Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
File: 99MudSlBh9Rujq4Pj-crX9er-IY.mft (raw, json)
Hash identifier: sFKLxE95EuKKObMKPwfoVXZf5PhnvdMONuSr1OqtFRo=
Subject key identifier: A4:CF:9D:99:22:F8:EB:4A:D5:C2:0B:65:EA:EA:53:E2:F7:6E:4A:1B
Authority key identifier: F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
Certificate issuer: /CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Certificate serial: 0194BCAA2A95A73BFCB6FC05BEC3F092C1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 99MudSlBh9Rujq4Pj-crX9er-IY.crl (hash: UKhPMHf2qmAAOGEOc+qeFFOTcdBxMaOD1svC4cfIpbo=)
2: FYg_psCFhdR_n5VNhP25gINYx6M.roa (hash: h+fjKLWgHVAllkPWeuz1NL6KyEoRyUzS/iNO+yf1JFI=)
3: ZhvVa7SGL0ihaaWqEDQl81ffNSw.roa (hash: ytKQDKvlQVK8AL0ByiBKUDRRuwN5/717YGo/cNpO++k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:95:a7:3b:fc:b6:fc:05:be:c3:f0:92:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7d32e75294187d46e8eae0f8fe72b5fd7abf886
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=a4cf9d9922f8eb4ad5c20b65eaea53e2f76e4a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:26:8f:16:7f:01:ac:3b:5b:4e:96:bc:30:
ab:e5:ab:8f:b1:ba:42:86:6c:e8:42:24:1d:f6:4b:
92:e0:1e:e9:c6:90:9e:e0:8c:da:3b:fe:4c:fe:06:
8f:24:f4:dc:aa:0c:94:6d:e5:46:77:8e:e8:6f:98:
a2:0b:75:24:0e:68:be:7c:3e:ef:9b:38:a4:00:c6:
79:f8:bb:4e:a1:ab:67:bf:58:18:47:92:dc:9a:07:
46:62:c9:83:4a:21:3b:b6:76:05:dc:70:64:e6:a6:
d8:05:d5:fe:54:d7:81:4b:1f:35:e8:6b:46:84:1c:
50:0b:78:ab:74:18:41:ce:49:59:be:98:fe:9c:8d:
6f:01:50:a5:47:69:58:8c:4d:b0:14:3d:01:92:ce:
70:bf:ff:4e:3b:ec:fd:9a:61:41:12:a2:f0:3a:00:
dc:8d:cd:80:26:df:a4:e1:28:73:34:ec:ba:d3:08:
4f:e2:29:a2:18:cc:38:72:7e:69:66:79:26:c0:2f:
02:ed:2e:5c:84:c7:37:e7:65:d1:f9:33:2f:f3:42:
88:d8:7f:0c:00:c2:fc:75:98:8d:e1:b8:a1:87:62:
e2:6a:75:d3:ec:53:70:d5:22:a3:0f:65:dc:bb:af:
4f:43:a9:56:5b:9f:f7:19:d1:00:62:3f:0f:be:3d:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CF:9D:99:22:F8:EB:4A:D5:C2:0B:65:EA:EA:53:E2:F7:6E:4A:1B
X509v3 Authority Key Identifier:
keyid:F7:D3:2E:75:29:41:87:D4:6E:8E:AE:0F:8F:E7:2B:5F:D7:AB:F8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99MudSlBh9Rujq4Pj-crX9er-IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d0cc41-c8f1-4a44-91f0-d1a4599cb0e5/1/99MudSlBh9Rujq4Pj-crX9er-IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:9b:ab:66:da:a1:84:0a:fe:88:a4:4b:ea:91:99:89:60:
2d:fa:e9:40:45:8d:97:bd:c7:a1:f7:49:1e:41:08:dc:07:d8:
75:44:7a:81:3d:12:4c:6e:b7:65:d1:86:10:29:cc:1b:93:a5:
0c:c3:fa:c1:dd:e7:fe:fd:34:ef:ad:3a:7d:4d:56:5b:dc:d8:
d9:22:45:75:b8:43:4c:5d:49:ca:2a:a2:5f:ee:c8:0f:b7:26:
66:f2:ea:b7:6e:d5:83:be:5b:65:95:03:c0:0c:39:75:68:17:
e2:be:3a:ed:4f:f2:15:a3:71:a4:fe:e9:b3:bf:1e:ef:87:4e:
df:2b:35:c4:4d:6f:a4:d2:73:b8:49:8f:4f:59:91:15:ae:89:
84:4a:3a:ad:bd:3f:5a:e3:1f:05:f7:5f:df:e8:2d:a8:c9:e7:
79:f3:d1:12:f9:17:c2:87:54:3f:94:86:4d:21:3b:47:2a:f2:
50:d0:3b:da:d8:cb:26:46:89:b3:9f:72:7c:0b:4e:22:dd:87:
f8:34:54:d7:a1:d1:ab:d9:73:2f:21:c8:63:16:90:b1:1f:2a:
c2:8a:55:29:bd:1c:a1:cd:99:67:0f:1e:89:61:1b:00:e0:bb:
3f:cd:5f:5c:0e:6a:b8:3f:76:56:da:81:a6:42:86:c5:25:3d:
54:30:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client