Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
File: 4lzdUHOqVD30SJKA9n2uU_rCYXk.mft (raw, json)
Hash identifier: TdxsJRNJba/Y6j38PXLpoJa3DykXQ3KhsTF0ou2mJNE=
Subject key identifier: 33:57:AE:94:DD:0A:C0:8B:10:F3:96:25:C2:33:5C:6F:46:45:30:41
Authority key identifier: E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
Certificate issuer: /CN=e25cdd5073aa543df4489280f67dae53fac26179
Certificate serial: 0194BC72D235D5DE629AFC2962D8E438B670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
Manifest number: 0B65
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 4lzdUHOqVD30SJKA9n2uU_rCYXk.crl (hash: lp3WGfwR9c8duYXN/jC5baQQBpxzp7Dk6qxdvbxw2cE=)
2: mBEegRP2fcMEeUaclOgLAwCugkM.roa (hash: B82VvCB/q+BaVI4/BoHfqo/wxEhTrze1CaetuXlR0ts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:35:d5:de:62:9a:fc:29:62:d8:e4:38:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e25cdd5073aa543df4489280f67dae53fac26179
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=3357ae94dd0ac08b10f39625c2335c6f46453041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:f4:d6:00:64:7a:60:20:e8:ed:fc:1a:70:
4e:3e:f0:0d:74:c1:d1:db:92:b2:32:fb:70:e0:4b:
b3:95:83:04:77:bc:61:47:21:cb:40:5f:3c:1c:bd:
8d:ca:6f:33:f7:f2:33:09:a6:ce:ce:93:0a:d5:fb:
42:d7:0e:89:bb:aa:bd:d9:c9:98:95:dd:b1:0c:f0:
0e:f1:bc:1c:ee:99:91:be:6c:67:69:e8:55:95:c8:
2f:ef:0a:02:cd:f6:1a:74:7b:f3:62:5a:0a:b4:70:
4d:5c:88:8a:3b:7e:b4:bc:f2:93:a8:51:44:c8:f0:
e3:61:9b:24:9e:36:d0:a0:ec:a4:0b:83:87:d1:17:
d3:8d:8d:69:f7:ac:ae:79:9e:c4:f7:b9:16:8c:b2:
98:f5:eb:51:0a:bd:8d:a3:78:45:eb:28:f5:fc:95:
5c:d5:50:05:61:1e:69:90:f3:a8:45:38:0e:13:58:
45:e3:fe:de:e9:fb:05:1b:00:e3:75:02:3c:f3:3d:
c0:27:32:7c:a0:33:86:0a:86:d2:73:21:5a:36:1a:
84:08:e0:21:1a:14:2a:28:2d:dc:0b:4f:e2:18:98:
a3:32:59:a8:4d:03:9d:f5:dc:7e:26:fa:62:ad:2a:
e0:bb:13:d5:9a:a4:15:c5:bd:68:05:78:b2:a0:a9:
d3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:AE:94:DD:0A:C0:8B:10:F3:96:25:C2:33:5C:6F:46:45:30:41
X509v3 Authority Key Identifier:
keyid:E2:5C:DD:50:73:AA:54:3D:F4:48:92:80:F6:7D:AE:53:FA:C2:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4lzdUHOqVD30SJKA9n2uU_rCYXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7b0b9b-1bb9-4cf7-a3f4-7ef17d911e0c/1/4lzdUHOqVD30SJKA9n2uU_rCYXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:87:61:0f:2f:80:3d:0f:16:82:c7:62:c9:cf:b2:31:9f:cb:
35:a2:41:0a:cc:b7:20:49:13:6a:65:7c:06:3d:d7:94:52:2a:
0f:ed:1b:aa:7c:1b:25:4a:f7:c2:dd:70:a8:af:f2:15:d8:29:
70:96:f6:14:c4:06:c3:d5:c6:71:60:c7:8b:95:e7:a5:c9:5b:
e0:89:ee:36:19:bd:91:a1:a0:a8:b8:2f:3f:c3:5b:0f:e8:22:
36:90:1f:43:a5:43:83:2b:ec:f8:77:00:60:d3:08:c9:94:a0:
7f:7d:3d:5e:b0:73:ed:86:49:fb:60:42:bd:dc:59:57:da:09:
d6:c2:d4:97:ea:fe:70:35:7a:12:8d:a2:41:87:49:7f:8c:53:
bb:0a:da:8f:e1:44:5a:9b:0f:2f:6e:68:c0:31:92:7a:cf:e8:
4f:a3:79:3c:50:de:65:26:22:17:0c:0a:8d:28:42:7e:f9:de:
60:7c:24:df:94:93:65:95:46:dc:fd:84:86:12:5d:70:11:e6:
4e:be:9f:89:90:cd:ae:20:24:8e:e4:29:f1:3e:b8:14:3a:64:
59:86:ac:8b:8e:a4:5e:09:fb:5c:c9:19:91:ad:8b:95:08:65:
0b:6b:23:c8:08:95:03:53:3f:3f:2d:d7:97:7c:83:8a:51:ca:
e1:56:64:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:49 2025 by rpki-client