Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
File: cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft (raw, json)
Hash identifier: vFh9fUJcPHwQExH+WpblYxKjZvVJShBToOt6et+K0nU=
Subject key identifier: 4F:E5:25:64:AA:02:EE:CC:5C:B2:02:A3:8A:98:04:75:6C:5A:68:D5
Authority key identifier: 70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
Certificate issuer: /CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Certificate serial: 0194BCE0DECAD9955B2BCEC396E268F0E75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
Manifest number: 108E
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: UkvE8dqZrzxtAH_b1DZxgqF6vTM.roa (hash: wAlll9K9/ln6lzYhTcmMHQV62ZPi/AvIvfXVgruDZb8=)
2: cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl (hash: J2bRS4UkgFi+Vpq89XS/qX1JZS0VuZ/oowbAIsAScGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:ca:d9:95:5b:2b:ce:c3:96:e2:68:f0:e7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7087f88e18ba345f5db0b06a2a34d4486e4e6dc5
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=4fe52564aa02eecc5cb202a38a9804756c5a68d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:ee:36:5a:19:0f:e2:c0:78:f5:05:c7:64:
80:9f:a8:11:e5:5e:6e:1b:e5:f3:15:d4:92:46:4b:
40:99:cb:cd:ba:df:0a:9c:06:3c:52:4b:5a:cf:52:
7c:3f:22:0f:1e:af:bf:6a:f6:8c:3d:43:82:ce:62:
fb:c3:18:b3:20:1a:50:69:4e:f6:26:a4:f9:8c:d9:
1d:0a:67:8f:24:73:ce:32:6d:45:b1:2e:2a:d2:2f:
b9:09:4b:73:77:e9:67:c2:c8:84:4f:25:73:b4:dc:
c3:a7:af:38:ed:a7:fa:27:f6:ad:7b:b5:31:72:ee:
6a:9e:31:18:6d:11:db:0f:8f:2f:7f:aa:ec:f4:37:
ca:38:79:ef:f6:8e:d9:0e:20:a4:2f:70:41:e1:4a:
58:af:26:c0:90:6f:12:b3:40:a1:6a:a4:1e:55:80:
9d:f3:4f:93:c8:e9:6b:4a:a3:d4:90:e7:c1:28:82:
2a:50:85:09:55:08:1c:78:cd:04:c4:75:d7:59:2e:
12:7c:29:e4:f7:0f:00:aa:6e:95:c1:c3:23:02:d3:
ac:34:90:78:ef:1d:32:93:ef:fd:94:ff:a0:d9:42:
c3:e4:0e:51:84:ba:2d:2a:08:45:5b:fa:44:55:d6:
ff:1a:f7:b2:84:13:8c:4d:2d:ae:9e:ad:c4:a9:bc:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:25:64:AA:02:EE:CC:5C:B2:02:A3:8A:98:04:75:6C:5A:68:D5
X509v3 Authority Key Identifier:
keyid:70:87:F8:8E:18:BA:34:5F:5D:B0:B0:6A:2A:34:D4:48:6E:4E:6D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIf4jhi6NF9dsLBqKjTUSG5ObcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/991c5c-783f-4106-9662-65f8732161a6/1/cIf4jhi6NF9dsLBqKjTUSG5ObcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c3:2b:ff:4e:7f:d6:6d:15:0c:9e:c4:36:f5:0e:8b:89:f3:
67:b5:8b:c3:89:94:df:6b:9e:da:a2:b5:64:34:65:b1:4b:17:
b6:db:3c:67:fc:4e:3e:1d:30:44:92:7b:61:5b:8f:40:d6:a5:
c4:c1:89:44:42:d7:2d:92:99:15:d9:64:55:4f:5e:f8:a7:28:
01:ab:0b:21:dd:ba:d9:25:80:f9:ce:a7:b0:3f:f8:bb:32:38:
67:d7:1c:5d:4a:e7:5d:65:53:63:4d:3d:81:21:06:85:0c:e5:
5d:7d:03:a7:ce:41:25:b9:e1:4a:d2:7e:01:4f:7b:a8:5f:4d:
2c:32:c7:96:88:3d:65:68:04:71:39:28:b8:0d:d8:bd:5e:cf:
f2:9f:6d:53:62:3a:fb:e7:09:50:c6:fe:75:6a:99:8f:d0:60:
5a:12:91:a3:1c:26:3c:95:50:aa:b1:25:d7:a1:46:e2:da:f2:
43:05:da:d0:d4:42:fa:d9:8f:ad:7a:44:56:c7:24:3e:59:b9:
32:60:a7:7f:0f:4b:cb:58:b8:52:de:31:bd:f5:45:42:ca:35:
f3:37:fd:36:d8:07:1a:cf:f9:19:be:6a:70:a5:7c:d7:e4:c2:
e2:9d:88:c2:74:43:57:99:e5:bd:a8:d5:6e:1b:bd:db:3f:97:
60:8b:a7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client