Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
File: cyrf7tpQvgNppSvklRoJOWh0T2c.mft (raw, json)
Hash identifier: XFqugQRzXnPreXngx1pmvEUw/vyqYLegA41h1kNcRiI=
Subject key identifier: 63:10:1D:D8:CF:FF:5B:C7:0B:3E:46:05:7A:EF:02:02:4E:63:C3:11
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Certificate issuer: /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial: 0194BCAA100FCD3DB0490780878A45B9E41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: cyrf7tpQvgNppSvklRoJOWh0T2c.crl (hash: MI63txyaKQSQ+pxcaPiSq5B26LmHLixIjsyLGZRqck8=)
2: iWUxkOVOJ0dHG6XwlL6N62EBA8A.roa (hash: LWKn33EIgWdLazFAzsPhYYYyYUHzgB/1rOhW1vxG50c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:10:0f:cd:3d:b0:49:07:80:87:8a:45:b9:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=63101dd8cfff5bc70b3e46057aef02024e63c311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:4b:e4:58:f5:c3:02:61:ab:1d:b3:54:d7:
65:fc:9d:7b:30:28:97:89:37:04:cb:b8:a1:cf:bf:
df:ee:b5:ca:f7:12:5f:83:bf:71:0a:04:9a:4e:72:
14:4b:89:5c:6d:fd:7e:5b:d9:8e:45:3d:41:d1:b6:
f0:49:83:55:38:20:d3:c1:be:36:f0:f6:d8:36:a0:
46:80:a1:b7:98:70:88:4e:4f:0e:87:b5:6b:14:09:
d9:50:3b:f9:42:95:6c:3f:73:5c:dd:a4:cf:e5:2d:
eb:16:72:4d:f8:7b:8a:b0:54:83:f8:f6:fb:5c:b1:
9d:cf:67:0a:a0:6a:f9:a2:1c:aa:b8:9d:07:b2:a6:
75:06:d2:60:30:00:df:39:fb:fc:dd:82:92:ff:7c:
72:26:ea:6d:49:d4:a3:5f:43:cb:c3:f8:d7:00:0f:
c3:0c:db:75:f3:58:44:8e:73:c4:73:5e:54:18:05:
17:1c:a6:dc:ac:60:58:75:7a:bf:b6:5d:99:54:87:
c9:63:0a:c4:87:27:4e:a3:82:2f:77:2f:96:30:9c:
4c:ed:4f:b0:a1:de:ea:5a:8f:92:1a:4d:ef:73:e8:
b5:ee:12:ad:b3:49:89:e3:1d:7e:db:6a:36:45:50:
c5:23:ed:1b:68:34:b5:8a:34:a1:67:82:8f:b5:e7:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:1D:D8:CF:FF:5B:C7:0B:3E:46:05:7A:EF:02:02:4E:63:C3:11
X509v3 Authority Key Identifier:
keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:8b:c8:6b:5e:45:b5:67:2c:11:54:98:0d:3a:7d:41:b4:
16:ee:5d:b7:d1:16:16:4b:dc:6a:94:7f:f0:6b:bc:07:39:ff:
7f:9c:1f:1f:64:ee:fc:61:1f:2f:4e:92:e1:8b:81:83:53:41:
4a:bb:89:a9:39:db:cd:f4:61:27:0c:54:f5:bf:d7:a4:5a:d2:
43:47:0a:8d:db:b1:77:70:1f:c0:ca:f3:ca:fd:8b:6a:1b:04:
a9:d1:af:37:43:37:3b:2f:71:68:98:ec:f2:9f:02:37:37:f9:
84:f1:d5:e9:3d:8d:1b:83:65:55:dc:c4:20:55:90:de:44:7f:
63:e2:94:db:37:2f:49:0b:51:e8:72:90:50:50:5e:c9:0b:14:
9a:b5:b7:2a:4d:d9:f7:98:db:ce:53:61:49:89:b4:fd:48:29:
6f:78:af:4f:46:e5:9a:71:19:4f:72:37:35:c3:43:5a:fe:16:
9e:eb:31:2a:04:15:d1:66:dd:d1:76:cd:9f:02:be:56:c2:dc:
95:03:19:c9:45:7a:30:20:34:56:9e:3b:82:51:d2:81:1b:7f:
55:c7:ed:21:3a:85:90:c1:71:91:51:cb:69:a9:d8:12:69:7c:
85:3b:6e:9e:2c:6d:9f:e8:22:c3:b0:7b:69:f6:52:85:0a:a7:
79:d0:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:49:21 2025 by rpki-client