Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: 1+aXCN4dvrgDWEwRP3R0TdY4qY6vk7qSDdbfBCL506Y=
Subject key identifier: DA:B0:7B:5D:E4:75:F0:35:CB:FC:DC:A4:FA:A1:32:AC:09:84:D8:03
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0194BCA979066F6D312F2C816BEEE48E929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: +RPVDx+OGXIq5AyM22PaQrMFuFtCQmTKz6zXcHJ0gUM=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:79:06:6f:6d:31:2f:2c:81:6b:ee:e4:8e:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=dab07b5de475f035cbfcdca4faa132ac0984d803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:9c:97:c7:06:2f:f4:72:34:99:8e:c1:12:
ca:f4:3c:8c:f8:2a:ea:d1:23:af:3c:64:d8:da:66:
99:e0:de:49:4a:ab:f6:d1:72:d4:81:bd:df:0f:c1:
b1:54:60:95:47:8f:f7:47:f9:a8:c3:e7:ab:3b:53:
58:13:fa:83:05:52:a0:18:c9:fc:65:10:6c:d9:be:
d5:d6:f7:72:f3:fb:b5:4f:f4:9b:49:96:04:94:c3:
4d:c3:ab:61:b9:0d:3e:d2:cd:1c:f7:4b:a4:b1:40:
9d:69:3e:12:3d:8a:74:54:f9:92:b6:c0:e0:90:ae:
f4:85:21:99:67:cf:c9:4f:ed:3b:7f:85:0a:08:a8:
27:04:30:72:4e:5d:5f:8c:10:7c:4b:0b:36:98:7b:
cc:ca:30:d8:e2:4e:37:51:ea:40:3d:ed:00:bd:10:
00:51:99:a9:97:d1:02:b0:3f:27:e1:12:8d:e3:60:
8b:e6:cf:12:66:cb:0e:a0:fb:7a:49:fd:b5:46:ec:
2a:ed:34:85:ba:0e:bd:2f:48:fc:09:fd:30:4e:6a:
a8:d8:1a:89:49:67:ab:fb:e9:d6:01:65:aa:5e:04:
3d:6b:89:6d:c8:74:a4:dd:44:47:be:58:61:70:ef:
6e:eb:46:61:d1:10:17:fd:43:c7:f6:b6:34:e9:c9:
8b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:7B:5D:E4:75:F0:35:CB:FC:DC:A4:FA:A1:32:AC:09:84:D8:03
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:84:85:61:58:81:71:33:c2:73:77:4c:e3:7a:72:90:a2:26:
29:a4:d5:70:d5:80:07:07:4c:41:0e:b6:00:6d:2f:f9:36:e9:
d0:03:37:36:6d:e2:f3:af:3b:2b:68:1f:80:39:ec:93:ee:f4:
e8:64:e5:ed:80:47:ec:66:16:65:d9:8b:ff:1e:f0:de:b6:b1:
f0:36:f6:f3:c7:1d:78:70:6e:b9:f2:e4:3c:2e:a7:71:6b:a0:
da:48:c8:38:c9:79:f2:e4:ee:6f:68:b9:7b:24:4e:25:98:e2:
06:c1:75:9b:26:44:b7:0d:85:18:fc:5d:f4:13:c6:96:c5:11:
d2:da:fa:da:a8:ce:cc:73:ac:b2:78:5d:6f:58:cf:65:f9:4a:
9b:12:52:30:bb:a9:2b:9d:d6:20:55:87:4b:70:2c:be:57:b6:
4c:df:cf:72:ed:1a:50:c1:c6:8a:5e:53:bc:4c:58:24:93:c4:
2d:69:34:91:be:04:18:bf:e7:a8:16:ff:70:63:c5:b2:2b:a7:
4f:fd:07:54:ce:eb:70:ac:3e:be:51:66:46:24:ec:d0:0a:98:
bf:f7:d4:67:d2:18:93:ba:a6:16:8f:22:07:b1:e9:1f:fc:4e:
1d:bf:41:8b:dc:84:63:7b:29:55:d3:77:37:a5:9d:ac:6a:5a:
2e:61:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:56 2025 by rpki-client