Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
File: cFUm-asN0naCP8Hw66od5jt9ZWw.mft (raw, json)
Hash identifier: k786MceYGwkcQ9LQ43NvpAQyoqTx9ekxnsQtBeG8rT4=
Subject key identifier: 19:B1:5B:2E:54:7F:DA:C2:14:96:8C:62:2E:C5:E1:E5:BA:DF:9B:06
Authority key identifier: 70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
Certificate issuer: /CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Certificate serial: 0194BCA9B599E537120C20FD2CCE7DC3BA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
Manifest number: 0293
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: cFUm-asN0naCP8Hw66od5jt9ZWw.crl (hash: LRccBZ4xzrX9Vpb2vN7VP/yACr54EBRZagSTRlxRmsY=)
2: yETJRCulpX8WNZcfOAFqy72Srf8.roa (hash: mwiJGcKb2MAwWuqaRGZUo2KeH/efjz418z+bxhMih0M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b5:99:e5:37:12:0c:20:fd:2c:ce:7d:c3:ba:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705526f9ab0dd276823fc1f0ebaa1de63b7d656c
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=19b15b2e547fdac214968c622ec5e1e5badf9b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:7e:87:31:e8:cb:93:82:69:a2:ca:f3:d7:
2f:76:21:f4:be:a3:05:ff:fa:60:91:ad:20:1c:27:
50:b9:b2:73:0e:d2:e5:0d:72:2f:b0:7c:fe:de:a8:
bf:03:b5:6f:04:24:bb:21:c1:d4:ac:b2:b8:48:91:
07:97:8c:4c:b7:0b:e1:e5:e8:fa:b1:fe:1a:f4:24:
8d:1e:67:90:c0:53:4e:10:dc:63:8a:d0:d0:4c:41:
f9:e6:ea:3e:f0:70:73:cc:79:72:53:9e:97:21:6d:
a5:8d:cb:17:b7:d0:ad:28:a7:25:12:86:60:92:29:
7b:38:2d:cb:f6:5a:1a:da:9a:af:d5:b8:04:98:38:
11:38:b7:de:95:88:ad:c7:a5:10:b3:28:e6:12:0d:
cd:d9:e7:5e:82:13:48:85:9a:2e:27:30:35:3a:c9:
53:eb:18:dd:a0:a2:32:e6:b4:ea:59:ab:6d:22:48:
52:3f:59:62:7a:ac:da:bc:b1:b5:54:5b:b7:1f:21:
d8:9d:08:b9:2f:bd:e5:bc:08:c3:99:bd:b3:6f:2f:
3f:4d:a1:e7:ba:26:0c:09:29:4d:7d:d0:01:52:c8:
17:fd:47:67:3d:33:7c:17:e1:7c:53:45:6d:59:e9:
de:28:13:81:39:ea:da:ee:7e:2e:18:24:ae:e2:5d:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B1:5B:2E:54:7F:DA:C2:14:96:8C:62:2E:C5:E1:E5:BA:DF:9B:06
X509v3 Authority Key Identifier:
keyid:70:55:26:F9:AB:0D:D2:76:82:3F:C1:F0:EB:AA:1D:E6:3B:7D:65:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFUm-asN0naCP8Hw66od5jt9ZWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe71b6-6aaa-4bd4-8661-6998ab7edf7a/1/cFUm-asN0naCP8Hw66od5jt9ZWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e8:ca:05:b5:4c:8b:a9:ac:4e:85:7f:e1:06:70:ec:5c:90:
8b:ec:4b:68:16:87:22:3f:85:11:14:68:14:7e:51:7d:93:9f:
c5:69:f9:b7:a0:f5:22:bd:55:28:aa:02:2b:a8:73:17:5d:86:
d4:4e:34:58:3e:5e:46:a8:fd:b1:83:c3:50:1b:cc:93:c9:07:
67:a9:d0:6e:8a:b7:50:83:fd:e6:5f:6d:6d:5a:7a:34:7c:7c:
fe:fe:21:ef:2c:19:4d:13:33:0f:0b:54:0c:81:cd:03:76:8a:
49:55:1d:ea:be:c3:e8:a0:59:5e:33:44:8d:f1:42:01:2c:ea:
6a:9d:39:c7:d8:c0:06:a5:7b:8b:58:4a:4d:15:4e:35:a0:ce:
d4:1c:15:5f:93:37:90:14:0c:2e:75:03:d2:6c:2b:5d:c5:7b:
4a:77:47:89:15:87:00:a0:0b:9b:39:92:fb:33:63:ff:3b:98:
68:28:e1:1a:fb:bb:f5:d5:44:84:dc:53:bb:95:c2:e5:9b:8a:
8a:b1:87:a2:37:75:87:f5:0f:7c:bc:7e:4e:44:e0:79:fc:ca:
b8:f0:6b:42:37:9e:7a:8b:c7:66:d1:5f:65:83:09:a9:cd:c1:
17:5b:6e:b1:0e:5e:9a:60:18:cf:8f:69:c5:25:77:e8:61:08:
4b:d6:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:01 2025 by rpki-client