Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: iMnZOhr5/xZ0hs8GTiLRWVD1vUV0GT5H5Y75gz63aZ8=
Subject key identifier: 35:C9:36:40:ED:10:90:B5:DB:31:B1:0B:16:76:08:FB:29:4A:D4:0C
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 0194BD4EAA1CDAD685D3D4D26BA24612643D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 1412
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: WdWJlRnhgYX0Bx3D47GGYFSVfLSJvDPZ/6t1wBdNEzI=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:1c:da:d6:85:d3:d4:d2:6b:a2:46:12:64:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=35c93640ed1090b5db31b10b167608fb294ad40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:b9:c6:86:4a:e3:34:fc:06:50:b6:5d:62:
a7:b3:9c:e0:00:21:3a:7b:e1:2f:d2:d4:a0:b4:fa:
10:9e:77:ea:a9:2a:be:21:42:01:75:c1:97:a9:73:
fe:9b:2b:ba:b2:5f:47:45:95:a4:3f:39:41:0b:b4:
67:26:50:30:2b:c8:c6:b2:3f:f7:e1:71:06:0a:14:
9e:0f:9c:32:a1:1a:34:46:c0:4e:01:1a:8d:a0:6e:
da:71:59:56:4b:b8:40:b1:5e:07:37:57:02:29:97:
f6:77:54:a7:0f:93:b6:f9:ae:fd:0d:24:ad:29:4e:
0e:00:8b:c1:ae:e4:16:72:e0:f4:94:e5:ab:c8:9a:
a8:51:92:32:e7:0f:e6:38:12:4d:8b:71:01:b1:12:
59:c4:a9:b1:15:92:43:bb:18:c9:a8:e2:16:d0:97:
eb:5c:67:e9:2d:36:1a:0a:a7:5e:7f:c6:15:2c:87:
c8:18:7a:38:ca:da:63:d3:04:77:06:99:06:ca:d3:
b7:26:e6:65:53:8f:02:65:28:22:9b:af:eb:db:17:
c8:25:c5:02:6c:c1:65:d7:3a:51:b4:41:d9:73:b4:
76:99:d1:92:b7:5e:e1:49:49:4c:6d:91:83:22:74:
50:ea:7a:a4:e4:bb:17:54:27:46:3d:5d:8d:f0:47:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C9:36:40:ED:10:90:B5:DB:31:B1:0B:16:76:08:FB:29:4A:D4:0C
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:19:86:fb:5f:25:3d:f3:82:a3:2a:3a:4b:1a:45:da:e7:bb:
8c:5c:f1:e3:97:2f:f8:a3:af:07:e7:e6:9c:7e:d8:61:7a:1d:
4b:02:a5:86:ed:49:44:2e:28:e5:3b:b1:90:98:0e:15:fe:5f:
ef:31:51:56:a9:91:3f:28:b4:d6:74:71:9c:b7:75:fe:83:e0:
bf:c4:1b:02:20:ed:1d:6d:5b:de:2d:52:bd:58:0a:0c:24:1b:
7a:ab:a2:27:95:2d:cd:74:26:24:39:b7:4a:36:91:e6:80:3a:
27:c1:02:55:cc:27:0e:ae:30:eb:ed:80:fe:4f:27:3c:c0:12:
1a:86:03:24:c5:09:56:0e:61:f7:df:eb:f4:38:7f:b7:9d:44:
3c:a1:fb:89:87:17:52:bd:86:6a:29:b3:1a:d9:a8:98:a9:5f:
02:08:a5:a6:c9:a1:2b:81:15:5b:5a:f1:46:f6:c7:30:30:bf:
b3:70:d7:59:60:f8:45:43:d8:3f:af:55:9d:56:e5:44:e5:7d:
a5:b5:eb:c2:a5:9e:ec:a2:73:74:83:16:53:1d:fd:61:4d:d3:
55:e6:80:1a:ab:90:c4:a2:ab:f2:eb:99:22:92:ad:70:f1:d6:
f3:32:21:68:cb:8e:d7:ce:79:b0:a3:6e:07:3e:14:06:f7:82:
08:5b:64:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:33 2025 by rpki-client