Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: aVaPeN0FsPqw2GcyL1L+APaSgBDunNQ3U8tY3l9XBYU=
Subject key identifier: 79:91:34:89:33:BC:06:54:A1:71:20:0C:C7:84:E6:F1:D8:E5:43:BA
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 0194BC04AFAEEF200C78C4FD4C8359B8B1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 1357
Signing time: Fri 31 Jan 2025 11:00:11 +0000
Manifest this update: Fri 31 Jan 2025 11:00:11 +0000
Manifest next update: Sat 01 Feb 2025 11:00:11 +0000
Files and hashes: 1: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: PKwo7b4X98cUQVp79E9sAEVnuz57bQV8ia0arwcVJQc=)
2: qtSiJdqBkG0uo9WVYHWv-Gpf4SI.roa (hash: tDTpVD4J8FxzW7VK20T8qWOQjmWt3jizwnkYWluPqRY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:af:ae:ef:20:0c:78:c4:fd:4c:83:59:b8:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Jan 31 11:00:11 2025 GMT
Not After : Feb 1 11:00:11 2025 GMT
Subject: CN=7991348933bc0654a171200cc784e6f1d8e543ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:66:0d:3a:be:35:c9:4b:f2:13:db:2f:bd:
31:4d:ff:5f:24:f3:ce:72:78:1e:6d:24:f5:eb:8c:
5a:ce:9f:8c:a1:75:58:72:41:a4:ee:c6:69:95:95:
e2:22:99:61:3a:79:86:00:eb:f1:99:a4:b0:00:6a:
dd:87:5d:3d:41:95:c2:3f:2a:df:4a:02:4b:e3:99:
c8:f1:f9:f4:b4:93:81:a2:6b:29:69:80:07:c3:1e:
64:47:ab:37:8d:ca:29:d6:6e:17:0f:64:db:dd:79:
ec:0f:11:fb:d7:90:13:e0:5a:fd:ea:10:a0:5f:90:
16:de:3d:d7:0a:2d:8e:0c:bc:ee:93:f2:71:12:2e:
6a:fb:79:a1:88:fa:33:f9:27:02:20:66:ed:72:a6:
f5:e5:12:45:8b:97:92:be:28:80:37:d0:bf:bb:f1:
e9:53:c2:b4:8c:7c:0d:e5:2a:40:13:f5:d7:32:69:
2d:7b:58:9c:cd:54:ec:d1:9e:39:10:6c:c2:20:4f:
8f:59:bb:cf:3b:98:82:2f:26:55:22:3e:5c:3c:8d:
21:f9:4d:4d:97:ef:56:9c:c7:8c:ea:26:ea:8a:2f:
2c:d5:88:1f:b6:dc:ab:57:e1:74:3b:03:46:b5:0a:
99:6a:ed:b7:82:4b:d9:dd:98:ed:34:41:49:7a:50:
35:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:91:34:89:33:BC:06:54:A1:71:20:0C:C7:84:E6:F1:D8:E5:43:BA
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:6a:8a:4e:ed:ef:52:31:8a:81:96:18:16:5e:b3:27:cf:
fd:2b:3f:22:bf:1d:82:00:c6:70:ec:bb:10:2e:03:70:d1:12:
73:23:38:30:82:e0:e5:12:bb:5b:7c:44:20:51:df:5f:73:ad:
35:97:60:42:8e:ac:49:a9:43:1a:0c:12:e4:27:1f:57:8a:57:
d6:7e:a8:9d:39:b0:06:8a:29:a5:58:fd:3a:84:1b:06:07:34:
f7:40:4f:b4:3a:5e:82:89:0f:15:09:d2:de:4c:95:a9:b1:84:
00:42:88:57:95:d7:8c:b1:c6:6d:ba:04:d7:c5:1d:8a:bf:12:
cb:68:74:35:ef:3b:d3:98:15:c5:b1:7e:90:be:5e:2b:76:61:
0f:56:82:e4:dd:0d:35:7d:87:27:c2:ff:0f:56:ed:a0:bf:05:
9e:e9:75:3e:68:7a:69:0b:f0:85:08:b0:94:48:d6:d0:4d:70:
af:73:04:62:91:62:60:2f:cc:92:84:b0:46:ac:fc:05:64:3f:
8b:1f:cd:44:93:01:2d:db:40:42:d2:41:7a:98:5f:0c:39:2a:
31:c5:ad:2d:ec:59:1e:2a:72:57:ee:c2:c3:cd:f1:4f:4e:da:
41:f5:ca:4c:37:a5:b3:91:9f:11:b7:38:81:b1:5b:a3:25:df:
f9:40:ce:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:55:05 2025 by rpki-client