
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
File: 94tjVHSP4-hS4GSYKCwhVAB1_GY.mft (raw, json)
Hash identifier: mN1wb8HJMvno8ySL2VyZH+m5K416Jz+f/9DwIxOQbQo=
Subject key identifier: 5C:49:A4:01:5A:54:4B:8F:A2:DB:22:3D:67:89:82:CE:DE:94:A4:4C
Authority key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Certificate issuer: /CN=f78b6354748fe3e852e06498282c21540075fc66
Certificate serial: 0194BD4E90741854CEEEBA3601714AFC0365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
Manifest number: 064F
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 94tjVHSP4-hS4GSYKCwhVAB1_GY.crl (hash: ffHSKPPko2fRX2E6aleQKzM+kwmQten2u30ep8zdAvY=)
2: CxQQAahzMolSX6a9lJ0-pCP5sb4.roa (hash: 3ZL3ARUaIfvA3i9cxAwflRHX+yAdbwGwcvxYxx4l2zc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:90:74:18:54:ce:ee:ba:36:01:71:4a:fc:03:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78b6354748fe3e852e06498282c21540075fc66
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=5c49a4015a544b8fa2db223d678982cede94a44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:8d:7a:2c:dc:98:de:33:e4:39:7c:5d:95:
04:f3:97:d7:86:22:63:8d:4f:f9:cb:50:30:a5:9f:
b1:79:c0:7a:81:6d:42:77:a3:7c:e9:a9:a7:dd:f2:
6b:70:1d:37:a4:29:93:93:c1:ef:a2:32:ac:d4:24:
e0:93:2c:4a:80:a2:9a:92:7d:c2:3a:17:17:64:ac:
ae:1c:7e:54:6a:8e:52:2c:a2:02:50:d1:7a:c9:12:
8b:f1:38:a3:72:b5:cc:b8:f3:d3:f2:a7:0c:84:3f:
ba:07:9e:27:2f:74:b9:e9:87:d9:46:19:3e:cb:5f:
b9:dc:fb:f0:ed:dc:e0:09:6a:1d:73:48:c4:df:8a:
9e:d4:e6:00:68:42:41:f1:ce:3a:e1:cb:99:5b:5c:
30:a9:27:0a:55:79:04:f2:ea:8e:d6:14:ce:68:87:
b9:ef:3e:6e:9d:1b:8f:f4:f0:f5:a6:6c:58:c0:78:
ad:9d:50:9d:0a:36:94:46:c7:90:12:1e:05:92:9f:
48:32:c9:10:14:75:22:f4:e7:88:cf:55:af:f3:3c:
af:f5:9a:e9:a8:f8:86:2d:00:95:c5:8e:e3:2a:c7:
97:29:d3:25:0d:82:86:86:7c:3f:c2:99:3f:dd:d9:
e0:08:d6:d3:0f:e1:4a:c7:e7:2d:5f:0c:42:b5:3f:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:A4:01:5A:54:4B:8F:A2:DB:22:3D:67:89:82:CE:DE:94:A4:4C
X509v3 Authority Key Identifier:
keyid:F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b8:c8:47:36:a4:94:b5:df:ef:82:6b:9f:88:83:b0:7a:85:
b2:a5:69:da:d2:f9:eb:24:7d:40:e2:de:54:be:2e:6c:aa:de:
57:d8:ca:26:42:30:a6:14:63:5f:18:27:ce:e4:f3:01:77:d0:
1f:fd:25:2a:64:44:72:ce:00:6e:84:b3:08:bd:f0:1b:2e:93:
ad:31:04:28:66:01:09:43:87:61:1f:f6:e1:52:8b:e8:b2:a4:
5b:71:a5:8d:7f:aa:33:c2:df:e2:50:92:3b:fc:64:35:ce:a2:
b2:42:be:51:c1:89:60:e0:1f:6e:f4:42:6d:d4:31:da:93:f8:
f3:d9:90:9d:eb:25:36:ef:8d:cf:cd:3c:91:c3:4b:64:b9:d3:
0a:26:ce:b6:4e:f7:a6:9e:22:6e:df:ce:f1:b9:8e:af:17:dc:
be:7f:89:af:71:5f:e4:c1:13:1a:68:ef:4d:e3:bb:f4:7c:cb:
dd:cd:16:96:a1:4c:60:db:6b:c2:6c:12:76:fc:ad:de:40:aa:
2b:d9:12:b2:95:bf:92:7b:94:d0:61:9d:c7:3b:bd:bc:a8:05:
ce:33:11:0f:03:b0:27:c5:9d:1a:47:c6:26:e9:b8:5b:75:81:
3f:d9:a5:14:dc:d1:cc:33:9a:38:a5:3f:48:38:ff:b0:d1:79:
a5:10:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:19 2025 by rpki-client