
Hash identifier: r6KOgMkGaOzU2ujrCj1xkErmcSaAalzGevCxhZUWBpU=
Subject key identifier: 76:0D:3A:72:CC:B4:F2:87:A9:35:5E:E4:D9:1D:9D:5C:4A:D5:DE:B1
Authority key identifier: B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
Certificate issuer: /CN=b798a6e991b955a29351119ff77d76864b0d384a
Certificate serial: 0194BBCE2DBA3B222D9B066C7A55D33D3DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
Manifest number: 0B4D
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: t5im6ZG5VaKTURGf9312hksNOEo.crl (hash: +oZFM6rCFgSrLncJTGG3l1NbISKc5xBS94FGt5ValiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2d:ba:3b:22:2d:9b:06:6c:7a:55:d3:3d:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b798a6e991b955a29351119ff77d76864b0d384a
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=760d3a72ccb4f287a9355ee4d91d9d5c4ad5deb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:b7:b3:fc:30:8f:30:d5:19:d5:55:54:06:
fd:a7:44:1a:30:ed:a5:21:70:17:d8:91:3d:67:3e:
9c:d1:8c:c9:ab:d1:68:64:a9:ff:a8:b7:15:63:29:
d9:b6:74:8a:fe:cb:98:5d:4e:c6:1a:ed:f4:86:d3:
99:14:47:88:e5:a4:c2:86:ba:c3:12:cc:24:bc:f2:
e0:6c:ff:47:12:c8:dd:64:ee:9c:6a:64:66:cc:43:
30:f6:d6:98:34:ba:92:5d:f1:6f:50:89:80:99:a9:
50:11:f4:e8:28:80:27:db:20:45:b7:08:53:b2:27:
c4:f2:79:d6:71:76:7e:1a:4c:e5:ea:a9:0e:89:35:
49:ae:c1:3c:05:01:b3:1b:74:fa:a3:49:b0:cd:63:
01:b9:52:92:ad:9c:b0:1c:58:ea:f2:ba:c6:c3:05:
54:f0:e0:8d:a2:66:15:d1:75:c9:21:be:65:54:db:
f8:15:49:31:d1:64:ce:47:52:86:70:20:64:54:0b:
3e:0c:94:e9:e1:81:26:18:79:c5:f2:6b:0d:7b:4a:
93:b6:ac:74:20:55:00:e9:55:69:e3:39:71:d6:9f:
b2:6d:e7:ca:3e:cb:d6:01:be:6a:b3:7d:ce:37:05:
f9:e4:29:7a:cf:f7:a0:0b:86:98:14:40:20:bb:e5:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:3A:72:CC:B4:F2:87:A9:35:5E:E4:D9:1D:9D:5C:4A:D5:DE:B1
X509v3 Authority Key Identifier:
keyid:B7:98:A6:E9:91:B9:55:A2:93:51:11:9F:F7:7D:76:86:4B:0D:38:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5im6ZG5VaKTURGf9312hksNOEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/5392b9-7f23-4740-9123-69c72f168689/1/t5im6ZG5VaKTURGf9312hksNOEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:93:89:b9:91:92:de:67:27:b8:8e:c3:25:6a:a4:1e:dc:da:
82:5e:9e:50:ea:3b:b9:c7:78:cc:75:71:57:87:e0:f9:1a:4c:
33:6d:04:28:46:a4:e7:42:50:8f:84:ee:3d:0e:03:bc:02:21:
6a:42:a7:44:6d:5c:23:f7:6d:c5:4e:e9:d6:97:9d:2d:21:7a:
c7:b1:61:6c:fa:57:46:11:20:ca:6d:70:33:ec:ba:d5:4e:9a:
8a:01:59:60:0a:ad:d6:38:c5:47:08:75:48:17:8a:54:8a:ea:
bf:d0:ed:fa:06:30:8d:36:1a:b9:93:c7:23:da:40:68:c5:35:
a1:d8:fa:ed:d9:fb:5e:a8:06:f8:21:33:da:b7:b1:1f:17:f9:
d3:8a:06:d1:ad:af:20:12:70:60:ac:c8:10:3c:6e:7d:4f:1b:
8f:98:e8:5c:ce:74:41:20:2d:2e:bd:ae:11:7b:1c:86:06:7f:
b8:69:f6:71:b4:36:20:9a:68:9c:4a:43:ee:a4:ba:3e:26:ef:
a4:f6:b2:dd:60:be:a9:38:66:f0:68:91:9c:89:20:8d:5a:2c:
c0:a1:43:ab:27:5f:34:bd:d7:10:18:8a:0c:6b:b5:f0:36:32:
9d:f3:01:68:ed:e6:7c:44:91:34:98:aa:5f:45:3f:9f:e5:d9:
7a:e2:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:55 2025 by rpki-client