Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File: 34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier: gT87eDMZS7Eun+0IJOs+51/kJyx9PRMdzUiwpGamQ/w=
Subject key identifier: 41:F4:54:D8:90:82:6C:98:A4:B1:3A:94:92:27:CE:43:DD:0D:17:0A
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer: /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial: 0194BC72E3E73AB25E734A68441F1E87CFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number: 0E13
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: 9dSK8WDRsbNPlwK+Sg2rtrAmoqd2BoUHLhWN54qG0bc=)
2: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
3: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
4: qjem72uO7DgkEP8SDk6XnjOnFt8.roa (hash: oYe+IghrANew49oUvqDKOy68qs0Z1UKOAqVvGxaiu7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e3:e7:3a:b2:5e:73:4a:68:44:1f:1e:87:cf:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=41f454d890826c98a4b13a949227ce43dd0d170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:3a:65:ac:fa:b2:df:71:f6:b7:05:97:56:
94:86:41:19:b2:59:57:f8:37:c5:03:65:c9:f8:6c:
95:43:52:99:e9:13:4a:ad:38:b4:f9:7c:03:12:3d:
6e:0b:4c:62:36:31:e0:45:43:af:a6:d9:36:55:39:
f5:7f:0e:cd:e4:ff:7a:f6:35:c0:15:ed:48:41:88:
90:63:21:d6:88:f4:38:6d:98:53:04:af:c4:73:60:
88:b3:40:a6:e3:66:6b:a4:63:9e:57:ba:53:6f:d8:
9b:37:30:6f:54:22:86:73:c3:19:bf:b9:ee:80:8a:
a9:0b:f9:ce:5d:fe:32:49:05:78:86:bc:d2:70:89:
62:c3:d7:b9:6c:dc:ab:08:b1:46:4e:ef:29:25:e8:
03:2c:68:dc:45:1b:3f:16:5c:f9:98:37:fd:76:37:
48:e7:0e:ed:5d:58:6e:85:c5:2b:63:fd:f3:53:1e:
bd:cb:fb:45:83:18:9f:91:1a:90:3c:9c:da:3a:2a:
28:83:48:37:c0:34:8a:21:5f:eb:9d:5d:ca:97:52:
24:b8:cf:cb:4c:52:c6:7e:bf:6f:11:0a:30:e2:c2:
52:27:8c:42:25:8a:20:91:27:10:c4:a7:0d:9f:43:
db:4d:1f:9d:70:6f:29:f1:1e:f8:e6:55:66:03:d3:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:54:D8:90:82:6C:98:A4:B1:3A:94:92:27:CE:43:DD:0D:17:0A
X509v3 Authority Key Identifier:
keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bd:44:f4:eb:1b:af:2f:64:38:94:dc:29:0a:5a:7c:a6:a9:
8c:47:6f:91:1e:42:31:bf:ed:20:31:ee:cc:23:8f:dd:ec:81:
10:f2:b9:7f:52:74:a2:af:ed:b5:22:90:ec:60:7b:2f:6a:d6:
c8:fd:33:b1:a5:fa:9b:0a:8a:cc:4f:28:38:c2:fd:fd:97:c5:
50:55:81:71:d1:6e:9c:8a:32:26:b4:dd:cf:f9:d5:fa:dd:5f:
42:49:ea:ec:e9:b3:c2:76:c2:4f:24:00:3e:38:25:90:ad:23:
31:b9:95:a0:00:a1:dc:d7:0e:7b:9e:04:68:1e:83:ae:bc:1e:
e3:8c:b8:69:4a:1f:ae:83:7a:a7:f0:20:79:11:99:22:4d:0c:
b0:0e:4d:e7:4b:c5:53:e8:82:a8:7f:6b:bc:85:9e:6f:3e:a5:
8c:d1:2f:ae:4b:7b:01:7f:2d:c1:51:bb:a6:21:6a:c5:98:74:
ce:0e:3c:cc:83:89:0e:97:9a:d7:8b:62:2d:11:be:de:d8:97:
bb:13:13:84:c8:6b:83:e6:b8:cf:fd:73:89:fb:14:39:e6:20:
e4:e7:9d:8a:49:13:79:0a:f8:f1:8e:1d:4f:97:0c:f6:d2:25:
f3:8a:84:56:b3:6c:f5:e7:0e:00:bc:cf:39:53:4d:c6:5b:10:
aa:1c:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:37 2025 by rpki-client