Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
File: T1JcTLrI19lzMkWHalyr5rNeL-k.mft (raw, json)
Hash identifier: /kaCgBZkqd209hR+g8FlQKuBEziKXAolceASLcbjwqk=
Subject key identifier: 52:E6:01:05:50:EA:5F:45:BF:D0:3B:0E:8D:2B:88:9B:2C:E8:83:77
Authority key identifier: 4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
Certificate issuer: /CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Certificate serial: 0194BCAA27441E2E1613DA4400690B5AD385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
Manifest number: 0CC1
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: T1JcTLrI19lzMkWHalyr5rNeL-k.crl (hash: iEscj9KV3xKjbdkM2YpbayWPb5Um943gGYkgY9xW9R0=)
2: c8I1j-_EdlLIZz3-7BnhuaavJno.roa (hash: CwCN8RoP1XffLa+Wr9AuQzfDKd1y2haHBaFngEMqfpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:27:44:1e:2e:16:13:da:44:00:69:0b:5a:d3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f525c4cbac8d7d9733245876a5cabe6b35e2fe9
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=52e6010550ea5f45bfd03b0e8d2b889b2ce88377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:fc:21:60:9f:75:1f:17:7d:c2:59:a4:c4:
06:88:8c:17:95:4b:45:9a:71:62:8a:e1:cd:ca:d1:
3e:7e:4d:70:52:ef:58:62:00:42:4d:c9:a4:c4:42:
31:79:ea:f1:ac:56:c9:d3:57:96:06:14:c6:a3:88:
59:b4:ed:2c:31:7d:09:a1:2c:83:6c:b2:77:7b:7d:
65:b5:51:97:a9:6b:b0:eb:55:d3:79:1f:a8:0d:ea:
53:b5:41:ce:be:59:08:27:41:bb:1a:23:96:be:72:
77:1a:e5:c1:e9:81:d1:46:98:80:a2:1b:c3:5b:bd:
bf:95:e8:96:e9:a5:c9:39:14:32:30:82:e6:a0:cb:
06:a3:62:6b:7c:9f:a4:27:19:47:5c:10:bc:24:3a:
81:26:35:5e:5a:c8:3a:6f:02:38:e3:80:1d:b7:7e:
c8:a6:82:39:e3:f6:53:ba:49:91:5f:6f:db:95:10:
fb:3f:81:b5:63:65:f9:19:5f:3a:04:ec:c4:e5:70:
78:4a:fa:7c:57:b4:50:fe:c6:eb:00:f3:fa:75:99:
21:bf:d7:db:0a:5d:0a:ab:cf:02:7f:e3:54:67:02:
ec:35:d5:ff:86:5a:1c:ad:3e:1c:23:65:83:29:14:
6f:c3:f2:39:42:86:d8:e3:70:17:bf:53:0d:49:66:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:01:05:50:EA:5F:45:BF:D0:3B:0E:8D:2B:88:9B:2C:E8:83:77
X509v3 Authority Key Identifier:
keyid:4F:52:5C:4C:BA:C8:D7:D9:73:32:45:87:6A:5C:AB:E6:B3:5E:2F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1JcTLrI19lzMkWHalyr5rNeL-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/28a5f9-9071-4459-9829-55795c26eaca/1/T1JcTLrI19lzMkWHalyr5rNeL-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cc:0f:28:be:6e:48:08:4f:e7:fd:e9:f0:ba:7d:96:9c:c8:
88:e1:2c:eb:5d:fd:5f:3f:03:87:34:84:40:89:b4:3b:ac:26:
d3:d0:e0:36:26:2f:fc:5b:51:0f:16:62:70:a6:db:ec:c1:2f:
86:33:f1:68:93:ce:83:d7:69:ae:1d:c3:eb:dc:a9:e3:0d:d4:
f3:a2:61:78:90:4e:d8:69:79:ef:cb:df:74:ad:d4:73:ea:27:
89:0f:a0:7d:55:97:3b:6d:a3:de:12:cc:48:61:c7:7c:17:46:
9e:2b:c0:1c:ad:33:b3:42:57:2a:3c:8d:1b:54:7f:94:a2:7d:
80:61:e8:70:29:cd:0b:d3:33:b6:e1:62:75:fb:70:21:be:d4:
80:f6:c0:a8:2b:f0:00:ad:5b:72:71:be:78:a8:64:1a:a3:60:
9f:c5:ee:62:f4:76:b8:f9:60:45:72:4f:68:4e:b2:4d:27:7c:
10:d6:2f:18:04:2b:63:e6:21:3c:89:a6:d6:7d:48:ad:85:a7:
d4:1b:20:74:43:d9:99:12:db:64:23:65:a0:f4:6c:79:55:e6:
7c:00:ab:fd:9d:8e:0d:fc:4e:75:35:8f:0d:52:66:b6:80:70:
75:2d:7a:a4:b1:f1:3f:b1:d8:df:fe:7e:04:ef:ff:12:58:4b:
a8:5a:cf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:58 2025 by rpki-client