Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: 1/klwTZTBaw/zRJkpUBveZr0r71TnRWCZgo69fhyagE=
Subject key identifier: CD:3A:84:80:94:27:EC:F8:80:0D:B1:74:90:97:06:2E:DA:C2:44:78
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0194BCE0C610E8962E438CC32E9D48654DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 075F
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: WLM/asrh6MrGjqse8PQtpB3X5NENKDXL5DiYNpir9RI=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:10:e8:96:2e:43:8c:c3:2e:9d:48:65:4d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=cd3a84809427ecf8800db1749097062edac24478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:1e:e9:a0:a7:15:1c:6b:96:db:b3:70:46:
1f:a9:26:96:28:4f:26:84:ce:28:1b:78:c0:6a:d6:
7d:92:a5:a2:c5:af:b8:1d:6e:71:8a:ed:cc:96:09:
31:9e:eb:29:9d:5e:c0:f3:a2:19:f3:c8:2a:e2:f1:
28:0e:e8:ff:74:20:64:92:7f:fd:1e:1c:f2:fc:60:
45:cf:1c:17:b6:68:e7:ea:ce:10:c4:10:74:b8:be:
0a:62:b6:64:dc:41:2c:bd:97:f3:93:3d:9e:c2:31:
09:0a:aa:42:ca:80:1c:4a:ca:f5:58:a7:36:1c:44:
19:65:b2:62:60:76:11:93:0c:ac:2f:33:57:57:25:
96:1d:b8:1a:16:10:d3:bf:5b:e7:e7:94:cc:a7:cb:
2b:2c:64:8a:f9:f1:29:5c:78:77:2f:15:23:6e:bb:
58:b2:44:a6:45:41:2f:60:8f:93:5d:87:03:98:80:
3e:8b:3a:76:b1:8d:7b:0e:39:d8:62:17:27:68:fd:
e9:0d:de:33:79:b0:64:6d:e9:e3:88:ba:d1:1b:70:
7e:8c:c2:18:62:c6:aa:41:9c:b0:ac:70:0b:16:a8:
43:a0:d6:44:ad:b4:69:7f:5f:89:e3:f2:28:88:53:
b3:37:4d:b7:d0:37:f0:d4:4d:4c:1c:71:77:b3:e0:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:84:80:94:27:EC:F8:80:0D:B1:74:90:97:06:2E:DA:C2:44:78
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:04:a8:7a:df:19:e8:96:28:75:b5:a3:1c:86:e1:f6:f7:ce:
ae:b3:85:69:b4:b5:c0:cc:57:48:06:bb:21:91:86:c2:f6:50:
39:ba:94:7c:9d:38:41:b9:cc:8b:62:19:57:7f:3b:d1:5f:27:
0a:b1:be:f8:f1:00:9e:b7:c5:71:a2:ea:53:a7:a6:7a:b9:e7:
47:f0:95:37:bd:8f:78:a6:e1:e1:04:c1:af:e6:78:78:33:ea:
d9:70:ff:1b:ae:44:5c:47:ea:31:5d:9c:b0:90:71:95:7d:11:
97:99:87:0e:d3:67:c3:32:7d:7f:25:54:ad:47:00:5e:9c:e5:
2d:30:c3:6e:d0:10:17:18:83:f7:88:55:df:f4:7d:a0:b2:ae:
55:04:0a:ca:42:bc:8b:f6:03:f1:94:15:dc:f9:bd:4d:cd:60:
19:6b:fe:42:b5:15:25:2d:14:51:fc:f7:1f:ee:67:e9:6b:16:
dd:21:5a:00:a0:69:49:8a:f0:ad:87:34:6c:2f:0e:63:e3:ed:
93:71:8e:f2:92:32:d9:95:32:11:f9:93:72:6d:e8:4b:67:0e:
c5:69:19:12:61:00:a0:dd:71:78:18:41:c9:90:f9:53:46:e9:
1b:d5:cb:1a:f1:2e:18:2d:bd:fa:29:5f:8c:d1:57:33:92:98:
cf:3e:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:19:12 2025 by rpki-client