Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File: 01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier: rs85HXxAM6CO405oCgJ0hgQy7Disz5LYqMTl7UEEUtg=
Subject key identifier: 5D:13:5F:88:7A:6C:56:D7:0A:9C:80:A3:51:5B:03:02:61:8E:1F:FC
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 0194BC72E5E940BE53F6D94C918D35BAB50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number: 0334
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: oObqzEWe/4yhaoWIyClSMagIWduj9P93kT9AhOp5mec=)
2: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (hash: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:e9:40:be:53:f6:d9:4c:91:8d:35:ba:b5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=5d135f887a6c56d70a9c80a3515b0302618e1ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:49:ac:68:b6:fe:3d:d0:87:0d:0c:0a:87:
1a:44:c9:d7:a3:d5:7f:9d:19:c5:ec:df:be:ca:df:
71:9d:dc:a2:83:b6:41:40:37:7a:4b:fa:54:d8:b1:
c5:c2:5e:3b:e7:39:ab:e5:67:6c:e2:69:b4:9c:69:
3b:dc:18:f9:46:25:8d:38:32:40:d8:86:13:4c:c0:
da:ef:76:ab:36:77:c1:66:2a:c1:08:4f:af:e9:40:
3a:01:b4:50:05:99:f4:d9:81:c8:e3:df:5f:ce:5b:
ff:b2:95:eb:58:d2:e4:7c:c4:81:72:68:3f:8c:93:
2d:d8:c2:a7:69:1d:bf:ad:e7:2c:83:0e:3e:1b:3e:
ad:31:31:df:22:ad:e3:49:65:4a:7d:89:6a:62:22:
ca:fb:38:fc:94:6b:3a:40:3c:de:a1:1b:68:9f:aa:
83:8f:58:79:43:02:1b:fb:e4:e6:01:e3:0e:03:f5:
be:0e:f9:b4:56:11:c3:a9:80:59:05:1f:bd:d4:6f:
0f:40:f7:3d:94:7b:33:af:4a:2a:67:fd:eb:92:67:
11:37:f4:8e:76:da:7a:1a:53:b2:2c:ff:ba:05:10:
cf:74:1e:a7:a5:4c:59:47:ca:68:7c:74:ac:a4:e9:
7e:b2:1e:a0:c2:b2:ea:cd:be:82:88:87:f1:d7:36:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:13:5F:88:7A:6C:56:D7:0A:9C:80:A3:51:5B:03:02:61:8E:1F:FC
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:4f:0f:75:12:b8:f4:38:be:8e:ca:d2:d1:b4:f6:52:37:
10:ec:71:d6:b6:e3:63:09:c6:44:69:59:1c:f1:73:ee:70:62:
8d:41:32:2f:7a:6a:dc:0c:75:8e:a1:39:ce:44:81:c7:36:3b:
4a:a0:aa:fa:d0:ad:26:bc:d2:6f:5e:b6:09:cb:2b:b6:55:da:
4f:de:fc:7b:bd:8d:79:7a:e5:27:b6:f7:21:1d:df:a4:f2:2d:
08:86:ca:b8:d1:37:ca:16:87:ef:c2:d3:f4:b2:d7:0b:cf:84:
13:67:40:c0:30:12:36:b4:3d:53:5b:66:c4:47:03:d5:c1:72:
7f:91:ea:1d:62:ca:e7:d2:8e:b4:90:8b:aa:52:6f:3d:76:f7:
7f:c4:7c:30:b1:f6:cc:58:f3:d7:18:bf:4d:cf:a7:eb:4f:26:
52:d6:72:5c:a0:94:d1:5d:da:d9:4f:26:41:7b:2d:31:2c:4e:
eb:dc:43:4f:d7:c9:ac:d5:f0:9e:b5:c1:e9:5b:cb:41:45:9a:
ce:ca:f0:f2:18:46:97:1a:9a:33:e4:eb:a6:b6:54:25:03:7a:
cf:65:b1:30:5d:5b:bf:61:5f:5f:f0:7e:e5:cf:b8:99:18:c1:
0d:14:e6:e9:75:ff:5a:22:9f:4b:9a:72:ba:66:e7:15:a6:f2:
35:c9:eb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:01 2025 by rpki-client