Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: GUK+NzHETQPryK+g5KXi9CTFGMVP0WvfoaTM5n364pA=
Subject key identifier: 35:3E:1C:6D:34:8C:F9:18:81:A8:78:57:F0:D5:FA:05:0E:E5:69:19
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0194BBCDF1B391CE7D9E72354F8C4ADAE5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 031A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: Pz7NU6STR9TIDQ04UMXmoKPVjro.roa (hash: Tmbo0CXGhGsx59/rnH0CK8F7805oDqYjgNQgtncuY5w=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: qYyA7hbOUJMO/37SsieORJ6Dv1EpLXbJqVQr3ZssZ5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f1:b3:91:ce:7d:9e:72:35:4f:8c:4a:da:e5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=353e1c6d348cf91881a87857f0d5fa050ee56919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:ef:7d:61:06:4d:f3:ed:3c:d1:2a:ad:40:
d5:59:a5:9d:33:d9:a0:06:0e:9e:15:d6:34:66:f1:
ae:75:76:10:50:99:b2:0a:0d:7f:63:e2:bd:52:e2:
e6:34:2b:a3:7b:76:ca:e1:4f:5b:fd:da:c3:1b:6e:
41:fa:28:2a:94:33:74:ec:a4:1a:2a:84:f3:e4:40:
6b:85:ad:24:5b:7a:4e:33:3a:2c:f3:ee:68:38:3e:
b4:d8:5f:df:d9:6c:2c:c6:d8:0f:a2:aa:62:eb:74:
25:cc:73:10:4b:99:6e:90:5d:4c:e3:c0:72:75:5a:
ed:6c:e7:51:5d:fb:b6:7d:98:51:33:41:6a:b4:10:
4a:a2:21:2c:bc:f1:57:41:f8:51:c0:9f:a9:34:17:
e4:9c:81:02:99:80:db:d2:de:50:66:03:80:a7:8d:
48:d3:56:81:b9:02:96:e3:a6:bf:1f:9e:6c:62:76:
35:a3:22:c9:aa:e0:90:9e:d8:68:fd:c5:4c:c3:8b:
b8:2a:f4:a5:f1:d7:2a:53:7e:8a:c1:97:f8:13:67:
0c:23:b2:5d:bc:cf:b9:03:ac:c1:78:95:6d:80:2e:
e5:c9:8f:d5:c4:54:2f:a5:7e:4c:5c:0e:be:ca:1b:
2e:0f:24:6e:b8:46:d7:09:3d:35:d6:74:18:ea:b3:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:1C:6D:34:8C:F9:18:81:A8:78:57:F0:D5:FA:05:0E:E5:69:19
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:e0:45:2f:9c:66:9f:b8:c1:aa:bd:6e:e4:1a:59:3f:77:
31:83:7b:0a:23:34:a7:82:0a:b5:75:6f:86:69:19:17:2e:38:
4d:64:79:52:24:3a:80:29:71:7b:db:a7:7e:31:b0:bb:d4:7d:
4a:ec:ed:fc:ea:18:9e:3f:29:9e:53:e1:c6:3a:c6:81:47:09:
ba:20:7e:72:62:a9:61:02:e1:99:65:80:1a:ee:79:33:9c:f8:
10:00:58:15:ee:5d:57:0b:88:b1:4a:2c:ad:86:8b:1c:8d:6b:
27:bb:1a:8f:45:af:49:cf:35:a0:eb:21:f3:ac:a4:0a:0c:0b:
37:61:f5:4e:39:2c:28:cc:e8:43:57:6f:70:59:37:2c:31:9f:
41:74:d5:a0:b0:92:e6:03:43:49:68:99:f3:2d:3a:ea:0a:cd:
c3:31:d1:33:26:8e:3b:a7:31:8e:6a:e2:51:b4:13:9d:25:a8:
37:a5:7d:d8:56:0e:b3:03:7c:e4:45:60:ef:0a:b7:63:df:fc:
47:ee:f0:71:76:01:8d:fa:ad:81:33:e5:7e:58:39:8b:8d:97:
15:31:63:fd:9c:22:71:63:2e:31:69:aa:8d:55:d5:76:c6:d3:
0a:7f:4a:42:40:1d:c7:b4:e3:75:b0:9d:a8:14:0e:85:3b:05:
54:8e:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:56 2025 by rpki-client