Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: my6b5h2X5v1Yd2fWfRj2HM/Ocme73iZx32T7yHsi/AA=
Subject key identifier: 90:C3:CF:9E:B2:54:37:62:0B:96:E0:87:3B:8F:68:B6:B4:8E:AD:88
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 0194BD8579515B477FAB76628232E18B55A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0CA8
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: c3Q4YMPg6jvDbxUE9Zc9y7NZi/91MSNE5sumIR00YAA=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:51:5b:47:7f:ab:76:62:82:32:e1:8b:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=90c3cf9eb25437620b96e0873b8f68b6b48ead88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:58:6d:12:20:17:cc:52:ba:c9:d3:88:f3:
9f:9b:26:18:ff:59:14:0d:e8:51:89:38:cc:fa:6b:
f6:6d:5d:5d:8b:2f:31:f7:33:28:95:59:2b:47:e8:
5f:e7:e7:35:81:f7:2d:f7:6c:7d:88:d9:86:ff:b6:
58:c1:2f:3e:ab:e3:08:22:17:3a:0a:e7:0d:d4:e0:
15:26:4d:21:e5:73:00:e9:4e:61:0e:e5:ee:fd:3b:
e7:9b:32:ef:22:49:0d:9a:48:34:82:08:9e:64:0b:
a8:32:37:7b:34:71:5c:67:1f:18:ac:c2:bc:3d:d6:
da:eb:be:e2:48:5c:18:46:b8:60:a3:93:80:21:ae:
9d:41:68:f5:9a:3f:0e:76:de:3d:12:97:c4:f4:64:
25:f7:aa:a6:15:74:dc:dc:53:42:67:c9:a8:1c:3f:
51:36:f3:55:d4:d5:25:59:55:44:9b:14:8b:aa:6b:
aa:7e:cc:84:79:8b:5a:72:90:c0:94:1c:81:76:b9:
97:5a:f7:35:0a:b7:41:d1:f4:43:2f:37:6f:07:56:
f6:53:f5:47:59:e2:06:1f:e3:cd:d2:c5:2a:27:33:
d3:97:76:7e:00:cc:c7:32:f6:ad:83:d0:20:9b:fd:
f7:94:74:6c:c7:a5:30:f5:e9:60:c2:f6:52:ad:cc:
d6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C3:CF:9E:B2:54:37:62:0B:96:E0:87:3B:8F:68:B6:B4:8E:AD:88
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:51:bd:bc:98:42:17:e5:44:67:bb:03:30:4c:ac:cc:41:05:
be:04:62:75:dc:5d:a8:69:4f:2a:67:04:20:73:e6:03:ca:c7:
2e:01:1c:08:3b:1d:df:b5:a5:96:3e:10:1b:89:34:1a:63:fb:
1c:45:3d:cc:13:81:f3:ef:bd:a0:52:c4:83:31:64:99:67:5b:
a3:6f:9b:94:19:32:d7:f5:13:b4:50:8b:d6:bc:e7:51:93:b2:
b5:8c:06:a4:3b:77:82:47:88:a4:0d:7f:47:c8:c9:24:e4:95:
41:4a:2d:a2:fe:7c:2f:32:1e:58:d0:8f:d3:0a:66:08:67:bd:
95:b0:67:b1:8b:d8:41:83:42:ee:40:09:e6:f9:6f:e1:30:26:
47:c2:1c:ba:61:ca:11:e4:0e:24:d9:03:9b:ef:4d:58:4e:aa:
bc:a9:b4:3a:91:29:53:29:07:87:6c:a6:23:91:c3:e2:54:1c:
ad:a2:85:c7:ee:7e:e8:3f:d3:97:a6:07:e2:db:93:d0:25:62:
e5:43:f4:89:6a:71:a6:a2:5c:9e:5e:a5:59:89:b9:cc:ed:32:
a8:3c:83:f7:db:af:3b:65:d8:3b:81:ee:bf:30:48:d2:29:03:
b2:8b:18:12:88:69:ae:76:03:b4:f1:a1:82:b6:c2:54:eb:1e:
b1:2b:cf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:46 2025 by rpki-client