Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: kb4OCrVJOSxK44Oiwl8mgDyY2GPy/sUtby5BUKfZAhI=
Subject key identifier: 51:D8:F5:CE:32:41:39:8A:AA:05:5B:CE:55:79:C7:2E:AE:51:AB:76
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 0194BBCEBC5FDA5E69AF9D551B10528772DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 1031
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: slD7DmQZJ2QeLhQOgXKR/BCJvIthhBSiWga6WDoSnOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bc:5f:da:5e:69:af:9d:55:1b:10:52:87:72:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=51d8f5ce3241398aaa055bce5579c72eae51ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:64:aa:94:af:c5:60:29:8b:b4:fd:00:cd:
b0:0c:a5:0b:81:72:a4:3e:9c:bd:10:9f:b3:33:69:
40:2f:fa:e8:39:c4:e2:ae:74:b4:90:bc:39:fd:40:
1d:ef:c6:c6:42:ae:fa:52:8b:cc:5e:90:50:87:38:
13:b1:b8:97:0d:0a:58:f3:ad:51:71:f1:c2:51:0e:
2d:2d:af:c5:df:96:b9:5a:e8:c6:76:e7:66:ed:28:
85:ab:04:0f:03:d4:2a:b4:70:79:3a:50:27:45:2c:
47:e1:15:9a:c9:74:6b:a1:77:b5:79:59:d7:79:bf:
6e:5a:58:60:e7:31:f0:24:5b:b5:98:68:27:d2:a7:
67:21:89:92:23:a7:14:0b:30:ac:91:f9:af:74:dc:
82:d4:a0:f6:50:ae:f8:dd:62:34:b5:7a:12:ea:cc:
27:39:d1:19:a6:6e:95:f0:69:08:56:90:52:a9:f7:
04:93:0b:02:e1:9c:cb:30:fb:c3:15:a6:3f:1b:74:
9e:46:38:5a:92:87:df:9d:23:54:18:cf:a3:46:73:
6b:40:a5:c8:fc:34:31:4e:5a:ff:80:15:76:b4:80:
f9:19:1c:b7:35:b3:02:50:a3:10:75:c3:b0:32:cd:
92:0c:18:ec:54:c1:22:5b:d9:72:d0:3e:36:8f:42:
34:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D8:F5:CE:32:41:39:8A:AA:05:5B:CE:55:79:C7:2E:AE:51:AB:76
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c3:35:c8:e3:55:64:00:54:e4:37:6b:07:bf:fa:34:80:48:
c5:7c:64:91:2b:cf:96:03:49:9f:da:b9:9c:2e:03:b3:69:be:
37:ba:85:33:95:42:eb:81:1a:29:90:3e:57:b2:49:1a:ef:ff:
4b:a2:7c:29:37:c3:5b:7a:7b:a0:93:4f:87:05:0b:ca:95:1e:
c8:d3:5f:d8:15:93:73:f8:e8:99:08:7b:d2:c7:b2:46:b6:c8:
64:6a:17:0e:9c:40:20:5f:8d:a7:1a:d3:44:90:53:5d:c5:dc:
b1:f0:84:c3:35:5b:5f:60:eb:49:2c:fa:77:5f:60:e4:97:30:
ba:b7:eb:b7:70:4e:9d:8b:e2:dc:83:9c:5d:59:5e:5a:a1:81:
0e:70:b0:c3:56:f2:3a:4a:41:d9:17:8e:29:09:ab:18:b5:84:
1d:4f:df:4c:cd:7b:b5:bf:16:66:4f:8a:7f:67:b3:c8:fb:b2:
b0:d1:57:fa:a7:2c:68:c9:59:16:3a:72:50:b1:f7:7b:7f:eb:
e6:c4:88:6d:49:0a:4e:a0:0a:e4:9e:69:c8:e2:ff:0a:bd:1e:
63:d6:97:5a:36:c9:4e:b2:1e:13:fb:07:e7:ce:b7:eb:85:af:
b3:6f:86:3c:19:ad:1f:cb:d9:fb:cf:2e:d9:25:16:63:f8:2f:
17:a4:b1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client