Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft (raw, json)
Hash identifier: sSRl8DKSzA8vBc3KPnr6NGxaxeRuGj91a61ZXd/tD/s=
Subject key identifier: 04:17:F2:25:B9:12:3B:16:3E:73:D9:5E:5E:16:2A:6A:E9:42:5F:75
Authority key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Certificate issuer: /CN=b79de9458d190e634329f9df1503b5222c1624ee
Certificate serial: 0194BC04F82ACD69E213BD9D402FE6A9CD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
Manifest number: 063A
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl (hash: 7//nlhLW1dFDHFBi6u76azKwAM4KUAwcpyHp20bQ21I=)
2: vOqn_POT4SJgIQweA7fnrAcEf9I.roa (hash: 2I0bW2R+HbcHB9hILgmOeF30MmdjVomizQKa9+qzyDY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f8:2a:cd:69:e2:13:bd:9d:40:2f:e6:a9:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79de9458d190e634329f9df1503b5222c1624ee
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=0417f225b9123b163e73d95e5e162a6ae9425f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:1f:52:ef:7e:1c:e0:05:ce:54:09:d6:9b:
b4:d3:a4:5e:f5:63:34:7f:9c:b7:72:ad:96:14:4b:
5f:bf:13:0d:b8:4f:eb:72:28:22:93:75:fa:ff:bb:
18:5c:9c:f2:39:9f:28:92:fc:5d:0b:ab:e4:87:54:
96:56:5a:0c:32:fc:61:e8:e5:3f:b5:e1:86:0e:3e:
07:63:e7:2e:bc:fd:78:1c:e2:b8:3c:48:96:35:17:
cf:b3:87:93:47:d7:4c:ef:38:7f:f8:44:dc:9a:b6:
a1:64:93:f1:00:cb:aa:23:b6:32:28:0d:18:16:e1:
45:eb:27:4f:ec:4c:e0:01:0e:2c:c4:4e:0c:15:d3:
a3:e8:a0:bd:ce:40:21:17:5c:47:99:f9:ac:9f:d3:
5b:0e:81:f0:9c:ef:c9:df:ba:92:d5:d3:57:11:6d:
f0:0d:16:2c:25:a2:32:c4:4c:15:c7:8a:de:ef:62:
12:de:50:32:47:2c:e0:c9:82:76:ca:13:1f:67:bb:
3d:80:8b:e8:dd:30:67:f5:c8:40:21:48:5c:7f:e9:
b5:45:81:e0:86:41:ff:22:e5:a8:33:e3:e7:22:e9:
3b:c7:2d:bf:02:8f:f5:94:21:38:b9:fd:49:10:7c:
3d:00:a5:52:54:e4:47:33:af:bd:f6:85:81:4f:b7:
65:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:F2:25:B9:12:3B:16:3E:73:D9:5E:5E:16:2A:6A:E9:42:5F:75
X509v3 Authority Key Identifier:
keyid:B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:62:8a:3e:8d:4f:7f:e1:bc:d7:98:42:fd:54:e4:f9:cd:9f:
9a:31:40:19:a8:9c:23:75:3a:a4:ce:73:b7:c0:0d:92:2a:61:
58:6c:53:aa:e8:fe:bf:de:fa:3d:3f:54:88:82:67:fe:47:f9:
bd:7f:d4:e7:f5:0b:fd:1a:8f:25:ec:17:b1:5e:e5:28:ef:c7:
f1:3c:1f:49:75:a4:30:c1:1c:fe:ec:fa:6a:be:27:fb:e4:26:
06:90:33:cd:4d:81:d1:3b:34:80:e8:da:a4:f9:9f:4e:c4:03:
ef:ee:10:90:3e:be:7f:76:db:cb:d0:93:d6:81:e3:fd:69:62:
9e:b1:7a:b6:70:7d:07:47:76:2e:d1:46:c0:99:1d:7b:1f:20:
9e:e4:10:f4:8f:d3:55:ff:2b:89:72:fd:04:cf:e2:14:d5:68:
ca:a1:03:57:27:a9:65:c6:39:1e:84:a1:0f:62:e7:27:a3:7a:
0b:33:b8:84:5b:1e:9c:74:5c:99:33:14:8e:5a:f2:f6:3a:b1:
8a:b0:5e:f7:af:d6:4c:da:c3:9b:d2:bd:8e:ff:ef:fc:93:dc:
19:b1:d6:61:6d:b2:d4:71:cd:fb:8d:8d:8f:a2:0b:96:7f:5c:
a5:1b:a9:f9:f4:70:af:c6:fd:27:c0:10:20:ee:b4:e7:7b:a7:
11:4b:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:43:05 2025 by rpki-client