Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: RHSbktnhPsX3O1FBS10so1c980MCmLpORRBruAnRToI=
Subject key identifier: F8:74:84:76:BB:03:C4:74:76:61:32:E7:8F:7C:0F:51:2C:7E:15:59
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 0194BD17B93BBC2CB83E033C50AA5EF096A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0B37
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: f5YbQvrlkiDnYMSaGDaTLQV9lBkpbQY8NxCX9S8YSJE=)
2: dejiYWXpVyt-n4zSW5_bBe-6r0A.roa (hash: S+DqE/3RRz1xoArghf5VPCEdg1QAxwIn8VFz5upxaGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:3b:bc:2c:b8:3e:03:3c:50:aa:5e:f0:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=f8748476bb03c474766132e78f7c0f512c7e1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:c3:d9:3c:0b:4b:56:c6:fb:cf:78:97:4a:
41:b8:1a:4f:b1:ec:28:39:41:b6:ef:04:46:c5:8a:
a1:11:9c:fe:bd:65:ef:59:a8:7e:32:73:6c:72:e3:
cb:ab:66:d1:50:c0:82:a2:70:2f:88:fe:49:3a:b8:
43:61:ea:b1:3c:6d:5c:12:a0:cb:b6:9b:f0:2c:8f:
7e:77:e4:89:1a:31:8c:eb:13:1e:a5:5a:03:98:de:
65:ab:1c:d4:58:1d:2c:fe:c3:05:bb:e7:b9:38:2c:
bb:6d:58:ab:98:8c:d2:36:9a:d0:a2:cc:3f:bb:77:
08:d2:c1:98:1a:d6:fe:b4:83:58:e6:2e:4a:5f:10:
e5:5b:d1:d3:ce:f8:c0:e0:12:d4:db:da:54:0b:48:
01:49:19:2a:74:22:dd:d3:dd:5b:6a:e6:37:5f:f9:
da:6f:ef:69:e0:7a:38:e7:2e:1b:b4:e1:52:fb:e1:
11:66:a3:b4:35:05:c7:b0:e8:ec:4c:ff:7e:ea:ae:
97:fe:27:f3:31:26:5f:14:fb:78:df:ac:bd:1b:d9:
30:c2:d8:65:d3:15:ce:55:ca:e6:0a:10:ae:21:46:
ca:81:d8:ef:66:b9:d0:4d:52:34:40:83:bc:92:bb:
85:4c:af:6e:2a:07:4b:03:01:a0:0c:72:5f:3d:11:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:84:76:BB:03:C4:74:76:61:32:E7:8F:7C:0F:51:2C:7E:15:59
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:3c:d3:20:71:9a:b8:18:c8:96:3f:84:b3:41:47:01:7f:b6:
ec:91:ee:22:ce:76:d7:68:35:6a:52:1c:8f:f6:ba:39:b4:35:
a3:6d:f0:06:51:62:64:73:29:99:67:93:6f:b7:b5:d4:c0:96:
ab:19:a5:07:08:2c:31:8c:da:c7:8e:38:14:5f:f2:5c:52:f6:
b0:b3:0a:dc:3f:18:2d:d3:80:ec:5b:9d:b9:fd:c8:3c:15:b1:
4e:2b:f9:74:8c:ca:47:46:48:8d:f8:5f:c3:21:06:b3:a5:ce:
d0:45:55:12:ff:1d:9e:58:a9:9f:95:43:77:56:f8:75:3b:b3:
c0:4b:7e:22:2a:2e:58:e1:f0:fb:9e:5d:22:05:b2:b6:3c:9e:
be:76:9c:bf:c1:b5:56:df:a8:53:49:56:6b:f0:6c:b4:de:12:
69:a0:72:65:b4:55:6d:2b:ff:4c:6b:48:a6:d9:3a:11:fa:c0:
0d:cc:bd:d9:65:2a:aa:d0:a9:40:ed:bb:6f:76:e0:25:b6:e8:
77:ee:2f:54:fd:f7:80:14:de:0c:d6:71:a0:83:6f:ad:4d:d8:
8a:9e:71:c8:91:f1:ca:24:1d:17:0d:22:63:a0:47:ac:e5:0b:
d5:1c:de:41:10:5a:3c:21:8d:d3:3c:91:69:52:ed:7a:ec:44:
8e:7a:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:59 2025 by rpki-client