Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier: /dpSkYP4/pc4Se5+1lg+1qsUZAQ6gOtidYICivwRi3s=
Subject key identifier: 43:5D:80:79:72:CF:B7:8C:B0:91:15:7A:F4:D7:5D:F5:B4:4C:17:C8
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 0194BC04CBC83058EBB2D517D305E1687B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: qYcJMnAmzFOC4R2liT5XYx86XX+bQskTyVvOleopMjU=)
2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:c8:30:58:eb:b2:d5:17:d3:05:e1:68:7b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=435d807972cfb78cb091157af4d75df5b44c17c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:e3:a8:c3:9b:cd:40:ab:11:4b:12:b2:e7:
1c:f8:9b:12:f0:99:17:b7:91:e6:3e:b8:7d:e0:fa:
55:27:6c:fa:4e:7b:51:be:10:0e:2a:f3:1c:77:0b:
de:07:e3:44:a9:5d:2f:66:3b:81:e8:93:26:9c:fa:
25:4b:0a:4c:48:c8:df:f3:05:44:99:bb:7d:c6:b4:
70:47:f9:c3:8b:bb:04:40:75:e5:d2:9b:22:a5:fc:
61:84:8e:c3:da:2e:d1:e4:39:e6:07:33:79:45:1e:
23:90:b6:33:c9:7d:3d:0a:39:ae:13:98:3c:07:96:
d8:6f:95:2f:3d:ca:a7:f9:0e:cd:94:61:91:0a:5d:
9c:3e:05:04:db:85:f9:c0:6f:de:1b:89:5f:6c:c9:
91:d1:1e:fb:67:20:28:a9:fc:c6:ae:af:ba:b2:09:
74:8b:f1:70:a9:bc:77:f8:26:ff:e7:d1:e4:99:33:
47:ab:87:b5:b0:23:94:69:93:4b:da:fc:03:48:dc:
68:62:7a:f3:a7:d8:a5:14:8e:77:6d:48:d3:61:1c:
da:40:74:ed:ec:88:3d:b3:f9:ff:3b:61:3a:71:53:
26:a4:94:32:36:f8:84:08:76:28:1a:b3:71:f8:06:
77:d2:7a:0c:c4:e5:51:5c:92:83:46:6c:78:f3:e6:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5D:80:79:72:CF:B7:8C:B0:91:15:7A:F4:D7:5D:F5:B4:4C:17:C8
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:fe:48:db:4e:c9:e9:fe:5d:f6:3f:64:53:70:0e:57:c6:
01:2a:02:a6:d1:71:69:0d:0f:e2:d6:37:7d:d2:cd:b5:d2:bc:
1e:1b:ae:25:44:24:3b:e2:57:02:ce:83:b4:58:09:d9:31:d1:
5c:56:2c:dd:dd:fd:6a:db:d5:01:a3:f4:d7:70:c0:5e:b3:d0:
a4:0d:4f:95:4d:7c:1f:5a:2e:31:35:e9:95:24:8d:e2:f0:9d:
fa:a4:e7:bf:73:eb:9c:d4:7f:0c:e1:e6:0f:7e:e6:4d:ea:b6:
b3:0f:31:19:30:78:9a:d4:e8:a2:3c:f3:3a:20:aa:38:94:e9:
8f:36:7c:db:c1:19:5c:e4:fb:27:7a:8b:2a:9e:8f:cb:77:df:
04:a0:67:ea:72:7b:6c:69:78:65:a2:e4:96:76:66:7a:e8:67:
bb:11:69:63:91:9e:c6:f1:85:24:ca:f1:ce:5e:fa:bd:21:aa:
65:c4:73:09:cd:48:e1:c2:50:08:58:97:47:e8:64:76:b6:1a:
5c:18:bf:61:ea:23:b7:98:89:90:a2:60:14:3c:fa:04:69:a7:
fd:c6:3d:5b:fe:b1:96:9c:93:f7:94:1e:bf:aa:81:8e:17:62:
58:b9:16:0b:07:2b:17:e1:aa:95:f1:3c:4b:cc:4b:b3:11:9b:
4e:c7:0b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:09:40 2025 by rpki-client