
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
File: 35me_9SQo7jQzTGumZ8ObT6Y5oI.mft (raw, json)
Hash identifier: //5oUujZTVacgAz24ckgu2rld2dinCc4jTSaDhCULVk=
Subject key identifier: 69:1B:8C:AE:89:95:96:64:7A:C2:FB:32:C8:0D:77:3B:D7:B4:9F:35
Authority key identifier: DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
Certificate issuer: /CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Certificate serial: 0194BCA97DB31A869F2F737F34830906FE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
Manifest number: 0B34
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 35me_9SQo7jQzTGumZ8ObT6Y5oI.crl (hash: 0YayochqZ5S5RXPenCWIDvCQz6NJpsLnjvXuQh2PShQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:b3:1a:86:9f:2f:73:7f:34:83:09:06:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df999effd490a3b8d0cd31ae999f0e6d3e98e682
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=691b8cae899596647ac2fb32c80d773bd7b49f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:63:68:9a:23:f1:87:04:b2:52:0b:ff:75:
9c:88:bf:33:d8:85:ee:81:5e:38:44:de:37:eb:ef:
ab:12:5b:78:70:8d:f7:63:b7:2b:4d:c0:ca:2d:9e:
bf:eb:7b:92:52:a4:9a:c4:4f:1b:6c:96:91:14:93:
c8:aa:50:67:da:48:39:2c:18:c6:97:a4:4a:70:c4:
6a:0c:2b:42:53:80:36:eb:d8:ef:9f:68:8c:83:e7:
e1:15:c2:05:a3:4a:b7:21:ca:11:c4:39:e2:1e:c9:
1b:d5:e5:d1:6f:f7:86:81:fd:e4:b6:cc:dd:b0:16:
84:88:2e:26:1e:a5:b7:6a:5d:23:9a:39:45:73:e2:
6a:fb:85:16:43:17:3a:a8:e8:3b:46:62:61:a0:a4:
c6:3a:25:37:1f:02:f9:c1:f6:f5:20:69:d0:24:23:
b0:cf:b1:8b:4f:43:26:0d:97:76:2d:2d:fb:33:0e:
8a:c3:fe:87:3e:6a:20:6a:5c:6c:1a:9c:2a:d8:61:
c2:b8:23:df:16:a5:29:bb:ce:95:46:e3:ea:2a:4d:
99:ab:34:40:6e:7e:24:e1:f0:1f:f3:95:28:cf:e6:
79:09:c3:49:f8:04:ae:24:54:fd:25:26:26:a6:af:
d0:88:b8:71:85:3c:7f:ce:16:13:39:9d:19:51:42:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:8C:AE:89:95:96:64:7A:C2:FB:32:C8:0D:77:3B:D7:B4:9F:35
X509v3 Authority Key Identifier:
keyid:DF:99:9E:FF:D4:90:A3:B8:D0:CD:31:AE:99:9F:0E:6D:3E:98:E6:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35me_9SQo7jQzTGumZ8ObT6Y5oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d03d08-270f-4da1-9a24-501538c0dd01/1/35me_9SQo7jQzTGumZ8ObT6Y5oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:14:8f:10:e8:5e:06:db:3f:8e:2f:53:7d:f6:31:7e:bb:83:
9d:11:e4:13:2f:ef:bd:a5:33:15:41:ea:a4:ec:5d:50:0a:84:
d4:1e:71:86:e8:de:b8:b7:35:8b:aa:dc:9d:b1:d8:ee:70:d3:
bc:b5:9c:91:6d:e8:4b:a5:6f:4c:11:ca:4c:b2:a3:c9:3a:f4:
fc:d9:a6:f3:fa:fe:f7:00:2a:6d:cf:33:f0:92:68:15:2a:41:
a5:fd:f0:41:48:52:e2:fc:e3:a3:cf:0b:04:7c:9a:7e:52:4a:
8e:88:b2:ee:9c:63:f0:16:f9:c8:a1:6e:ba:9d:f3:c5:ac:9c:
30:87:07:5d:a9:60:47:62:92:58:a6:c6:8b:f9:06:ea:33:76:
c0:86:2b:f0:86:c0:b6:60:77:e4:d1:1f:1c:2d:74:1b:16:67:
8c:73:35:4a:ae:a5:81:cf:05:4d:2b:c6:5d:0a:85:43:fd:8a:
18:09:d7:80:03:d9:62:06:5f:7d:54:f2:5d:09:c9:0b:e8:a4:
a3:72:a0:46:5a:6b:d6:eb:dc:04:d0:3d:33:d1:e6:f4:db:86:
77:62:79:27:f8:6d:d8:31:8e:e8:85:e0:d6:fd:63:2b:54:5f:
7f:d1:f4:69:ac:9c:7c:39:6c:c5:3e:cd:72:53:94:e2:54:a9:
44:48:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:13 2025 by rpki-client