Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
File: T5mJlOtWGejymrO956sq0U6r_P0.mft (raw, json)
Hash identifier: c/zuXdagRYDxlekMssntpKHAM9ecpS/r05TKKMGswac=
Subject key identifier: 72:2F:8A:E9:3A:85:D9:26:DD:3D:33:3D:05:9F:B1:08:1A:9B:E1:D3
Authority key identifier: 4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
Certificate issuer: /CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Certificate serial: 0194BD178A0017D9A54233BD833860FBFCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: T5mJlOtWGejymrO956sq0U6r_P0.crl (hash: MikTlRURCYDOSU+LVHmJcoGVwcLtG495WWxefNlBzmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:00:17:d9:a5:42:33:bd:83:38:60:fb:fc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f998994eb5619e8f29ab3bde7ab2ad14eabfcfd
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=722f8ae93a85d926dd3d333d059fb1081a9be1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:ee:1b:91:2e:87:27:02:b8:a8:b4:7b:e6:
55:db:2b:86:86:3b:82:cb:c3:2a:6c:00:6b:c6:12:
f0:b3:5c:06:cd:19:30:81:e7:64:1b:00:c8:c4:7d:
c7:f7:9e:3e:f0:8f:cb:07:e8:b6:94:cb:e4:71:42:
16:5d:4f:3e:8d:92:55:53:bc:4e:df:8e:20:78:53:
93:42:bf:0a:e7:02:f4:4d:ce:78:29:df:22:8d:71:
98:cc:06:21:e6:8b:46:4e:c0:fe:75:2d:b8:b1:55:
f9:af:30:f9:96:65:2a:8c:e4:c5:95:90:5b:7b:48:
45:61:6b:fd:8b:5d:3a:d3:aa:b5:33:86:8a:52:45:
b1:f0:26:b3:04:23:70:8d:59:da:1d:89:ff:cb:fb:
b1:2a:c4:f7:9d:ef:c4:a0:6a:01:ae:70:92:b8:d0:
a3:67:90:cb:27:67:cb:54:ed:3f:0f:13:2b:75:97:
67:a4:97:50:ef:9e:92:ca:59:94:82:71:af:05:48:
bb:74:de:a2:ea:d8:7d:3e:51:66:16:86:c3:68:8f:
72:6b:c5:f9:95:04:c4:bc:bb:aa:c0:de:3a:b3:66:
9b:da:f1:3f:23:f1:38:64:2c:40:0c:1e:42:3c:7c:
52:39:14:1e:f3:3c:68:80:f8:0c:8a:28:1d:27:f0:
98:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:8A:E9:3A:85:D9:26:DD:3D:33:3D:05:9F:B1:08:1A:9B:E1:D3
X509v3 Authority Key Identifier:
keyid:4F:99:89:94:EB:56:19:E8:F2:9A:B3:BD:E7:AB:2A:D1:4E:AB:FC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5mJlOtWGejymrO956sq0U6r_P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c487-f8fb-4035-9e28-4468d12f322b/1/T5mJlOtWGejymrO956sq0U6r_P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:c2:44:37:ce:ad:46:7b:02:44:fa:af:1c:3c:54:2f:fe:
20:d2:2b:27:15:98:a5:51:28:8e:91:90:bd:d5:00:8c:c6:20:
75:ce:ba:e0:8d:8d:97:ac:e6:c3:c8:3f:b8:c8:19:62:73:bf:
87:63:36:de:a2:3d:63:5d:10:b3:3a:c7:15:81:d8:08:ab:98:
33:01:f3:2a:90:5b:ad:74:77:47:e6:e6:ee:86:79:63:5f:a6:
71:0c:8b:fc:9c:bd:11:4a:22:25:a0:b4:90:6b:06:ae:cf:1e:
05:8b:0c:d7:85:dd:16:26:87:f0:f4:32:81:1b:1b:f0:6a:6f:
12:15:32:31:9c:7a:6e:57:4e:d0:7d:eb:8e:c2:d1:8c:42:08:
2a:9b:33:33:b3:6a:ff:69:23:e0:09:b2:a8:9a:c9:93:ff:d1:
46:f0:87:ed:56:9c:d3:bc:a7:c1:60:4e:75:0d:d8:a2:34:ec:
3d:e0:98:a6:86:b2:fc:da:e1:a3:2d:ef:ee:f9:83:ce:de:d8:
e8:68:2c:6a:37:5e:67:47:3e:d1:45:32:be:8e:f8:08:3e:ce:
59:9a:7c:71:85:88:87:3c:20:ec:9c:11:86:d8:8f:10:9c:ee:
ab:9e:64:fe:a5:81:63:08:37:cc:88:bc:b1:9a:27:99:12:67:
ba:ee:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:48 2025 by rpki-client