Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: cZ4k/7kKdGTTIU8UlCJR3DJpU9oBLyDfWwr9Vt4c85c=
Subject key identifier: 3F:EF:F9:1A:86:D6:C1:2B:20:CF:F0:07:E1:71:47:62:65:FE:E6:93
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 0194BCAA088D8CAE6BDA9C632B676EDA523D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 08CF
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: DU+uZsO//PEt4KX9gTEIMskjZuscmXBWD283v5tYTMA=)
2: cJOETGpzF01z2PB9BHQ2YdHB3Oo.roa (hash: ddSAvoAgeQ9Rf29fTQhbhEaJlnO0oFB6dwFmZVNzK/g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:08:8d:8c:ae:6b:da:9c:63:2b:67:6e:da:52:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=3feff91a86d6c12b20cff007e171476265fee693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:7a:1d:73:4e:24:bb:af:b5:1f:42:d4:67:
0f:ed:83:08:ad:3f:ca:8d:c0:f3:7a:04:d1:c4:70:
fe:6b:79:d8:04:42:a3:4b:0f:99:92:08:57:71:47:
f6:19:25:76:dc:41:2e:c4:5b:d9:b6:35:b2:fa:f6:
d8:ae:34:c4:f4:9b:f0:76:95:59:74:0e:8e:82:ca:
5c:b9:d5:b0:c3:71:8d:ea:82:af:de:bb:76:ba:2c:
02:f8:ce:60:11:f5:f9:f4:a2:59:b4:cf:e5:12:65:
75:e8:64:fe:38:fb:67:52:47:bb:6a:06:45:8b:20:
0a:6c:dd:f4:2b:c9:f3:27:a1:97:19:11:e7:60:db:
fc:99:a4:fe:18:53:95:be:bb:8b:7e:be:da:9e:3f:
4e:f9:a2:f2:80:e2:51:9a:98:c2:79:fc:31:44:fc:
36:ab:d6:ac:74:78:75:32:bd:69:7a:eb:8f:fa:50:
20:66:12:5d:e8:63:ce:93:c0:de:94:9a:dc:e9:d1:
95:e4:25:61:ac:41:3b:99:41:51:ca:6f:1c:de:45:
52:19:21:bb:f5:38:cc:9e:8f:1b:f1:5e:3b:2b:26:
2e:6d:c3:20:ce:99:48:34:fa:72:3e:86:fe:ab:9e:
01:65:d2:b9:f5:cf:45:2c:39:56:a6:2c:24:77:fd:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:F9:1A:86:D6:C1:2B:20:CF:F0:07:E1:71:47:62:65:FE:E6:93
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bf:16:04:2f:17:90:c3:65:23:f7:96:89:3c:2b:11:56:91:
ae:0e:59:89:ee:d1:f5:d1:f8:cf:da:3c:38:28:4c:87:2a:ea:
5a:41:fd:dd:e3:eb:26:1e:80:ca:ce:54:fb:d9:d2:44:1d:15:
8b:9b:bb:f5:e5:d0:d8:5b:9b:31:bc:03:54:55:11:11:84:bc:
71:a1:32:d2:cc:0c:09:ad:c5:83:21:c9:e0:5c:08:18:a9:23:
3e:2a:2f:1f:47:86:1c:00:90:93:df:c4:0a:e9:9e:74:44:7c:
c7:a8:ff:81:d2:bd:f8:44:ff:1a:1d:84:a8:e0:d5:13:71:c3:
a4:6d:89:e0:88:66:ad:4a:f7:6e:db:83:54:1b:21:34:49:6c:
27:f2:e1:40:26:9b:44:83:16:37:86:2b:c5:e8:6a:7f:c3:71:
15:e7:5a:1d:63:13:1e:5e:ea:97:01:75:af:a5:c8:bc:a7:04:
78:aa:82:20:3b:fc:70:2b:ef:48:fd:b0:8d:a4:52:09:5a:a0:
b8:35:70:dd:d4:28:70:2e:a7:b3:67:1e:38:8c:5e:13:00:69:
9d:91:e4:c2:f5:70:67:20:93:a4:05:fa:d6:f6:ef:03:9b:c8:
1d:85:b5:1e:56:ae:d2:54:70:81:ab:2d:2a:4d:3e:91:43:8a:
8d:c9:07:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:40:44 2025 by rpki-client