Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
File: CLFH055Du3X596_0XnvyuDUw-HQ.mft (raw, json)
Hash identifier: Sco40tV//duOF2jzktt3lPGhfte7JM6dPOeM2IozywM=
Subject key identifier: 29:8E:21:B7:AE:15:A1:13:F4:F3:27:E4:BF:3C:64:FB:D9:3A:76:34
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 0194BD4E54F68D857011856C6493476BEBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (hash: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=)
2: CLFH055Du3X596_0XnvyuDUw-HQ.crl (hash: ChKhzU9tR+UfyDhGIVprT9BHxuqRn8sXpEepGKnXw8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:f6:8d:85:70:11:85:6c:64:93:47:6b:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=298e21b7ae15a113f4f327e4bf3c64fbd93a7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:a3:c7:bf:c3:c3:0d:93:0e:89:cb:95:e1:
3c:96:ca:fc:36:82:20:ac:e9:af:71:e4:fb:38:f1:
69:3a:a3:f5:d7:1d:b9:0e:a9:d0:13:17:25:2c:16:
f7:37:64:a9:c6:42:26:e2:c2:6e:28:12:96:26:d4:
06:60:6c:cb:1e:81:2d:d9:9d:7e:91:92:30:cb:08:
85:0d:cd:3e:3f:d8:6c:5b:64:33:d3:6c:d7:9e:9e:
ef:f4:cc:7c:e7:ee:80:40:ae:07:ee:8c:bf:b5:74:
d7:a1:c8:11:f7:cd:00:30:a8:76:60:69:c6:7d:a8:
14:88:b0:64:9e:c1:48:b6:8c:84:53:6d:26:02:8a:
04:28:2b:e5:94:d5:71:57:92:1a:d9:7b:fe:97:e1:
23:4d:f4:e6:45:29:33:af:9d:d1:64:3a:11:cf:36:
53:33:eb:e7:d8:c1:1e:7b:69:a6:f2:35:9f:ed:3e:
26:bc:60:29:43:6f:cf:57:65:1b:53:73:b3:e1:c4:
50:a6:02:b8:88:b6:db:9e:ad:90:e4:a8:9d:9e:8a:
6d:f8:07:fd:a9:01:ec:4c:0f:66:2f:69:75:b4:5a:
bb:88:f2:72:e4:86:11:8a:79:ae:58:3d:02:10:69:
a1:0a:83:6d:11:a9:bc:62:9e:79:de:46:7a:19:0b:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:8E:21:B7:AE:15:A1:13:F4:F3:27:E4:BF:3C:64:FB:D9:3A:76:34
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bd:db:93:eb:96:a5:58:3d:79:83:82:b1:b5:03:e6:13:5b:
63:9b:ff:d7:bd:12:0f:07:34:1d:4c:0f:8f:dc:f7:3c:b2:f5:
b3:bf:a4:04:d7:83:c6:62:10:cb:cd:59:44:b4:16:15:b7:33:
93:a3:81:e5:b6:34:80:a4:42:40:d6:00:42:a2:94:64:08:16:
0e:ba:b0:aa:ae:6b:b6:0b:a8:d0:b7:41:87:59:6e:e9:9e:4b:
9d:cf:99:13:d2:e8:b1:2f:06:84:be:dc:5d:48:14:e6:69:86:
b6:70:57:77:ee:b1:58:69:66:e0:a8:e8:55:c2:f2:b5:72:32:
48:01:68:1c:a3:45:52:9b:49:7c:60:b2:78:bb:31:0d:ba:01:
15:e4:74:01:f7:79:07:6f:b9:b3:92:37:dd:30:8a:dd:cc:8f:
d6:bd:90:c0:a0:72:0a:ad:8b:c7:d0:49:f7:68:77:91:a0:62:
76:69:90:2c:0b:76:95:f2:87:0d:04:67:b3:c0:05:ca:2d:5d:
97:2f:f4:ff:a1:65:f1:26:e8:14:36:30:41:7c:a4:e9:20:75:
a6:79:d5:51:0b:37:3d:16:23:83:78:07:7e:ee:b3:7e:ba:d1:
04:a6:52:bf:c0:7e:05:2e:f1:5d:71:5c:c7:e1:5b:da:fe:e0:
d6:a3:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:12 2025 by rpki-client