Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: E55IVmgdU0ettln88lschBCnR777sb/OLilNfM+29m8=
Subject key identifier: B4:C7:F5:77:F2:FD:FE:0B:E2:12:56:3B:5B:2A:94:C3:FF:D2:2D:4C
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 0194BCE0ADB389AF474E8F6E44CC21DC0CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 11A3
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: c5rLgyRk2PphPfTtFyQMe4V0bAfJb1HPa849TLyOyFc=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:b3:89:af:47:4e:8f:6e:44:cc:21:dc:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=b4c7f577f2fdfe0be212563b5b2a94c3ffd22d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:fa:56:99:18:b6:99:d3:51:64:05:4f:fc:
ea:d5:d2:2a:95:a4:2e:a6:48:15:3a:07:df:8e:5f:
bb:0a:69:3f:70:7f:05:38:ab:e5:ca:2d:40:4e:80:
a9:06:71:20:4b:7e:88:cc:ed:19:c1:1c:58:3e:6b:
58:05:6e:22:40:a8:cf:08:37:9a:6a:d6:71:c6:35:
f2:8f:d5:cb:51:b2:ef:7c:68:1a:8f:05:f4:1c:20:
ae:67:76:d7:9f:8e:a0:74:b0:7e:72:83:64:af:2a:
ed:ce:30:8b:be:b9:b8:71:93:e9:50:52:2f:4c:3a:
de:b6:b6:20:0a:b8:95:a4:5d:24:3f:67:06:47:36:
3a:ba:38:1f:17:58:e4:6c:9e:0f:d9:e2:1c:e0:52:
78:8f:f0:90:c7:17:c6:a5:ee:65:c1:fb:9f:a7:c0:
c3:51:39:0f:da:15:82:e9:4a:3a:a6:13:ed:3a:1d:
d7:4b:50:70:e0:06:b0:6a:74:60:7c:c7:a4:a1:b8:
a3:0a:d9:a4:66:67:14:b1:69:bb:b0:af:de:47:a2:
db:a2:46:1e:05:ab:8e:09:33:e3:3f:2c:5c:88:f4:
cc:44:d0:36:4d:ec:b7:87:70:85:29:48:1b:70:3e:
fa:e0:70:a5:09:f5:8e:64:c2:6f:2d:40:61:ea:9f:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:F5:77:F2:FD:FE:0B:E2:12:56:3B:5B:2A:94:C3:FF:D2:2D:4C
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1c:d9:a6:53:f3:14:a2:e8:fe:bc:26:a0:09:de:be:86:ec:
28:a9:c5:bb:2e:d9:af:b8:ce:cb:ee:f8:d6:57:c7:e7:b1:54:
53:fd:d7:1b:85:0e:19:1e:8f:e7:1f:b3:2a:a2:b4:a5:1d:b8:
57:d9:bc:a3:b0:97:d8:32:ab:10:29:ea:66:fb:3d:bd:55:23:
8e:d0:18:55:d5:b1:b3:5d:5d:5a:88:5c:90:6a:a4:7d:2b:bb:
37:ab:c6:b9:68:cb:27:e2:c5:db:1c:67:53:85:47:27:6b:10:
67:f7:f6:13:77:a9:ff:61:8f:6b:05:d6:cf:c0:fe:be:a5:72:
f2:00:14:7c:d0:d6:49:4a:39:78:43:b1:37:28:73:f1:74:2a:
4b:51:8d:ed:87:e2:46:35:6d:51:89:54:6a:68:1d:65:40:5e:
5b:b4:66:41:1a:a7:d3:09:b9:01:e5:a9:0c:0c:60:c6:ab:fd:
7c:02:b1:20:2f:dc:a5:39:13:24:05:84:08:bc:8f:c1:f0:52:
57:d0:c3:a4:8a:1e:39:6f:0f:0d:9d:99:14:e0:19:39:cc:ee:
18:69:b7:6d:f4:89:9a:9f:15:6e:c8:36:3e:87:d4:14:12:57:
39:74:a0:ab:53:65:f6:56:bf:ab:7e:85:f0:4d:4c:c8:04:a4:
af:d0:af:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client