Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: YioNUuSQGepTxD59CsJY7Nw66l4a2rKFvHgVVHcRAMw=
Subject key identifier: BA:85:35:D2:6F:F6:44:B1:B9:82:EE:AD:5B:21:E7:0B:51:23:B4:79
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 0194BC3BE0B5FC10EDFAE910ACD50189F2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 136C
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: YOj+e9sLz1vcDy71pkEDwG0GUuMbsQOTZ57V13GCPrY=)
2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e0:b5:fc:10:ed:fa:e9:10:ac:d5:01:89:f2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=ba8535d26ff644b1b982eead5b21e70b5123b479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:c5:e7:cd:5b:e7:ea:0e:f4:f3:da:c1:01:
fe:b7:2f:f9:f1:0e:81:c4:8d:20:df:43:42:53:2a:
db:fd:5c:2c:53:51:d8:18:89:ad:2d:f0:db:fa:5f:
06:9b:38:c0:a6:d7:89:3f:44:f7:10:5b:86:7e:22:
37:94:b5:5c:2f:34:39:13:de:13:bc:15:07:f9:1b:
d6:a1:c5:d3:98:ad:66:ed:16:67:54:3c:8a:f0:d5:
11:e3:f9:8e:d1:a5:ea:9d:15:ad:32:22:fe:22:ed:
9a:24:a2:d5:71:0c:07:a1:4a:08:dd:2c:e3:85:04:
09:26:74:50:eb:88:96:30:fa:80:12:e1:9d:df:b5:
9f:e9:79:ea:b0:05:c2:91:79:16:5d:0a:ce:e6:ae:
28:69:f8:16:09:e1:62:67:36:bf:62:6e:1d:66:dc:
4e:4b:36:57:95:19:01:45:ac:49:5f:77:0a:36:b8:
66:09:ff:b6:c1:aa:06:5f:8f:79:af:67:1b:a0:13:
64:2f:34:de:41:58:13:1b:4a:37:5b:44:5a:83:5e:
cd:91:75:f0:c0:62:f5:69:df:a4:aa:c4:b2:9a:24:
57:20:7a:8f:92:25:ba:cc:7a:da:9d:86:96:8b:ec:
8a:7d:a2:6c:9a:44:97:06:66:2c:ff:f9:bb:e5:bb:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:85:35:D2:6F:F6:44:B1:B9:82:EE:AD:5B:21:E7:0B:51:23:B4:79
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:ca:0a:09:9a:5d:94:6f:50:37:ee:e6:bd:9c:2d:1e:7f:
53:5d:fc:6a:57:d2:f3:9d:e1:94:cb:7a:c2:d8:9d:40:e5:95:
6f:7f:9c:4e:03:9c:5b:97:21:b4:63:b2:69:73:42:b4:e2:e7:
c0:9b:ec:fa:14:cb:df:97:cf:94:ee:c2:3b:f7:e5:60:7e:43:
2d:a1:32:08:d0:35:b5:5b:13:fb:7f:de:ad:c0:80:d6:39:5d:
01:eb:55:c4:9a:7c:1a:cd:ad:39:58:6b:8c:f8:ee:78:f2:7f:
ec:83:e9:51:b8:1e:ce:99:02:4e:ed:e2:2a:dd:5b:d2:e5:c6:
75:a6:02:59:34:e8:5e:c1:85:4d:4d:65:66:15:da:bd:46:25:
64:b4:2a:1f:51:1e:67:7a:46:32:72:44:93:68:bc:e8:97:c6:
49:0e:29:3b:14:4e:d1:5c:26:94:27:f4:4b:38:ff:6a:3b:ff:
ba:7f:62:b3:01:05:f3:4b:89:d1:17:0f:db:33:70:e4:cf:72:
47:cf:fe:cb:25:ec:14:cc:2c:10:f7:e1:40:5e:8b:54:a6:07:
d4:25:11:db:d4:6c:05:6c:46:07:41:ab:a5:2e:ad:41:b2:6e:
09:ee:45:b3:49:2e:d9:70:09:b5:78:4f:be:3a:d4:5b:91:d9:
de:d0:bb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:19 2025 by rpki-client