Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File: 35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier: HvMJ0kxYUNSOJGLLKWTArQNdoT5qBzS351dpRSW7dKs=
Subject key identifier: 1F:F1:2C:29:80:AB:0D:B3:F1:DE:2C:87:F7:CA:71:5B:80:F7:92:8F
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer: /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial: 0194BC3C234D27D2EABB56454776FB107E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number: 1050
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: yC7pGpqqeJkfCn747ZfwFbn15jd7kr6kg+H9ux8TNao=)
2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:4d:27:d2:ea:bb:56:45:47:76:fb:10:7e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=1ff12c2980ab0db3f1de2c87f7ca715b80f7928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:56:03:30:aa:7a:ab:23:c7:65:1b:21:17:
7c:da:90:38:f1:1f:d0:1e:42:5f:23:ae:9f:47:03:
ac:db:16:2c:34:1e:c6:d9:35:10:17:99:69:84:54:
cd:4f:b9:25:40:1b:b2:c0:33:cc:92:21:82:d7:2c:
4f:5d:70:d1:16:b2:35:1f:9d:f0:22:24:ce:eb:a3:
ae:a5:1a:5c:0f:c4:b1:05:e4:d8:9e:37:a0:86:77:
a7:b0:c4:3a:de:e8:d8:30:74:5b:1c:bc:4f:53:35:
49:cc:1f:ad:ee:0a:c9:eb:da:1e:ff:58:aa:26:ea:
ce:cc:53:ae:21:6f:77:7b:e3:00:26:c2:44:f0:d4:
74:ea:33:5e:71:65:db:04:6a:0a:93:19:17:ee:e0:
b1:d0:d1:d4:0c:a5:20:ba:a2:ae:e9:07:83:1d:df:
7e:ab:b9:01:14:33:84:13:a4:03:e0:a3:6d:93:d5:
9b:49:48:0d:25:e7:ca:7f:7c:99:08:4e:a2:22:8a:
2a:da:14:02:ec:51:a7:d0:e5:f5:3a:b9:cf:cd:e7:
66:62:f7:61:23:ff:4f:65:d8:4f:85:73:f8:44:93:
b8:71:98:4a:7a:82:1e:3e:68:59:6e:36:76:5e:4a:
2a:48:59:bd:56:a7:f8:f7:73:59:fe:d0:ef:88:f5:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:2C:29:80:AB:0D:B3:F1:DE:2C:87:F7:CA:71:5B:80:F7:92:8F
X509v3 Authority Key Identifier:
keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:de:d7:7a:b2:ab:a0:c4:2a:01:f3:d4:e7:f1:e1:4a:a4:90:
fb:41:85:9e:4f:0c:7f:d3:be:25:5e:6d:12:98:76:07:69:c0:
1b:30:ea:17:6e:a5:94:eb:8f:b4:d5:7a:69:b0:ab:97:78:31:
5f:90:37:9c:ea:05:33:dc:5b:fd:66:f0:29:63:7a:4b:16:f6:
53:f2:7b:73:62:9e:95:02:27:69:53:b4:db:41:47:13:6d:92:
29:b2:1a:d5:2c:24:58:fe:03:33:27:9e:91:a3:87:10:6e:ee:
40:8f:20:15:fa:ac:bf:18:7c:61:59:b8:75:0e:38:36:c2:b1:
68:81:76:01:fc:16:9c:6a:a3:bc:35:00:cd:cd:37:fd:31:bc:
f7:77:e8:c4:ae:66:f3:90:8b:c1:5f:8d:e9:3b:bc:79:1e:df:
56:68:41:07:75:df:77:d9:77:60:c5:a4:5a:90:75:a2:40:cf:
f0:26:82:6f:0f:35:d8:9d:87:77:5a:3b:63:50:ba:54:a6:a6:
86:6b:0e:81:1b:44:38:8c:2f:63:af:0a:57:9f:b9:c9:c3:7b:
5b:3b:14:de:6a:32:eb:c9:ff:85:25:e0:37:f1:b8:05:2a:20:
ab:75:19:84:a8:a2:ce:66:a7:e7:13:74:57:1d:c0:03:58:6f:
6f:91:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:13 2025 by rpki-client