Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json)
Hash identifier: Pt4467cm94pcCP92PrARJMNij3x17lfx9MwnQXd8cyw=
Subject key identifier: 03:49:F2:F2:28:DB:84:29:06:71:EA:AC:72:EE:7E:56:40:67:A7:8A
Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Certificate serial: 0194BD4E468EADA6BF2630089C6386420F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
Manifest number: 07DA
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: kFrABX4NgYahPPf9lG3NMJiKeXHacjHTzqlVd0Gu7rI=)
2: JFMyA-XTfzJ98LwUaDo6uCal6eE.roa (hash: 53iyOJ7/FikpZ4x6oYvSunvmMxLDuiMuvaZO1jcps9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:8e:ad:a6:bf:26:30:08:9c:63:86:42:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=0349f2f228db84290671eaac72ee7e564067a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:79:d4:66:dc:5a:ad:c0:14:da:a7:11:7a:
17:83:cc:1b:31:50:e6:69:b5:85:ef:b8:3c:76:aa:
f7:4b:7e:16:dd:67:0b:e2:f5:84:d8:e6:b5:90:52:
13:f6:6d:a6:37:ef:e3:00:55:ca:82:7b:a9:4b:d4:
13:6b:77:c7:07:ed:b6:76:e9:78:91:4c:c8:9b:4b:
d8:77:6a:7c:f4:8c:28:da:56:04:5f:c7:ee:00:e1:
da:4e:58:1e:27:16:b1:9b:23:69:d3:31:43:c1:90:
83:ee:3e:27:8b:41:86:83:77:4e:ba:1a:17:3b:50:
9f:c8:e7:e2:ce:72:ae:fe:b2:56:11:b5:19:28:0c:
2b:be:ca:e5:7b:e6:a4:b2:73:34:00:4b:8e:94:66:
03:0e:2b:76:01:5f:d2:36:63:28:87:51:88:e3:dd:
3a:aa:87:f5:82:6d:a2:36:f9:37:3e:d4:45:75:a1:
0d:ed:09:6e:2d:1a:ba:96:3e:d8:56:e2:2b:b5:3e:
02:2e:18:bb:94:c3:2c:8e:18:01:a2:3f:9c:3b:85:
eb:1c:d4:03:da:4c:92:6d:be:33:72:3b:3b:f1:e4:
da:6b:a7:ab:78:39:42:cb:da:cc:80:94:7e:19:0c:
03:22:fb:29:da:cc:06:3b:89:a8:21:f4:e3:39:98:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:F2:F2:28:DB:84:29:06:71:EA:AC:72:EE:7E:56:40:67:A7:8A
X509v3 Authority Key Identifier:
keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:ab:4c:ad:26:2c:39:61:79:0c:4f:33:7d:bb:67:27:49:
c5:42:d4:c6:db:8f:e8:96:e9:47:b6:e9:c1:4e:9a:ee:75:42:
32:6a:f3:c9:5b:13:4e:9e:6d:4b:ed:2f:97:ac:38:ee:d7:98:
77:76:d6:dd:91:b2:34:c6:16:9b:75:6e:72:37:04:5d:3e:0d:
9c:93:46:df:13:0b:76:da:65:8e:4e:77:dd:30:e5:25:3e:1b:
29:d5:ba:9e:a6:47:3d:4f:fc:71:98:da:c8:67:76:b0:a4:a6:
e4:2f:af:d0:74:c7:16:2e:0d:1e:b5:77:f1:5e:e0:07:16:82:
71:b7:fd:20:2c:dd:65:07:87:f2:b9:02:79:63:89:c0:bf:4e:
2d:f5:68:11:9f:2c:1e:e4:e7:ca:6d:71:7b:5b:5b:a7:40:c8:
0f:21:18:2d:55:2b:4c:ab:19:0c:f9:f5:d5:11:af:aa:93:5b:
e2:ab:3b:04:4e:26:ef:38:1e:f7:ac:24:ab:29:0f:ab:23:5a:
0e:d8:7f:3f:7b:f9:e4:f1:f0:19:d5:2e:82:f3:52:1d:6d:3c:
a4:e0:9c:de:db:55:96:77:30:bc:4d:ca:57:0b:3a:98:e5:e2:
3a:9d:a9:e1:53:63:e7:40:ee:ce:09:00:0c:6e:bf:fb:ad:0a:
79:25:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:06:25 2025 by rpki-client