Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File: 98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier: DuZuTUWbjxXwWzJ5PnU/6Y2rn8i9Fsu60Y/Caez3chg=
Subject key identifier: 58:DF:BB:84:D0:42:47:4F:96:26:8D:FF:D1:51:B3:DA:28:0A:D2:48
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer: /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial: 0194BCAA2CCE2AFB95E60803846E155801B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number: 0C00
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: JvgO/Nq/cv7aR3eMbKl9FRQUg9U8HQdcJ1rCcBfayQg=)
2: xGM69jz3lBB1TpIDVJ5nLe6CA9c.roa (hash: SYU2Je8e6GjpcEI+Nr3BgTNyIlBoXqCEqRNdDn2ooEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:ce:2a:fb:95:e6:08:03:84:6e:15:58:01:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=58dfbb84d042474f96268dffd151b3da280ad248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:c2:82:50:6f:5c:05:ee:37:2b:37:29:ec:
98:87:60:55:bf:06:cd:64:49:30:6c:4a:51:c1:64:
f5:1c:22:7b:fa:a2:8a:ca:c4:41:76:7c:a0:68:a9:
9a:88:30:0a:1e:2c:b2:3b:e4:9f:e8:f5:00:92:6e:
12:c9:56:2a:98:eb:1c:d7:3c:e9:20:c5:ed:ec:ea:
29:95:d8:d5:f7:86:7f:34:0a:c9:b4:38:f6:8c:f4:
90:4b:bf:49:af:c7:4a:6a:a1:ab:3c:ec:0f:dc:3f:
7b:91:24:4d:af:59:d5:5d:9f:92:1b:57:58:96:38:
d0:42:ce:41:d0:19:45:c0:9b:e4:ba:3a:d7:83:0f:
75:d4:fd:2f:eb:8d:fb:a1:4b:92:7c:84:0c:8c:ec:
1d:49:8a:56:bd:6a:94:1d:49:4c:cd:82:52:ea:79:
70:fb:52:3c:a3:b5:2f:a2:58:16:ba:ae:69:4f:67:
5c:65:dd:22:69:3d:df:bf:55:bc:dd:7b:16:f2:bd:
8a:31:b4:cd:bb:99:b4:eb:17:f0:1f:d0:2d:95:e4:
d3:a1:33:63:0f:2e:4b:b3:ce:86:1b:38:76:d3:a0:
ea:28:40:d8:32:69:4c:de:a9:94:12:0e:98:c1:91:
f2:ab:f3:90:c5:fe:b3:bf:38:09:d4:75:05:d5:af:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:BB:84:D0:42:47:4F:96:26:8D:FF:D1:51:B3:DA:28:0A:D2:48
X509v3 Authority Key Identifier:
keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0b:10:4f:dd:85:26:26:f3:4f:c4:da:ef:16:96:49:4f:7c:
ab:41:07:cf:96:41:d7:98:95:c9:88:03:a9:2b:7b:39:6d:85:
bd:cb:16:f1:7a:56:40:d3:4e:fa:40:2e:cb:04:d9:ae:7c:62:
a1:d5:19:b8:45:ee:da:af:ce:b8:01:3f:8f:37:5a:1d:a5:47:
c7:07:d5:2f:c6:4a:af:c0:e8:ca:98:07:2a:4d:3b:38:ff:68:
b5:61:ce:77:d7:33:8a:19:20:a6:09:33:ad:1d:cf:7b:cd:f3:
b7:af:54:f4:83:40:55:05:ab:35:b0:64:c8:2a:24:9e:8f:3d:
aa:02:d6:a2:7b:4c:2a:8f:62:8e:ea:1d:67:33:19:fa:18:89:
e3:70:7e:cd:23:ce:4f:73:56:bc:eb:a8:19:e0:b9:8d:bf:0e:
b4:46:0f:93:81:6d:ca:0a:b6:ca:6c:ca:ba:a1:9a:40:9f:c2:
4d:c6:e1:6b:f3:19:5e:2b:25:6c:4b:9e:d8:9f:45:10:f1:96:
4c:89:bf:5f:a2:a9:cb:5a:26:b3:4c:65:1b:af:b4:0f:09:b2:
4f:4a:17:06:dc:37:26:71:9d:3c:3d:9b:f3:ff:f6:9e:76:35:
49:81:6f:3b:cd:c3:c8:a7:e1:7c:7a:d1:00:17:95:eb:42:89:
b9:9a:c1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:24:49 2025 by rpki-client