Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: 19EqjX38yckNkglreFnZmWA74Mv4253Md2kfqW67Je8=
Subject key identifier: 3D:EA:8E:2F:C1:D2:99:7B:4D:F2:75:47:0B:E8:4A:10:76:F0:5A:4E
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0194BBCDD7FAD8E392083DBC6A10E716768C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 08A1
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: +T+7wwtRHM5AnxoSadWBVSBydZfCNng50XGGRvwNyHg=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:fa:d8:e3:92:08:3d:bc:6a:10:e7:16:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=3dea8e2fc1d2997b4df275470be84a1076f05a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:8b:bc:20:c8:8d:30:73:88:59:70:e9:98:
79:38:1f:1c:ea:cf:1e:69:4b:51:16:8d:02:85:b0:
fe:ca:3b:78:83:fe:fb:bb:dd:d8:77:a8:b7:63:d3:
df:63:2c:8e:4b:45:6d:a5:1e:d6:5e:06:84:af:d2:
2d:70:74:02:64:29:26:6e:1e:03:77:fb:05:d6:5d:
d0:28:bf:42:35:bc:80:20:0b:1f:fe:da:34:e8:40:
71:0d:74:b7:76:d6:e0:a6:4b:2e:d0:1e:11:05:7f:
da:a1:b0:74:02:f8:19:16:8a:44:33:f7:0b:a4:d0:
57:1e:ec:f2:3e:c4:ae:9b:28:94:cc:12:3d:de:2c:
17:f0:d0:a1:66:35:3a:14:78:83:58:cc:c8:f1:74:
39:c7:49:d4:a1:70:e9:0a:03:6d:b9:41:a8:8d:63:
ea:36:28:07:26:c4:0b:36:ee:ac:e8:e4:aa:52:50:
0b:59:62:69:f4:98:8c:e3:31:c9:23:b1:ef:42:53:
b8:54:bb:f3:47:a3:e5:2e:cb:75:9a:bb:f6:94:44:
1e:c6:e2:f5:46:73:9d:7f:7f:d4:67:e0:0c:1f:4e:
cc:35:17:c3:21:5b:13:3c:2c:4b:31:db:f7:fe:17:
49:b2:ab:f6:6c:f4:46:18:9e:8a:79:48:08:3f:69:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:8E:2F:C1:D2:99:7B:4D:F2:75:47:0B:E8:4A:10:76:F0:5A:4E
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:4d:46:9f:d5:aa:1f:50:8b:6b:b3:1e:da:c0:fb:49:6d:e3:
60:bb:40:9f:36:32:48:c4:e0:ab:9a:3a:70:43:f3:cc:56:56:
35:6d:dd:b1:50:1e:ef:c7:f6:e7:97:7a:82:b5:78:98:d8:ed:
14:d1:61:b4:de:7b:b2:f3:0c:5b:e1:e9:f5:4a:0a:d0:71:33:
b5:6b:8c:e2:10:a0:c3:dd:8c:24:db:a2:cf:d6:59:93:5e:27:
2f:b2:43:ef:d7:ff:3d:b0:78:d0:30:23:69:27:de:35:fc:ed:
c1:c1:fc:15:11:bd:20:4e:39:e3:56:d3:45:d4:d1:18:09:63:
ef:c4:f3:a7:95:6d:a5:34:16:d3:89:e7:fe:c6:fd:3c:18:a9:
d0:c0:2e:26:07:6a:22:28:38:29:d6:7a:c6:9b:59:aa:1d:80:
c9:d7:6d:8d:43:4b:84:49:81:03:21:b7:e6:11:e8:70:95:f3:
9f:c2:f5:c0:f5:92:0a:99:7e:fc:28:46:2c:9d:84:9e:1f:88:
7b:fa:40:b9:31:08:76:c4:d9:d0:fd:7e:00:e8:22:ca:14:74:
09:00:15:60:dc:e2:84:a6:fe:e2:5a:35:1c:1a:bd:a1:8d:05:
6c:79:26:68:13:3f:25:73:b6:2c:08:05:e2:51:14:2e:9b:bb:
b4:52:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client