Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: c49C0EI3N1+ge6lzfbtJf6aBFkq4TFw1N6PromQoQXQ=
Subject key identifier: 24:4B:3A:D3:BD:01:02:E0:26:D4:13:23:C4:4F:BB:C0:5B:D2:1D:CF
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 0194BC04DD29C4431256366D0245AA117EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: Hbf/V7V4OLQgNpZwwNRW8zl9QycEDa0SnmN9LNpRy8Y=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:29:c4:43:12:56:36:6d:02:45:aa:11:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=244b3ad3bd0102e026d41323c44fbbc05bd21dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:a5:fe:e7:6a:a9:af:7e:c7:fb:9f:19:ce:
ae:93:ff:a7:cb:9d:43:4d:db:b9:5c:6f:d2:c6:f1:
20:ea:06:66:e0:81:26:2d:5e:ff:17:a2:67:08:dd:
61:1f:cf:71:f2:a7:da:99:92:f8:f3:cc:65:62:f3:
d6:ac:df:5d:c8:b7:47:76:4b:20:d1:58:66:13:c4:
3a:37:c9:cf:e3:26:45:a3:d0:18:d4:cd:19:06:c0:
37:48:2d:8d:e9:50:d2:c1:77:d0:d3:bb:95:fb:b8:
8c:2c:9c:99:05:dd:fd:91:78:07:e9:1a:9d:f8:db:
2c:05:b3:eb:41:32:77:45:4c:85:c2:bf:95:30:8f:
56:47:d4:00:4c:0a:fe:08:fa:ed:d5:d3:3f:98:98:
c0:ea:e0:56:b7:24:dc:71:fd:d3:c6:c7:60:44:87:
df:d2:f8:ba:e1:6e:3e:c1:5a:0c:a9:a9:d7:87:3d:
09:7f:51:d5:97:6c:dc:99:62:df:95:31:ca:4f:16:
10:82:28:3b:43:a0:fc:11:4f:10:e5:7d:dd:f7:25:
62:ab:1c:84:84:aa:2e:a2:6d:ff:09:cf:24:98:14:
43:11:61:b8:f4:e2:46:94:6e:7d:be:0e:54:bc:58:
3e:a0:e2:54:6d:9c:79:64:4e:d7:c6:92:91:37:55:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:3A:D3:BD:01:02:E0:26:D4:13:23:C4:4F:BB:C0:5B:D2:1D:CF
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:f2:71:46:23:c6:5a:fe:a8:17:e3:0e:89:bd:d1:f1:9a:
87:ac:9f:8b:0d:1e:58:82:7e:d8:c0:71:12:2b:8a:18:08:12:
87:5c:ef:ff:d2:87:e7:70:a1:fb:e4:4b:df:17:53:af:3a:d0:
e0:1b:27:30:f3:5d:8a:05:7e:eb:70:f6:e1:81:bb:78:bd:04:
bc:6c:76:1e:6a:cb:0a:5a:74:d0:68:08:0c:cc:48:bf:2e:fa:
92:06:43:af:54:82:9e:fe:c7:1a:c4:14:7d:9f:6c:cf:85:00:
c2:11:82:17:df:b1:c4:0a:97:6d:9b:a5:0c:f4:10:59:87:74:
e2:5c:2d:e9:42:64:89:99:89:80:0d:5a:ed:cf:01:a8:94:d0:
28:ac:a1:95:c3:4c:36:66:e0:ea:17:05:44:f9:56:b1:05:49:
3b:34:d7:45:6f:55:6f:e4:dc:bf:01:c7:a0:b2:c4:4f:35:81:
8b:36:3e:b6:64:e0:24:a5:e3:5e:89:18:3f:c4:ec:ab:50:74:
55:24:81:ad:f1:cb:8e:c6:0e:92:51:cc:f3:1e:4c:14:18:52:
87:6c:89:85:a4:22:d9:fd:35:41:99:ae:37:38:a6:cd:4c:48:
a1:02:5f:da:36:de:a6:31:0c:b8:83:72:1a:a1:84:96:09:2a:
b5:16:25:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:39 2025 by rpki-client