Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
File: cIEc4M5zU_A-3py3ylEWJV-_t70.mft (raw, json)
Hash identifier: 4fmiuQLhsDRokDhMLf1jHiPL2ocxyUHRVFtFR/3ioLc=
Subject key identifier: 68:C8:A7:9E:5B:E7:AD:38:CC:2C:58:85:0A:AD:FB:AF:29:C0:C5:4C
Authority key identifier: 70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
Certificate issuer: /CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Certificate serial: 0194BBCEB29B6E4FB288B3309CCF09A5FA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
Manifest number: 08E3
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: 1-VdOr1FUP7HNxfqfhOHB4LyOJ2Y.roa (hash: QB9LyYahw6voR06UwItPSAyVLMKgN6beiVidIvS+Rxs=)
2: cIEc4M5zU_A-3py3ylEWJV-_t70.crl (hash: HZFjmP2xJF/XcmWnA6D5qGf1DKdRl9z/BR6LcuQBKWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b2:9b:6e:4f:b2:88:b3:30:9c:cf:09:a5:fa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70811ce0ce7353f03ede9cb7ca5116255fbfb7bd
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=68c8a79e5be7ad38cc2c58850aadfbaf29c0c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:0d:5e:86:53:81:b1:1a:07:c6:6d:47:72:
e6:eb:a2:31:2e:3d:91:31:00:ea:b4:91:b3:a7:d1:
50:72:69:b5:25:f0:ef:aa:a6:3f:92:0a:14:11:92:
03:ab:a2:c3:64:6a:45:d8:4b:e0:3e:84:b5:08:fd:
78:11:8b:7e:11:b2:b3:a2:78:d9:e1:db:0a:5b:d1:
ab:bf:91:e4:10:b6:45:83:fd:50:a6:af:9a:31:4d:
da:e1:d2:63:99:ab:8b:2f:b4:ae:6a:d7:64:2a:ae:
2c:ed:0d:fe:09:e7:18:fe:2d:eb:95:ee:fd:bc:30:
3f:e0:d5:08:df:6c:41:33:a2:ca:da:dd:7e:16:ea:
3a:7f:9a:c6:bf:e6:48:6f:76:97:86:2e:ed:f9:7c:
af:61:e2:59:1a:74:de:39:47:8b:a6:99:76:22:c3:
59:4f:34:2d:30:ab:74:f1:34:18:a2:cf:56:75:61:
a7:14:e1:39:69:da:05:9a:60:85:6e:c8:58:fb:bf:
2e:ec:e1:8a:9e:d9:17:96:2f:68:92:ec:18:b6:7c:
b1:4c:1e:d4:f5:11:af:ae:67:3f:8a:c5:9d:ba:60:
a5:47:4a:d0:28:2a:73:3d:83:86:b4:a8:f4:dc:45:
a8:db:08:64:ab:80:15:6e:13:66:4e:23:ae:17:bd:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:A7:9E:5B:E7:AD:38:CC:2C:58:85:0A:AD:FB:AF:29:C0:C5:4C
X509v3 Authority Key Identifier:
keyid:70:81:1C:E0:CE:73:53:F0:3E:DE:9C:B7:CA:51:16:25:5F:BF:B7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIEc4M5zU_A-3py3ylEWJV-_t70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/45e632-b0fd-4d81-9cf7-8fd22105806b/1/cIEc4M5zU_A-3py3ylEWJV-_t70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:49:65:ee:d4:10:36:2e:d6:52:ce:bf:d0:ea:ef:1c:7e:
0a:fe:8e:21:66:e1:79:a7:23:d6:32:fc:c8:ab:6c:1e:af:87:
ad:40:ef:d1:de:d1:d7:45:c9:14:21:bb:a9:b2:6d:0f:3d:42:
ad:05:ae:e9:22:c9:b9:a3:5a:1c:71:9f:d2:b2:fa:73:40:ee:
43:90:eb:fa:aa:e7:6e:21:b8:f5:e3:91:c2:bc:c5:c5:f7:fd:
97:af:54:18:e6:f9:a6:72:44:cb:6d:a6:da:d1:5c:a9:97:33:
6d:12:3e:f8:34:ac:85:db:f7:af:66:de:17:87:26:76:c1:5f:
77:14:ac:1c:ec:04:89:42:b6:70:47:5b:48:99:84:55:08:48:
45:14:b7:92:5e:c9:50:d4:4d:e8:8f:03:29:06:7d:7b:b4:8b:
2e:c8:4c:22:9c:e8:a9:d0:f8:c3:c9:86:38:b3:20:e2:6a:07:
18:fa:02:8b:f7:ca:67:27:4c:98:53:97:62:17:2d:60:cf:0a:
2f:00:6b:1a:4f:6b:81:86:68:2b:2d:b7:05:12:cc:06:dc:84:
a0:18:80:3b:a8:58:d7:0f:d2:41:77:88:bf:82:7a:4c:50:1b:
a1:18:ea:92:4d:62:c2:5f:89:49:f4:14:c3:7a:d2:f1:33:75:
b5:12:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:58:05 2025 by rpki-client