Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: 3eF2yLrigMBB5H35Hiwpq2WE586bq+yebqFC8EVBLEc=
Subject key identifier: DC:9F:11:7D:CF:A0:AF:E6:D0:34:E9:94:9E:11:9D:C4:0F:29:36:B6
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 0194BD4EC368D217EBD7E068B89FAE764FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 02F1
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: 15nuEbngiVnAaO6NsQD5JxYVUIIDbRpE83KSG1w6Njo=)
2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c3:68:d2:17:eb:d7:e0:68:b8:9f:ae:76:4f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=dc9f117dcfa0afe6d034e9949e119dc40f2936b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:d3:d9:82:46:28:cc:af:5a:1c:d1:57:3d:
b2:42:b7:68:25:b6:8c:5e:6f:8e:60:21:fd:b7:88:
c0:d9:49:4c:a3:38:4b:9b:57:74:6e:c3:60:3a:bb:
ae:59:a4:b0:74:5a:f9:c4:bb:28:a2:3e:f3:e4:45:
f6:b2:04:40:76:b7:f1:11:d6:14:2a:5a:a8:3c:fe:
4f:25:99:7b:95:55:50:c6:ae:1a:03:1a:ca:b3:d1:
5a:ec:d3:c8:cb:0b:b3:9a:db:43:ff:f4:5f:62:f9:
ad:6c:cf:81:ee:31:15:b8:5c:34:f9:6a:0d:bd:51:
01:5d:1c:43:ae:c9:40:77:e3:cf:af:2b:f8:e4:ad:
f0:ae:db:1a:bb:00:a9:56:f2:92:e3:e8:0c:51:62:
f9:bd:e0:86:08:42:90:d7:76:3a:d9:b7:02:80:a0:
f1:4a:10:1c:ed:14:90:53:ba:d6:c9:c2:eb:06:3a:
a3:d2:7f:46:5a:9d:d9:68:cb:7f:3d:27:64:b6:99:
1b:a7:34:8d:b9:06:86:5e:b2:9b:9b:ff:9a:49:af:
15:69:cf:fa:83:3a:14:08:e8:f3:5b:56:90:df:6f:
5c:91:13:80:26:13:ac:e5:38:5c:dc:58:52:b0:81:
5e:d1:1b:69:ad:7b:5d:33:89:91:bc:a5:da:14:0a:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:11:7D:CF:A0:AF:E6:D0:34:E9:94:9E:11:9D:C4:0F:29:36:B6
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:74:ea:7e:e2:d9:f1:5f:c2:ff:52:66:b7:34:be:67:fc:07:
fa:ae:fe:23:53:ce:ce:f3:d8:65:9f:10:f1:dd:f4:69:88:11:
e0:e7:80:42:33:f3:54:da:e9:57:bf:18:7a:a3:67:8e:6e:03:
02:6a:d2:6e:c1:61:23:ed:4a:42:34:7b:01:d3:b4:b2:34:8a:
cc:2b:33:1d:57:82:af:8f:47:17:5c:79:4e:85:1e:ad:cf:39:
18:9c:fd:4b:01:41:bf:fe:d2:b5:a0:66:ab:94:a7:ed:04:15:
f0:1e:ab:c1:6a:a1:39:10:cf:88:e7:ab:5b:bb:59:a4:d9:50:
89:f9:a3:d7:05:9a:89:51:07:2c:1f:30:d5:70:84:01:eb:2e:
b6:10:25:59:f4:32:f7:32:ca:c0:05:08:5e:c0:45:75:6e:9a:
93:12:b2:63:16:86:aa:db:36:aa:a1:9c:98:ef:25:57:e5:d3:
92:ae:0e:74:ca:f9:98:ef:66:58:d0:02:66:22:ff:6e:4f:47:
c7:64:cd:c0:cf:80:84:74:7a:18:6d:84:16:66:05:72:5c:32:
e4:20:e4:e8:64:f6:a9:a5:e4:44:98:d3:20:e6:ff:b8:ab:8d:
61:d0:f6:a0:64:8f:4f:1d:ae:ca:b5:f2:f4:d2:47:5c:34:da:
d0:52:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:42 2025 by rpki-client