Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
File: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft (raw, json)
Hash identifier: A83emmOCoZ40bpuNrE3V+uTERHc2uZsTV8jChRq3HBk=
Subject key identifier: CB:A4:72:0A:88:2E:19:74:A8:A9:DE:69:43:C0:28:AB:2E:2A:BD:69
Authority key identifier: DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
Certificate issuer: /CN=dfb8d9140502c9e035305189bf658234db14f54c
Certificate serial: 0194BCA9C57CFFE3862B3B21BAA5447820C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
Manifest number: 07C7
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl (hash: +rFel0LLAjJaTm9aC7WbbFDJMNkGIn1tMLiJO1xXywI=)
2: k4A3cCl51iCG2KeggiWTAeyxiv8.roa (hash: h0SGu5KkNYwSaAJB0Xe4I84XGZJFlf4gg5OKIDobJRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:7c:ff:e3:86:2b:3b:21:ba:a5:44:78:20:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfb8d9140502c9e035305189bf658234db14f54c
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=cba4720a882e1974a8a9de6943c028ab2e2abd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:43:71:75:b6:85:8a:9c:a8:69:8c:7c:9a:
c7:fb:6e:15:25:73:63:06:9b:10:e3:3d:90:d1:49:
1d:39:85:12:0e:c9:31:bb:48:3a:e1:09:ce:5a:4c:
54:99:c1:fa:a2:dc:e9:99:bc:fc:b5:b8:9c:4f:b8:
06:01:14:68:6c:44:5d:04:6f:e1:a3:bc:f9:0a:3c:
e0:c4:52:42:cb:e1:9d:f9:ff:01:16:a4:95:a6:9f:
b2:93:4b:47:8e:e5:9c:6f:35:14:eb:95:7c:9c:4d:
2e:84:ee:f4:cb:5c:2c:80:74:dc:66:f5:6c:8a:8c:
b7:d9:f2:05:e7:55:2c:93:3d:e6:7a:44:d0:d7:d6:
21:1e:65:2a:94:10:05:47:27:35:c5:92:09:aa:c9:
98:9a:a0:04:ea:eb:8b:14:69:18:61:44:08:f3:0f:
ee:1c:6d:3e:df:c9:08:00:2a:da:d1:95:c7:aa:72:
e1:4e:04:c4:4d:a7:0c:ac:57:99:04:3c:fc:e1:fa:
93:27:ea:26:78:a4:a7:9b:9b:b0:7d:cb:65:a5:5c:
d6:b1:d7:bf:84:fc:17:a5:39:ae:3c:4d:8c:af:01:
84:a4:dd:5d:4c:54:71:57:ba:d1:e0:a6:a6:44:c1:
45:56:eb:6c:af:ab:1f:e8:e5:73:75:38:c8:ab:1e:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A4:72:0A:88:2E:19:74:A8:A9:DE:69:43:C0:28:AB:2E:2A:BD:69
X509v3 Authority Key Identifier:
keyid:DF:B8:D9:14:05:02:C9:E0:35:30:51:89:BF:65:82:34:DB:14:F5:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37jZFAUCyeA1MFGJv2WCNNsU9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/62a947-cfb8-4d3d-b308-41e73c1ebae1/1/37jZFAUCyeA1MFGJv2WCNNsU9Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:02:29:24:c4:9b:09:de:bd:32:f4:5e:64:74:a6:e1:98:ee:
56:51:dc:36:66:c9:e7:a2:f6:7d:e2:f7:e4:f5:eb:78:bf:82:
8e:68:09:32:ba:f7:be:52:32:b5:ee:b5:96:48:fe:68:8c:e5:
6d:9e:07:38:56:6e:7d:5c:84:7e:57:e3:c6:dc:6a:f2:fa:e0:
84:9a:43:46:45:9a:84:ee:86:c6:e4:f8:bc:85:a1:d8:08:21:
e5:39:8e:2b:52:61:a9:4c:9b:92:ca:13:e7:c8:64:de:04:cd:
31:08:79:fc:da:71:e8:ab:0b:ae:8e:a5:11:c7:7e:bb:a5:54:
6a:f5:ba:17:67:c8:de:9b:b0:6a:0d:b1:c4:34:75:27:3b:e5:
19:1c:7d:f5:99:c1:b5:0c:23:5e:16:cc:88:f4:45:af:08:fa:
de:55:b4:f1:4f:c3:b3:5e:29:82:1c:cd:32:8b:00:3e:3d:5f:
87:11:8f:64:ec:6c:de:da:c8:02:ca:8b:97:f3:23:fd:76:34:
9c:5c:bc:d7:24:19:b1:4a:56:57:0d:c5:bf:ec:74:d7:e5:84:
c6:3d:f8:23:9e:dc:62:59:4d:ab:e8:2d:11:9f:8f:0c:6f:c2:
bb:7e:70:98:3d:c3:03:5b:3b:92:c2:12:1a:64:60:88:54:5d:
63:ca:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:55 2025 by rpki-client