Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: dNG7ss/I3MxAxBQXMAS+1qVwo+LEXlihntchIIVVzYI=
Subject key identifier: BB:D1:1F:5D:AA:DA:E6:56:BD:30:25:0D:79:FE:37:FA:48:63:F1:94
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 0194BC728EC060CA922C52268B488EA2E2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: g88VBk5qi8gTnU3OzGs+iBl0/C2Vtnn0R1P+nIvg8ZM=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:c0:60:ca:92:2c:52:26:8b:48:8e:a2:e2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=bbd11f5daadae656bd30250d79fe37fa4863f194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:39:29:45:7d:10:36:53:d8:90:14:94:fb:
ca:c1:46:71:84:2c:8f:7e:fe:02:46:16:a7:81:f2:
9e:6e:2d:c4:a8:8a:55:65:93:09:0f:0e:b3:ab:1a:
b5:b7:e8:cf:50:9e:0a:24:ef:c0:f4:86:8c:63:e1:
a4:fb:8d:c5:50:6e:35:55:04:67:74:b1:a6:05:9c:
5c:9a:78:42:9e:16:a0:7f:41:15:a9:d9:5e:2a:ee:
37:69:b4:24:d8:e0:bb:94:25:e3:c1:b8:51:53:ef:
84:e0:9e:76:c9:f7:3b:97:55:6c:c3:67:f6:7f:6d:
70:8d:89:8e:0e:e6:1e:63:96:89:3b:2f:9f:21:01:
41:58:a6:ab:48:c2:be:24:0f:b1:01:aa:e4:4d:ad:
da:19:10:8a:b2:82:79:3f:a7:58:44:a3:8b:a0:52:
6b:34:26:b3:c4:6e:ea:59:0a:0c:64:f2:b9:78:78:
92:03:5f:1b:bc:ab:25:61:24:2d:ca:b9:0b:36:46:
d5:b3:a8:be:45:85:4b:36:48:9d:42:0a:2a:e6:96:
17:a4:ec:65:ee:8c:ad:aa:fc:0b:f6:20:1c:1a:20:
4e:d2:ca:49:6b:39:28:e0:72:37:ff:e7:39:20:54:
53:4e:20:c8:3e:11:22:5e:db:76:c5:39:c3:f8:68:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:1F:5D:AA:DA:E6:56:BD:30:25:0D:79:FE:37:FA:48:63:F1:94
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:bc:1f:46:47:37:60:2d:7a:ca:60:82:56:95:66:8e:61:
69:43:a4:5d:b1:1f:67:3a:0a:cc:f3:72:79:e2:f1:a0:8f:5a:
07:3b:fd:15:f9:a7:2a:ef:8c:6b:62:ba:c7:53:6b:49:ff:9b:
d5:e0:23:68:d5:69:f3:66:b1:63:41:44:b8:8c:1b:f4:67:70:
38:72:e9:01:33:99:fe:45:f6:d5:a9:46:45:1c:56:f1:7a:9a:
6f:d0:5e:f1:8e:01:34:e8:aa:53:b5:2d:58:0d:02:3c:05:75:
1a:3f:9d:10:58:bd:c1:a0:f1:0e:8b:76:3a:e7:9d:6a:37:db:
5a:bd:be:43:84:ec:b1:91:81:21:47:8d:ed:f4:15:70:30:8f:
79:8e:16:5e:76:ec:9c:fb:9b:17:34:b7:6b:20:53:c6:44:29:
3c:47:76:73:45:01:ce:20:e2:c7:94:f2:b7:c3:51:14:46:88:
e2:c9:f2:8e:ec:f1:27:b4:a0:3d:86:71:86:35:eb:bb:ff:13:
f6:05:ff:f7:ce:d5:7f:c2:ff:61:89:06:e5:46:cb:90:ec:0a:
64:4e:9c:89:65:56:25:a6:32:09:57:10:2c:83:a6:8a:05:90:
82:4d:4f:ea:87:18:e5:91:b6:d1:d4:b9:aa:93:3d:3e:a1:07:
3b:64:60:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:45 2025 by rpki-client