Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
File: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft (raw, json)
Hash identifier: fonTnZHMGVMlR8LSrMYooDNExFjI5QEAnJiW3iFg8Bs=
Subject key identifier: 43:8F:FC:B2:5B:7A:54:0A:87:72:7A:56:E4:C2:CC:EA:23:A7:E5:06
Authority key identifier: 70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
Certificate issuer: /CN=708029a674177efd99252275094618c0c9cfbd1d
Certificate serial: 0194BC04A636841E8576FBCDAE7BBD2B1DAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
Manifest number: 03F5
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl (hash: R8jUKSf0uxz2O5pxfqz4x3WR02joTajBnCiL7Ag8qIs=)
2: gf0Xy6qbBLzQzsLjIlFfh_7JZjk.roa (hash: Ah/uhPrNkgzcI+es99gluPPaRScN93x4JTQmt+pb9V0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:36:84:1e:85:76:fb:cd:ae:7b:bd:2b:1d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708029a674177efd99252275094618c0c9cfbd1d
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=438ffcb25b7a540a87727a56e4c2ccea23a7e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:db:cd:f8:8e:3e:ff:8b:de:9a:3f:3c:7f:
e3:02:3b:2a:af:27:a8:3d:c6:f6:dc:60:a1:3b:43:
bf:2e:82:c2:97:4e:38:56:f9:12:27:d1:45:17:97:
d4:0b:8e:3f:02:50:22:f9:ec:0a:ed:e6:1c:a1:6a:
86:73:d1:8b:a8:5f:b6:e7:03:8c:18:ee:f5:61:2b:
71:dd:f7:59:56:e7:84:6a:31:05:aa:fe:53:14:79:
d9:d3:e4:87:86:ac:8d:2c:7d:2c:26:09:47:f4:e0:
48:67:2f:2a:bd:94:1a:6d:c4:53:1a:da:01:ed:78:
2c:59:bf:f7:a8:8e:70:b7:4a:91:d2:1f:0d:48:10:
77:b9:d9:41:ba:e9:53:94:8c:1a:ac:aa:91:22:b3:
d7:0c:2f:24:e4:38:ce:c5:8f:cf:4c:a7:05:e1:9e:
25:87:3e:be:aa:77:f9:5c:1a:8b:ac:85:6c:bd:56:
f7:2a:77:ce:3f:4a:e0:f4:41:17:6e:85:c2:fc:b1:
89:3a:92:22:60:ec:5f:5e:26:bd:45:59:03:6b:b0:
f6:36:99:8c:22:aa:8c:30:a7:4a:64:30:29:39:57:
01:ba:dd:b8:f4:2a:35:bc:67:e9:92:20:17:10:3c:
97:f4:bd:ff:8f:0c:c1:d2:d4:40:54:d5:1a:4c:95:
68:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:FC:B2:5B:7A:54:0A:87:72:7A:56:E4:C2:CC:EA:23:A7:E5:06
X509v3 Authority Key Identifier:
keyid:70:80:29:A6:74:17:7E:FD:99:25:22:75:09:46:18:C0:C9:CF:BD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/08d44c-f102-4b70-8db0-72abeefeda4a/1/cIAppnQXfv2ZJSJ1CUYYwMnPvR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dd:92:a3:01:4c:22:5e:c8:d1:e8:80:46:40:e2:54:c2:50:
b1:23:3e:6a:62:c0:d2:65:0c:97:e6:b9:1f:ef:c1:2b:64:d0:
4c:d3:19:11:8c:75:8a:1f:58:4a:8f:fe:74:04:72:e1:c2:4b:
b0:e0:b8:f8:65:01:50:8c:89:1b:e6:b6:48:ef:3c:50:18:50:
9e:8e:05:ef:47:72:10:2c:e9:94:2d:12:9b:45:fb:1e:0e:df:
0a:ae:90:3a:2a:b3:36:28:ee:6a:7b:ce:c2:7a:b8:eb:f4:7e:
f1:19:c5:25:47:b0:38:5a:c2:6e:0b:22:76:31:9d:a3:2d:07:
d3:4a:c4:06:db:3c:b3:fe:d7:0d:60:d5:c0:9f:2f:22:58:09:
59:94:5a:b4:5e:df:39:9f:e9:2e:c5:fc:73:a0:6e:97:5a:43:
ba:cc:a0:b9:a7:38:94:30:79:66:76:b8:66:d2:b9:d2:05:8d:
30:c6:f8:21:67:a5:65:cd:26:71:ad:0b:bd:6c:b1:54:df:23:
05:13:51:cb:a1:81:a1:f4:ee:cc:e4:47:dc:f0:a6:9b:83:f4:
64:12:23:1f:d3:c3:37:81:90:cf:75:5b:0d:f6:62:6f:ba:42:
8f:0f:30:d8:df:f5:14:14:d8:4b:17:2c:b2:9e:a3:7c:07:e0:
b7:4d:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:45 2025 by rpki-client