Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
File: 5GZIM5avs3fl43nRYVveD9TZ7Uc.mft (raw, json)
Hash identifier: atk+xP1HmwGF52+a9UWlmo2+Pc6Z12rLNfsLeWU2MyI=
Subject key identifier: 4E:AB:33:D7:12:FD:0F:A2:DC:9A:C2:AC:C1:3E:D1:A4:A1:71:A3:F3
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Certificate issuer: /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial: 0194BC3CA694FA5A24BB93ABCE39213FB236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: 5GZIM5avs3fl43nRYVveD9TZ7Uc.crl (hash: BcpjeYFe9Q1laUl6B0lQ82eXP0qy8t2AJBQdCsjdz7w=)
2: Btqt9dHmfyCgZm5YxFkx4BjR-Dc.roa (hash: O8dRjpLSf+cl4rOTaaTPD9tud0oWl3levwWO3JGp7jw=)
3: TLd_ZXXp2Q2UgInwhLKUEKhwDUc.roa (hash: IaRGq7PGoes/uNGrRRu/Qh4aGHDMpqDn5kGzUSwYnj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a6:94:fa:5a:24:bb:93:ab:ce:39:21:3f:b2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=4eab33d712fd0fa2dc9ac2acc13ed1a4a171a3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:fc:28:07:51:b3:f7:b5:01:57:18:30:de:
56:72:fc:39:b7:f8:1b:9f:9a:62:ec:9f:90:7e:48:
bd:6f:75:d5:a0:8e:23:a3:ae:8d:d5:cd:df:92:86:
3c:64:88:5f:4d:78:0f:5d:33:4d:7d:50:0f:a8:35:
cd:8e:23:c2:2e:d3:7b:b5:f4:75:3e:84:2e:8b:a9:
1c:16:e3:1e:da:19:47:c9:2c:ee:84:2d:6b:4a:af:
cf:f6:ad:f8:f2:80:65:78:c7:56:42:8c:5a:e9:6a:
66:1d:c8:4d:8b:6a:31:38:39:27:b4:30:f8:b8:43:
2f:a5:aa:4e:c6:fb:3c:07:c9:7e:c4:4e:44:bd:44:
0e:08:5c:21:36:8c:1d:58:46:76:b8:e7:85:da:09:
e4:56:d9:86:7e:95:f0:12:77:e9:35:21:46:4b:77:
4e:1f:3a:fc:d1:83:15:40:96:6a:9b:75:64:84:e9:
72:c1:e8:77:b3:44:b0:72:3e:bd:23:db:92:4e:2b:
e9:73:45:2e:6d:78:c9:4b:81:2a:b1:ad:ab:e1:15:
87:d6:d9:a8:f8:aa:f3:95:a2:31:47:52:01:af:ff:
bf:cd:8a:88:90:25:d6:bb:f4:78:a0:6b:f9:e5:f5:
8a:9c:dd:4b:1e:4a:89:c2:92:da:e8:60:12:38:db:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:33:D7:12:FD:0F:A2:DC:9A:C2:AC:C1:3E:D1:A4:A1:71:A3:F3
X509v3 Authority Key Identifier:
keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:07:9d:dd:82:b8:cc:3a:3f:a4:2f:01:e8:aa:9d:9d:f7:2c:
39:2a:a4:a0:73:c0:11:cb:82:c5:d2:83:34:29:39:fc:f0:cb:
92:b3:4b:a3:0a:a5:da:4c:9e:86:aa:5c:95:0f:72:31:bb:69:
dd:d9:ca:ee:68:7e:9b:3b:47:bf:9b:93:03:38:02:df:f2:aa:
c1:30:42:74:e6:6e:7b:39:72:80:1f:36:32:92:7a:94:c7:d0:
77:4f:ad:33:34:39:29:d7:26:15:40:f6:cb:96:33:72:79:af:
33:fb:c7:15:59:f9:81:a2:36:da:6e:64:07:46:a3:1d:2c:96:
a7:12:77:f4:e4:dc:0f:3a:0f:27:6b:69:e4:1e:eb:4c:87:ca:
c6:ca:fd:62:b1:c6:a9:ec:25:48:63:8b:67:ed:47:68:31:3e:
67:d1:2d:d8:2f:02:ef:32:cd:b4:06:33:13:87:65:4f:a8:cf:
d9:e9:a9:93:5a:5d:eb:99:b6:d6:5e:82:d1:bf:c5:bb:04:d2:
a2:ca:a0:03:7c:c6:81:1a:ed:cf:55:3a:4a:15:6f:32:8f:ab:
cc:e1:0e:33:89:d7:1a:3b:07:de:b9:94:d8:32:53:7b:be:4f:
5d:cd:f4:53:ba:db:07:b3:e1:53:01:27:2f:fe:64:65:71:ad:
4b:0b:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:23 2025 by rpki-client