Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: yEWF99NmcXUFyPAqnH8Madm9fDJZJEAg7b1J50sKMRc=
Subject key identifier: F9:D1:CE:98:78:68:B2:FF:7F:4E:0B:D2:D4:51:71:73:CA:06:59:5F
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 0194BD859E8DDCD3EB9A67261F7B7C82C522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: C8
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: jl11Ez6jWS25kHu1X2lbot0ZEtlkv0JTgln5RcF0Qdk=)
2: zJVAm_Aoh0U8gwZ5WRQsBP3hX6A.roa (hash: +sPk6LCRSFLjFRp6ZIQ4HhKiMmXE+FxNLLLGnfyG87E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9e:8d:dc:d3:eb:9a:67:26:1f:7b:7c:82:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=f9d1ce987868b2ff7f4e0bd2d4517173ca06595f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:10:43:c4:7a:c6:fa:b5:9d:69:e9:ed:07:
a9:ad:9c:66:79:d9:49:17:4e:41:2e:23:5e:5c:72:
d0:21:9c:f5:12:59:d2:15:2a:9a:bb:00:ef:bf:45:
26:ac:6d:b5:e3:ee:f2:27:e8:2d:57:ab:eb:d9:19:
b7:60:c7:3e:a3:61:2e:de:87:11:43:be:b5:3d:e8:
90:00:18:0b:fa:e4:65:90:7e:80:f2:ac:a6:7f:42:
df:a2:21:b4:e0:c1:a4:8a:95:5b:c9:6c:60:e2:72:
d0:90:31:3c:74:4e:a8:7a:46:6d:23:8c:10:50:d9:
87:c5:da:33:b7:fe:56:bf:d2:76:30:01:17:62:0f:
ea:06:b2:f7:4e:d2:8e:3d:74:65:fb:7c:6d:bc:d4:
f9:eb:fa:90:d1:41:11:b7:9d:c8:d7:cc:f7:32:77:
4d:21:d4:fe:42:47:17:f5:3b:09:a9:9e:75:2d:de:
11:71:5e:78:66:2f:6a:50:cf:fa:d2:4a:8b:ed:d9:
71:c8:3a:0d:b9:16:15:0c:84:30:78:d1:80:d0:29:
b6:76:61:d2:d6:e5:96:df:d8:61:84:ec:da:54:7e:
3a:4c:1b:2d:2f:3a:4a:57:0e:f8:85:77:46:4f:d4:
b1:14:87:ad:03:75:e0:20:00:79:e9:75:a4:2f:bb:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D1:CE:98:78:68:B2:FF:7F:4E:0B:D2:D4:51:71:73:CA:06:59:5F
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:16:c5:a5:f2:51:f3:14:f7:3c:ca:7e:f8:88:08:e3:59:c0:
f2:62:76:6d:8f:db:fc:92:98:8c:82:d6:db:c4:2d:7c:96:bc:
18:bb:49:3c:23:eb:e2:14:d2:d8:4a:0b:d8:a3:5b:24:04:96:
f9:5b:5c:85:31:c2:cf:b6:1e:8c:c9:93:ea:53:27:5d:9c:b3:
0a:c6:3e:83:b6:c9:cd:ea:31:5f:b8:45:b1:a6:64:5d:9d:03:
8f:d6:11:9b:62:cc:27:f5:b8:ac:de:a6:04:cc:37:d5:ea:36:
9a:b2:c1:43:a8:02:46:70:dc:b8:51:d7:d4:99:59:ad:64:fa:
36:8b:5a:22:01:0a:05:f4:f5:05:f7:a2:e7:27:fc:77:07:f0:
50:2e:5f:55:00:5e:32:bd:8b:e3:27:a2:3a:89:fb:e0:e0:bf:
70:b0:48:ac:2f:3e:97:04:a6:9a:c4:64:7e:34:c1:65:a7:f5:
0c:3d:a9:23:87:0e:af:28:09:d5:95:6d:a3:84:c6:e4:94:74:
8a:b3:8c:e9:b0:31:bc:07:9a:78:0d:8c:e6:dd:9f:af:ab:90:
8d:0f:3e:cb:a3:b9:4c:7a:cd:da:c3:b9:df:fd:77:1b:52:fe:
f1:14:25:74:68:13:a7:21:42:e5:07:f2:47:fc:1e:f8:82:72:
9d:41:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:00:54 2025 by rpki-client