Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: ziBqaDiUyO1Pro9/6s02dEuqRYTgTn648lCwT8OEzuU=
Subject key identifier: 80:D3:F2:74:5E:66:87:79:2F:2F:1F:B7:B3:C6:1B:77:20:DE:F3:50
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 0194BD176B4CED0D96879BC41E5930BC25BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: Iod+4ybqOCUi7eMSGKl8Mf1admqi7l0V9X1tR2Xz6aA=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:4c:ed:0d:96:87:9b:c4:1e:59:30:bc:25:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=80d3f2745e6687792f2f1fb7b3c61b7720def350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:2a:ad:42:a2:24:cc:e1:ab:ef:33:3b:44:
ef:e2:34:22:bc:5b:93:fb:18:5b:67:0c:89:75:fb:
2c:68:9f:79:c1:e7:7c:97:3f:d4:c6:02:63:e4:a2:
19:29:26:da:e4:bd:c2:f3:b8:2f:7a:55:c9:06:b8:
af:b5:b8:9a:d7:74:7c:9b:78:ad:0a:36:d4:d8:8c:
8c:59:ae:99:dd:5c:c1:1e:bd:9e:59:b9:3f:1a:83:
a6:55:4a:ef:77:8a:c3:bf:6b:7b:50:ba:20:a8:51:
99:cd:e9:7c:66:3c:64:53:d0:7e:73:6f:78:87:e6:
77:e0:24:dc:ce:1f:d4:5e:26:6f:9e:5f:62:74:4f:
4c:0b:94:15:cc:71:1b:94:ba:c1:9b:74:c2:39:95:
e3:62:ab:2b:72:6a:28:c6:a3:ed:2c:12:c0:78:8c:
23:cf:6c:5b:7f:9d:88:f2:d3:4c:74:ab:8b:31:30:
d2:75:08:67:6e:c9:e5:11:6b:c0:ba:f3:00:d0:b9:
f6:b0:76:83:d2:1d:c1:5e:11:94:3a:2c:32:72:dc:
e3:bb:17:a8:6a:46:0d:5c:be:db:dd:fd:f9:a4:3f:
9a:b2:9d:70:bb:95:02:8e:cd:dc:43:3d:e6:c3:dc:
4b:c9:c8:a7:1e:60:1d:44:09:93:53:a7:50:ec:d0:
33:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D3:F2:74:5E:66:87:79:2F:2F:1F:B7:B3:C6:1B:77:20:DE:F3:50
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:26:47:e0:88:84:5c:5b:c6:06:ef:23:1e:11:85:08:f9:60:
b1:ab:55:3b:fe:1b:e2:1b:99:6d:0a:a3:b5:ba:48:bd:ca:39:
b4:7b:28:e5:61:b6:0a:d7:95:bd:1f:e5:00:fb:4d:e2:69:25:
f9:b4:f9:6a:b0:6e:d9:e8:dc:d2:38:f5:ea:8b:26:13:32:d7:
d3:ed:e8:30:82:9e:76:5f:5f:e9:39:96:5c:1c:b3:02:b8:94:
9d:5d:8c:22:07:76:fb:bd:12:a1:07:0c:c2:2e:38:f8:85:3b:
22:61:73:e5:0c:09:82:d1:33:16:3c:f7:5c:c6:0b:a5:0c:94:
bd:ac:b3:1c:d1:37:e4:db:8a:fb:fd:f7:48:fb:8c:7d:73:a0:
93:27:04:f5:79:4e:6d:05:23:2d:ac:eb:e2:42:2e:ec:99:24:
8d:b0:07:12:bc:7b:a4:26:5c:4e:f1:8f:b5:59:39:a0:6f:a5:
30:b6:c3:db:16:12:98:0b:16:4a:d7:b1:87:e5:86:b6:5d:7b:
a3:2f:96:d9:ab:e7:a8:5c:a9:49:c3:2f:5a:a8:e2:4e:84:6e:
cb:0f:60:78:26:e4:04:e3:56:02:0c:b5:79:46:33:0d:8e:1a:
fb:40:d2:67:c0:7d:62:59:87:8b:10:48:74:21:45:aa:10:f5:
7b:1f:8c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:45 2025 by rpki-client