Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: 4G5SpLepzLJWHqntrVWZ95PR0BWkVLmeRNbtKc+aJpU=
Subject key identifier: 54:08:85:B1:CE:AE:E4:B6:73:9B:D3:0E:50:AD:DB:1D:2B:6B:2E:17
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 0194BD4E3B4EDF7E9F983AAF7B75D41CEE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0763
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: 5K2zlrIHADlFytOUhc54zx-uCAw.roa (hash: VJ3nEApsPTUcM1XeIb75bGQ+CbjZ/H8pdnWKdP3UYOg=)
2: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: wtWI6UnScIpNKrpJCLtEVpyKn85V9pHLgYufiUxycl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:4e:df:7e:9f:98:3a:af:7b:75:d4:1c:ee:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=540885b1ceaee4b6739bd30e50addb1d2b6b2e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:b7:31:c1:29:9c:ca:af:ad:02:39:9c:08:
6f:49:d7:96:a3:a2:7f:b4:4c:94:da:ea:38:f9:a7:
6d:f2:62:de:a3:04:a8:7f:47:48:f0:6d:68:f8:d6:
f6:2d:31:4a:d9:c2:4d:d5:6c:be:ef:f0:ab:5b:f0:
30:9a:43:30:40:ad:67:ad:57:33:57:a5:42:31:58:
9c:ac:6f:ef:96:b4:15:e6:1c:ec:2e:32:15:d5:f1:
84:db:ec:31:69:05:9a:3b:e3:3b:fd:a0:39:df:0a:
b9:b5:e3:79:aa:4c:64:fe:c4:93:46:69:3f:a8:87:
01:95:cd:d2:d2:d8:f7:fa:cc:4b:67:12:ec:5d:26:
47:94:59:de:74:0e:2e:44:29:b5:83:11:2a:26:27:
ad:08:bc:2d:b8:54:23:69:75:4f:31:41:2d:84:01:
59:7e:1a:b1:28:2f:64:63:42:8d:c4:d4:29:45:85:
77:d8:ad:5b:ba:f7:b2:c7:34:26:07:58:c9:b0:a6:
51:0d:fd:28:fd:88:59:86:7d:1e:99:0e:eb:4a:ac:
3c:2c:8f:83:57:89:eb:57:2a:18:81:bb:dd:b5:d1:
e8:ad:b7:fc:0b:9c:18:d6:9c:e8:93:cd:fa:7b:d9:
64:4d:ca:48:0b:d9:90:76:4d:f5:32:bf:7f:2a:cf:
9c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:08:85:B1:CE:AE:E4:B6:73:9B:D3:0E:50:AD:DB:1D:2B:6B:2E:17
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6e:b0:98:8b:20:33:34:b9:25:f5:3f:c3:74:ea:fd:ea:e1:
ec:e7:e5:2d:a1:95:5d:cf:2a:35:4a:a4:db:e1:5e:f6:e9:08:
79:cf:67:df:52:82:aa:81:4d:df:41:93:4f:4e:6b:92:a1:ad:
5b:ba:cd:1f:b7:af:85:0c:48:ce:d6:fd:b7:65:08:1b:4e:ed:
03:6c:5a:77:18:5a:fb:6d:e2:9b:f4:d6:e8:6f:95:f6:45:1e:
99:90:ad:c6:79:28:f8:56:8e:93:41:0f:78:35:5d:e7:a2:63:
d7:ef:c1:87:24:d7:94:74:89:49:82:60:87:b1:61:4f:ce:2e:
82:92:8f:d8:59:58:35:b2:aa:ec:98:60:3f:4f:c5:e0:ed:e6:
9c:e6:3d:99:af:0a:5d:37:4b:21:93:03:05:af:d2:0b:8a:77:
c8:bb:52:66:ff:38:05:c8:be:c6:72:4a:c9:f3:5e:80:0b:9b:
f2:0b:bb:88:36:02:1e:89:09:5a:ec:2e:73:8a:09:28:e9:2b:
11:56:bd:9b:cc:f6:12:57:c7:14:e3:4a:24:a5:3d:01:db:7b:
d4:78:e0:ce:8c:02:d7:ec:8d:d5:c5:fa:8d:a8:b0:a7:ce:85:
b6:84:ae:4c:e2:43:a4:15:16:7b:fb:34:40:d8:a1:f0:92:02:
2b:cc:3e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:18 2025 by rpki-client