Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json)
Hash identifier: 4ni2ma85WFI2HE2bT31zszBvxSqeXlOSK5E0MlYAweo=
Subject key identifier: 31:D5:2F:7A:BC:B9:A8:7E:1A:09:00:07:8B:CF:73:B6:EB:EA:78:E2
Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Certificate serial: 0194BBCE52D9BA0281D71FD2743D5E700EF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
Manifest number: 1100
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: FGt2EDF01BtKvOu/UECb1RfFR/gt25qr0WuuoYwatAA=)
2: eBm4FcENh4mdv8uF5hjrhyaeTNk.roa (hash: Ler7/mk93wlcxw6BHOT02mce04EHfQvKLLwFRXlVbjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:d9:ba:02:81:d7:1f:d2:74:3d:5e:70:0e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=31d52f7abcb9a87e1a0900078bcf73b6ebea78e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:e3:df:b6:99:e8:e5:e6:46:bf:21:f9:8d:
fe:fe:f2:6a:be:93:97:c4:b7:66:88:ac:43:15:ee:
ce:7a:8c:46:b2:80:56:ec:4b:0d:ca:d0:b4:5e:b2:
08:d7:b0:3f:87:b7:64:cf:d6:ae:ee:8a:77:51:c4:
d8:be:dd:ab:b4:cf:96:68:49:bb:eb:02:24:0f:d9:
76:07:35:12:83:05:c2:47:1a:1a:79:7f:a0:c5:bb:
8f:8a:97:e5:92:32:13:a0:7b:78:40:65:64:4e:b9:
28:45:33:ea:28:46:a7:72:e5:c3:0f:f9:b3:95:52:
71:7e:ba:86:47:ad:6a:e5:d6:aa:36:71:7b:f7:27:
d6:ff:54:3c:a0:83:a8:12:2b:aa:eb:92:08:01:2d:
4a:48:3b:ea:5b:a9:a7:47:fd:d8:3c:3e:f7:0f:3e:
30:1a:6f:16:c0:0a:d7:06:89:74:29:4d:0d:76:5b:
d9:5e:32:32:c7:cc:06:1a:19:4d:0f:45:fb:2e:66:
80:a1:a6:9b:df:f3:49:30:62:c1:5c:c3:ba:77:fd:
3e:fb:b2:3a:97:45:94:2f:54:f8:b9:54:c1:b7:57:
a3:d1:30:91:fa:cc:5d:da:eb:f7:1c:62:b9:7b:46:
15:75:1a:f8:21:3f:fc:0a:be:1a:c1:ec:a3:f6:b4:
e2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D5:2F:7A:BC:B9:A8:7E:1A:09:00:07:8B:CF:73:B6:EB:EA:78:E2
X509v3 Authority Key Identifier:
keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ab:ed:9d:df:9a:c2:f6:6f:47:68:45:c0:dc:98:fa:2d:d4:
2a:32:a7:37:08:f4:f9:9b:aa:24:d9:34:f8:43:df:9b:20:6c:
d8:a1:d9:a0:64:2b:7d:f6:90:4b:33:f5:e1:e9:bf:ac:91:c9:
9f:a2:9d:ba:f2:92:0c:56:ab:08:b8:0a:59:6b:d2:9f:5b:a1:
84:a3:9d:b6:e0:76:01:e5:28:30:e9:c6:cd:6f:d8:cf:96:7e:
dc:fe:1e:54:2b:67:0d:74:f0:82:1e:af:50:f8:f6:8d:5a:e2:
53:39:88:73:75:94:81:72:06:11:e2:e6:92:df:f5:7e:48:27:
07:45:5f:80:7c:67:36:8e:07:ab:06:7e:db:b6:8a:ab:c7:8a:
1f:96:f0:d3:f2:3e:c3:f4:2d:ac:5a:88:4a:9a:51:32:b3:ed:
e7:19:86:1f:98:3a:ae:9d:df:68:e3:64:30:d8:f8:4d:ee:a5:
41:d5:b5:38:df:22:72:50:2b:7d:3a:a7:df:42:9b:88:eb:73:
3b:34:ce:00:6f:83:dc:8e:1f:f9:c4:e7:9a:bf:28:83:f7:20:
64:25:3c:02:c7:bc:ae:74:3a:17:b2:6a:7f:b5:84:93:5c:d2:
04:7b:08:18:4e:ec:fe:3d:8f:2f:21:95:b0:08:e4:8b:63:e3:
80:33:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:00 2025 by rpki-client