Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: 5QkBLjBQQCld60xYl933y5IP7n6zWMSdiPDWzovAlks=
Subject key identifier: 7C:F8:05:A3:BF:F4:E2:E6:C1:8F:AD:AD:85:42:17:A8:DE:84:90:2C
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 0194BC3C06B484D4F9F8D219442CA0080B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: QX9fGe6EV8+Nqtk+DJ5c+Dpd+UdKxd8cwfaDmD/I3MA=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:06:b4:84:d4:f9:f8:d2:19:44:2c:a0:08:0b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=7cf805a3bff4e2e6c18fadad854217a8de84902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:7d:55:26:41:6f:96:99:8b:ae:bd:4c:7e:
9f:49:d4:b8:ed:28:2e:4a:a0:7e:88:91:e3:b3:ff:
e5:c0:02:bc:50:c6:22:04:84:8a:20:8e:fe:3f:a7:
39:38:f1:d4:46:cd:9b:0c:8e:32:b8:cf:d6:0b:6e:
cf:65:74:6d:e6:39:b9:4a:27:54:de:1f:2b:40:ef:
5d:5b:13:92:15:9a:b3:fd:2f:5b:d7:19:70:37:61:
bd:05:eb:4f:32:43:25:6c:f9:95:eb:06:e7:db:2f:
3e:c3:99:c1:a1:1a:d8:fd:21:40:a9:8e:8a:8b:24:
e6:1d:83:32:e5:89:dc:4a:95:95:cf:ef:3a:37:c8:
a5:f4:f6:d5:76:ff:84:61:b1:39:91:56:a8:f7:31:
31:5f:ca:f4:f5:15:1c:f7:79:01:be:46:c0:b1:1d:
e2:60:af:03:c9:e6:e9:e9:46:7a:8a:85:22:1c:f2:
b0:42:9a:fe:dd:81:c2:8b:b4:27:35:76:08:17:b8:
ce:c8:cc:1e:46:78:7f:80:4a:5e:52:5e:ba:62:24:
af:b9:06:7a:07:5c:34:e0:a0:30:cf:29:db:9b:08:
3e:e9:59:e1:06:eb:1b:e6:1f:58:2c:76:94:71:5a:
b1:c6:0f:bb:67:2f:24:18:3e:9b:11:10:bd:e4:c6:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:05:A3:BF:F4:E2:E6:C1:8F:AD:AD:85:42:17:A8:DE:84:90:2C
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cc:8a:f2:f0:c7:d8:cf:1e:4d:fe:94:05:3e:78:31:1e:16:
c7:6f:ed:3c:20:77:f6:84:4d:0f:5b:66:80:1c:d7:7d:f8:fc:
61:76:8e:ae:ad:16:ba:e5:4a:a9:de:de:3a:a7:01:95:9b:8b:
46:c8:3f:0b:5f:56:62:84:ae:aa:f3:93:24:3f:40:ee:ee:a0:
3c:39:e5:2a:78:3a:cd:08:6b:14:35:d7:b8:e6:81:8e:20:cc:
08:dc:83:08:b8:35:6e:61:c6:84:77:8e:70:6f:7c:cb:a9:a0:
48:6c:c8:2f:99:c1:24:49:33:f1:72:de:be:b3:6a:f1:44:9c:
4d:54:46:aa:0e:c2:e1:e0:f9:d1:66:89:40:ea:20:58:b2:b9:
a5:d1:09:83:4b:df:1b:95:4f:2a:3a:21:1a:c6:83:0f:02:bd:
0a:49:9c:73:e5:f7:f8:28:af:f2:fa:6e:b5:57:1c:bd:3b:72:
75:2d:5f:ad:9d:54:f0:75:8a:1b:b6:52:95:7f:a3:bd:1e:a4:
4d:8a:4e:73:25:48:e2:e8:7a:70:15:c0:3f:07:da:2b:af:8f:
44:a9:e1:ed:ed:c7:34:4c:23:54:71:ea:4a:54:16:e0:38:ec:
3c:78:5b:71:f0:72:fa:01:af:11:8e:6e:45:33:bc:5c:9e:80:
86:bb:61:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:47 2025 by rpki-client