Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
File: 35GEXmXk8DlPHmw_-edzL2qkb9w.mft (raw, json)
Hash identifier: aJ+lbeGByA98/welubJLYtBwsihh/JyhcMWwLbSUtj0=
Subject key identifier: 79:39:D8:8C:8D:8B:82:E0:B3:E7:CE:CA:D2:B5:1E:68:92:10:F3:2E
Authority key identifier: DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
Certificate issuer: /CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Certificate serial: 0194BC72F4FB3C5FB72ED03D6CA4D3C4BEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
Manifest number: 0E11
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: 35GEXmXk8DlPHmw_-edzL2qkb9w.crl (hash: g0S+P6K/RaiisDp5ieHPjR0bS6YyJLZla+r282UAyts=)
2: ZrChAnEIC7XkkvtmNcAU0NitmrI.roa (hash: 99wLAgfUwposvYSU46TWayIZqmg33XG3e0RoKs9DbJk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f4:fb:3c:5f:b7:2e:d0:3d:6c:a4:d3:c4:be:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df91845e65e4f0394f1e6c3ff9e7732f6aa46fdc
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=7939d88c8d8b82e0b3e7cecad2b51e689210f32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:c3:67:93:d2:74:2b:1c:33:6b:67:12:72:
5c:02:86:aa:7d:1e:5f:ef:35:7f:c0:4e:c2:96:b0:
ca:87:48:3c:15:96:00:2e:15:aa:9c:b2:b8:23:f2:
d3:0e:6c:c2:ee:42:2d:ae:1d:ee:34:49:cc:38:ec:
01:2b:c0:de:ed:ea:02:c9:fc:ce:31:3c:ce:79:c6:
a7:82:18:be:c1:71:4a:ee:a3:2a:60:0a:34:fc:1b:
3f:59:11:59:a9:d1:02:a6:de:10:ba:c1:69:5d:f3:
9a:f1:2a:5c:6c:33:4a:2e:36:0b:fa:c2:8d:2a:0e:
33:7c:8b:34:92:c8:aa:94:b8:04:d1:b1:38:21:97:
3a:01:f7:a7:c3:7b:d5:33:67:77:24:21:b7:52:ff:
99:eb:60:f7:b0:1d:3c:99:4d:3f:64:e1:d3:03:f5:
27:11:b1:74:ec:08:0b:c8:fa:10:9e:f8:48:3e:3d:
5a:0f:48:29:aa:b5:52:52:5a:40:95:83:7e:a7:15:
e8:08:fd:8d:cd:13:9c:1b:4e:26:ee:f6:56:e0:4f:
22:d2:3a:a4:9c:64:d0:bb:05:23:94:b1:ab:3d:e5:
42:f6:df:0b:c6:10:74:d2:74:73:14:6e:0a:02:ac:
18:5b:85:22:5c:2a:5a:3b:37:86:56:a8:a4:95:5a:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:D8:8C:8D:8B:82:E0:B3:E7:CE:CA:D2:B5:1E:68:92:10:F3:2E
X509v3 Authority Key Identifier:
keyid:DF:91:84:5E:65:E4:F0:39:4F:1E:6C:3F:F9:E7:73:2F:6A:A4:6F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35GEXmXk8DlPHmw_-edzL2qkb9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0e8eb9-f656-4ccf-a814-f89ab9f1286c/1/35GEXmXk8DlPHmw_-edzL2qkb9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ee:44:7b:07:b8:cd:ca:95:61:3a:6e:fc:0a:35:1a:e1:41:
a5:15:44:e3:5b:d7:86:62:ef:4e:c9:d0:36:db:d3:a8:a4:6a:
d3:98:42:2a:41:7d:08:fb:a7:40:44:a5:45:fe:51:72:27:5c:
af:8e:8e:fc:53:79:cd:37:1a:b3:38:6e:84:82:cb:da:d3:fe:
fe:d9:6e:3a:cb:90:54:77:a9:cf:67:2c:3c:db:26:ef:9d:c2:
63:4d:ab:7f:23:46:f6:96:1c:7a:fa:79:ea:42:07:de:6b:67:
ce:8f:c2:f4:52:20:8f:e2:ed:e1:a0:e8:82:94:8e:1d:b8:f0:
11:e7:97:39:78:02:6b:84:9a:92:54:b9:ca:18:9e:93:cc:e4:
f5:39:ed:b0:06:bb:85:82:90:41:4c:51:56:f4:34:ab:5e:a8:
47:52:10:93:1f:d6:4a:68:51:ec:88:f0:1d:81:f0:5a:17:fd:
01:8d:8c:c7:a0:3f:64:d8:27:fe:6c:67:1e:12:70:67:e6:bf:
72:85:4e:2d:60:9f:74:e0:a0:2d:71:f4:33:a1:47:1e:39:68:
1f:04:12:9e:73:c7:13:dc:43:01:fa:bf:82:2b:9e:44:ad:59:
c3:d8:80:3d:3c:e5:8c:21:8e:ee:9c:12:8e:fa:c6:23:35:31:
63:b4:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:49 2025 by rpki-client