Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
File: C-d565C-fVvgwdxIps0j29Q7l8g.mft (raw, json)
Hash identifier: 2Q2WpvluWGWNNipQFvbjTCAhcKjewEPzQzeJfch/DFE=
Subject key identifier: 09:07:7E:BF:9B:61:CF:FE:98:7E:29:73:3D:58:98:A2:02:CF:AA:6D
Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Certificate serial: 0194BC7292C46F59DD1A827E4091143FC116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: C-d565C-fVvgwdxIps0j29Q7l8g.crl (hash: qszwV3sJ3S2OZiEJTKvgoVI4IPjb3WSb2oMCMJq5HGE=)
2: x1_M_bS9TlyMefn7CSi3G_mxYag.roa (hash: r//WWHJ2T37fR9nqbc3jvubetwXeg8fgWHiHdZB+Qv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:92:c4:6f:59:dd:1a:82:7e:40:91:14:3f:c1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=09077ebf9b61cffe987e29733d5898a202cfaa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:03:94:bc:67:32:1f:a2:d1:f6:42:3b:82:
ab:38:ff:f4:22:47:4d:43:f0:a3:ae:da:c6:c9:31:
2f:8c:ee:aa:bb:78:7d:5a:26:82:08:48:34:80:06:
f8:49:16:9a:a9:db:f1:ce:87:67:0d:ec:f2:26:f5:
e2:68:e3:59:98:a2:87:c2:77:00:72:a7:ae:a9:76:
39:75:18:25:ac:53:e8:85:50:78:38:2e:0b:f2:f3:
c5:b6:89:77:0e:e6:2c:50:bc:97:1d:ce:b2:a1:c1:
e9:41:dd:6e:a6:fd:2a:c1:fa:df:db:57:38:ae:66:
c6:14:82:fd:0d:1c:b0:c0:ec:17:a6:13:93:4b:fe:
25:c7:0a:b5:7e:1b:9c:39:0d:2b:a3:f6:c2:07:8e:
f9:0a:90:7f:ca:0c:bf:f5:03:33:6b:86:d1:3b:e1:
08:fd:55:b0:10:1c:04:ce:55:22:4e:de:7c:05:4c:
38:63:c7:d3:35:ab:51:e7:90:05:af:ed:21:fd:18:
b4:29:84:8d:37:b8:b5:9e:90:b8:b6:68:4b:37:a7:
35:2c:18:79:ab:f8:4c:61:bd:6e:19:12:87:ba:db:
3a:61:6a:d7:97:35:b2:63:c7:ba:a7:fb:9f:f7:f9:
1a:ee:fa:bc:ce:90:b0:5b:ba:e4:c4:26:2a:da:08:
83:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:07:7E:BF:9B:61:CF:FE:98:7E:29:73:3D:58:98:A2:02:CF:AA:6D
X509v3 Authority Key Identifier:
keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:13:75:ce:46:b3:73:57:5b:49:42:97:84:f0:9a:c7:4e:13:
6e:8d:c0:40:0b:37:51:bc:a7:3e:ff:00:c4:70:2f:d7:70:07:
5f:bb:df:2d:ab:59:09:b2:c7:4d:17:41:df:06:19:9d:6a:44:
1a:bc:db:a4:e0:cc:73:bb:63:f5:37:f3:1e:eb:15:48:23:d0:
6b:48:83:5e:71:10:4d:1d:8d:4d:f8:28:52:c1:ce:4d:d2:ea:
ec:bb:49:12:68:dd:b5:f8:1f:07:60:22:cc:10:08:2d:70:6c:
6d:e4:24:26:11:b3:d3:2b:4c:9d:22:a9:a2:75:e3:b9:71:b0:
10:07:87:49:ba:39:44:43:78:ce:82:fc:d0:72:c7:b5:87:d8:
96:dd:c8:00:d8:fe:3b:38:0c:6f:af:1a:2a:40:6b:90:c8:f1:
4b:5d:89:b4:12:c1:99:c7:fc:81:81:aa:6e:87:f8:65:16:ff:
e8:f5:5a:9e:42:d4:0b:46:80:17:53:bd:38:49:12:bd:06:e5:
30:1d:cd:47:8b:b1:2f:ec:8a:63:c0:c1:2d:0c:11:0b:eb:4e:
70:83:43:ca:4c:88:57:25:4f:01:1c:37:a6:1d:b8:b0:d3:55:
2c:25:9d:68:d3:66:f5:3b:e5:05:c8:26:ad:ab:49:5b:71:00:
93:a0:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:46 2025 by rpki-client