Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: M1I45OJfHWWi6lmN4SQ8xZRR75iOrQPm5JUnelTLwWs=
Subject key identifier: 1A:4C:FE:D7:BF:85:5A:48:07:46:5D:97:08:39:82:12:1C:24:75:AC
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 0194BC3BFC9C2AF8EE498E03106AB1054D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: oRnwJuHsV95OHwfWQPZa19abbns1GHmnlNl87Cq598E=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:9c:2a:f8:ee:49:8e:03:10:6a:b1:05:4d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=1a4cfed7bf855a4807465d97083982121c2475ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:8e:ce:c9:ff:3c:c6:dc:1b:fd:41:1d:d3:
3f:88:67:23:a7:13:ee:12:11:bf:97:4b:40:82:bd:
c1:35:3f:df:68:89:46:da:43:01:29:62:99:0a:95:
81:7e:71:ea:6e:fd:83:a4:44:64:2d:6b:94:08:29:
7d:84:fa:04:4d:84:2e:61:e0:b1:57:2a:0d:93:dc:
b9:21:90:81:32:c1:0e:1b:6b:b8:a9:8d:f6:da:ef:
44:64:e9:66:ad:72:39:7e:17:06:43:d0:40:40:a3:
7f:35:58:55:6a:91:99:b5:72:b3:31:91:1f:f9:18:
0a:07:69:ff:0f:21:30:5a:12:29:10:25:e3:01:05:
95:8e:23:4f:b0:c8:7c:4c:65:3f:96:da:94:9d:37:
1e:2c:a1:2e:16:97:09:02:eb:b8:5d:c6:2e:0f:ab:
77:db:c0:83:53:49:7b:d1:0e:12:45:da:fa:62:09:
1d:2f:53:6d:37:4e:ef:37:ff:c4:d1:bb:c7:37:89:
d4:87:d1:9a:a7:10:f3:c7:50:1f:e7:f4:d1:25:c0:
b7:35:19:1a:70:25:94:ba:18:99:df:3f:ea:6a:8c:
97:55:2b:4f:84:ac:6f:82:fd:b9:e1:7a:10:55:92:
73:4f:e4:68:89:45:b7:9c:67:99:13:4e:04:1e:54:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4C:FE:D7:BF:85:5A:48:07:46:5D:97:08:39:82:12:1C:24:75:AC
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a7:1a:db:ce:27:b7:7a:8d:30:b2:2d:1d:20:da:b5:2b:2c:
a5:99:e8:75:a4:54:63:35:37:2d:d7:ae:94:d6:b1:84:60:e1:
33:7e:ea:84:20:02:81:c5:55:66:23:1d:56:30:24:bb:7e:15:
d8:11:08:17:1b:e7:bb:31:c8:4a:cc:a5:43:a9:5b:7c:36:87:
51:95:b5:f8:a6:26:cd:39:df:14:cb:ce:23:5d:b9:d1:90:f8:
67:3a:b3:d4:14:61:7a:ad:11:9a:b2:6b:50:c8:ee:ed:ea:e9:
d7:3f:d4:5b:e0:09:c9:c5:f7:5f:f4:f2:bd:2c:2e:f2:ad:70:
ee:5d:1d:83:8c:f8:3e:bc:71:40:98:63:f6:ee:c7:10:d5:dd:
db:61:42:ce:e8:46:07:7c:d3:b6:c8:e7:d5:e9:cd:7f:5a:b4:
df:68:45:1e:33:a7:73:95:03:55:99:af:6a:7d:1a:73:4d:f4:
e5:33:20:6b:4d:ea:3e:b1:ce:6b:ad:d0:71:44:4f:12:58:04:
39:5d:16:1a:61:0c:f8:39:83:38:3b:c6:57:70:42:8a:42:ad:
81:71:dc:d8:1c:91:41:61:42:f0:ff:ff:8d:b4:fb:c4:8d:56:
73:d1:a0:96:29:6d:3a:80:f7:6a:3c:fa:18:3d:d6:3b:3c:10:
01:b5:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client