Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json)
Hash identifier: Y39LZAbxW0F3wchzrj6okQx2ik1qsPQkVtPMmsOyk1s=
Subject key identifier: D6:F8:6A:11:A4:81:8A:22:86:E9:4E:C6:1E:5B:38:A6:8B:FE:D9:A2
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial: 0194BCAA06E85D138AEB5609B8980237D769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
Manifest number: 10C4
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: F+70pQxiNkA5eJUsU7IBO7ET+rL2Cqory0GjgOVs5Kc=)
2: tFsxYNJ-pvk9ebf-ewoCu0vCFeI.roa (hash: fEyaOVZRLIFifs+RWkNXOgYvzq9xsl1Jvqnurm5BNu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:e8:5d:13:8a:eb:56:09:b8:98:02:37:d7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=d6f86a11a4818a2286e94ec61e5b38a68bfed9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:bd:6d:f7:37:bb:7f:b1:3e:79:69:32:35:
05:14:1a:01:73:db:bc:ce:11:70:9a:43:ec:67:7c:
75:d4:a7:ac:4f:f1:ab:8e:5b:44:4f:78:ca:db:30:
79:2a:fd:73:34:cb:f1:de:be:84:11:6f:48:b0:f6:
be:93:11:9e:bb:f7:69:0d:35:d9:cb:83:cb:4c:e4:
f9:ec:fe:26:d2:24:82:76:62:22:5b:25:b3:ee:08:
d2:a8:df:da:1c:6e:45:30:cb:7e:10:30:6a:b9:80:
18:da:e2:35:70:9e:b5:b4:f4:c3:d0:60:98:ee:77:
e0:d1:7e:2a:a3:0f:59:29:b8:4c:e0:64:80:04:6f:
05:29:a5:2f:05:bd:c2:4b:8c:32:27:04:cc:fc:fd:
38:84:5d:92:d7:a0:18:91:97:87:4b:cd:02:d7:f9:
38:b2:86:ac:d9:59:aa:81:49:74:5e:66:db:52:71:
b0:b7:94:75:c3:8c:51:a8:7c:12:e5:41:5c:f5:d2:
de:c8:4c:eb:5f:5d:34:71:9b:ed:c1:81:05:e2:41:
43:39:4a:39:75:85:cb:ea:27:8b:72:c8:d0:a3:c8:
38:72:a6:7a:92:7a:cb:d8:59:c5:b6:20:bd:06:8a:
6a:bb:2d:51:df:10:d6:68:81:58:e7:b5:3b:7d:60:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:6A:11:A4:81:8A:22:86:E9:4E:C6:1E:5B:38:A6:8B:FE:D9:A2
X509v3 Authority Key Identifier:
keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:12:ac:13:65:4e:32:43:8d:47:0d:1e:24:5e:5a:8a:6b:
c6:f4:26:c4:fa:a6:a2:e7:8d:62:71:b2:0e:37:17:2f:8e:b0:
4c:5e:44:53:cc:7b:3e:36:0f:70:aa:c4:5e:8e:e4:da:9f:8c:
b6:8c:40:23:52:d0:94:b8:1a:b7:c8:95:5e:46:be:23:27:83:
9f:53:cd:42:c9:cf:0c:6a:68:cb:ae:91:c2:67:7d:ca:40:0c:
79:6f:1f:6e:67:db:1c:45:9f:5e:55:d2:c7:01:40:a9:a3:1b:
89:25:a0:18:bd:0f:f2:d5:e3:0e:dd:81:0d:a4:4f:c6:1d:fc:
49:a6:7f:40:66:da:94:30:8c:50:d2:79:42:75:d7:c9:d5:66:
f4:50:c5:72:b2:50:ef:25:5c:82:eb:95:d0:6d:5e:ee:38:cc:
fd:bc:83:94:ab:a5:8d:7f:a4:96:0e:c8:a1:aa:f3:63:f3:8f:
e3:70:38:ff:4b:44:c2:67:11:5b:87:1f:27:6e:31:2d:04:1a:
9b:ad:af:b6:e7:b5:87:21:61:b3:f2:bc:83:fa:f6:f3:dc:72:
be:59:05:80:7b:ec:3f:ef:d5:e9:56:e2:f2:10:16:90:be:88:
b4:64:c6:0e:ad:c5:2b:5c:c6:68:db:4b:5b:0a:ac:f4:b5:4a:
4c:8c:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:13 2025 by rpki-client