Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: mts9LiCa1IrlTgUMyW4l8mp0lLHIw5k+aVgeV3i73lE=
Subject key identifier: 5E:45:C9:EE:8D:FE:DF:C5:BB:55:90:1C:FD:C6:76:30:98:C3:90:FB
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 0194BD85AB7E1931BD1A152C6DA94E8E72DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 136F
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: QeHIQeZVzCXimbVtM/Um9IIt3SPkdsn4kO1BDjF1ynQ=)
2: gi2nB3ojIWFvbp9ceI5eykRUnBQ.roa (hash: SdF/4kUgrmuoBf7uz2K1ONEXYqOeDgBsypfMdmo+6rY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ab:7e:19:31:bd:1a:15:2c:6d:a9:4e:8e:72:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=5e45c9ee8dfedfc5bb55901cfdc6763098c390fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:99:7a:76:33:c1:90:50:b0:37:aa:64:18:
4b:87:66:66:e8:73:ab:d0:53:86:85:bb:ec:87:53:
f2:f3:cc:ab:29:07:79:a2:83:e1:01:a0:e1:11:a0:
ce:d1:1a:58:3f:5c:db:55:80:dc:ec:3c:3e:e6:a7:
94:21:ce:c6:15:a1:61:71:aa:34:0d:09:86:90:cb:
13:89:b4:d7:56:d7:fb:bd:72:11:5b:7e:72:38:62:
54:e0:52:73:01:db:58:8a:05:92:2d:dc:ae:92:ec:
56:05:c7:da:f5:f8:30:e1:16:05:22:77:fe:4e:29:
17:87:c1:00:e3:57:75:85:98:ea:d3:f9:f6:86:24:
b6:69:50:7e:24:5c:5e:0a:f2:29:15:a2:dc:96:52:
85:81:49:1e:93:00:10:20:40:35:44:04:8c:33:93:
14:e0:5b:ab:e7:b7:2d:4c:13:5b:a9:fb:71:43:38:
ec:f4:72:6d:4a:7e:b5:df:f1:98:4b:ca:d0:59:b4:
04:78:8c:b2:23:87:f6:8e:45:6c:bc:a2:c8:f6:d4:
c1:ac:90:41:da:bc:e1:4e:75:91:ca:80:e0:0e:c2:
f8:9f:fb:b9:73:44:f9:b9:07:ff:6d:40:51:98:7c:
bf:96:28:9e:9a:10:e9:8d:2c:74:7c:a1:6d:99:49:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:C9:EE:8D:FE:DF:C5:BB:55:90:1C:FD:C6:76:30:98:C3:90:FB
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:1f:57:eb:58:20:45:63:07:81:7b:a1:78:9a:9d:7c:25:
d9:33:8f:28:04:e5:1b:a8:e5:d4:8d:6d:df:3b:b6:bd:90:b2:
78:ea:55:83:3b:e6:fa:07:9a:52:b7:89:82:5c:d4:b6:bb:f6:
09:4e:89:24:cf:7e:44:e1:8d:f1:49:6d:f7:69:95:53:c6:05:
c1:e0:b3:38:36:f7:8b:58:8d:85:39:02:51:c5:a7:a9:34:8e:
56:5f:9a:7e:f1:59:6f:f3:5d:85:fe:80:e2:2a:52:3c:16:74:
6c:a9:6c:db:16:0d:9b:7a:ef:cc:2e:5f:74:eb:90:d3:d8:21:
3f:54:f2:02:92:27:2f:80:dd:ce:d0:10:c1:f8:a8:b6:c8:96:
6a:a8:08:59:ba:e6:1c:1f:fb:70:da:e6:d3:cc:c9:62:1d:cc:
6d:69:b8:17:d4:93:e1:4b:b7:7b:2c:52:b0:e3:83:f8:bc:7f:
f3:7b:ad:e5:7c:d4:f3:bb:d5:a7:3b:8e:14:be:69:58:66:15:
98:09:62:59:7e:0a:c9:3c:69:95:40:4e:03:33:b5:ab:32:f6:
52:e2:ac:6a:8c:a1:d4:26:3a:6d:bd:ab:46:c1:70:7e:cc:97:
5d:11:59:58:56:1a:81:e8:e5:9b:9a:a0:88:30:da:bd:0a:88:
20:49:ad:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:07 2025 by rpki-client