Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
File: c2fEkER_UEXAI2fbjSG04IdJ-nY.mft (raw, json)
Hash identifier: WHk6mIsSTLxzOdLoukKWUVPUBN93vHcHL+3lILL8IYA=
Subject key identifier: 47:88:BF:83:08:7F:21:F0:B5:3F:46:62:63:47:24:E8:25:DE:F5:3A
Authority key identifier: 73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
Certificate issuer: /CN=7367c490447f5045c02367db8d21b4e08749fa76
Certificate serial: 0194BC73029329ABE061A2C0240AEA00B475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
Manifest number: 0623
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: c2fEkER_UEXAI2fbjSG04IdJ-nY.crl (hash: 1KUFkQ5B4/WO65oWGYZBIdewxBDbjCDZIpIQ/FRh8+A=)
2: zxcUujcSrD8SI1LnYGJEIzlJLRs.roa (hash: 9DpZ6fCwMNxgzvUI8W4qG2/5GfqMuaNy171SPmB26NM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:93:29:ab:e0:61:a2:c0:24:0a:ea:00:b4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7367c490447f5045c02367db8d21b4e08749fa76
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=4788bf83087f21f0b53f4662634724e825def53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:38:f5:09:80:4c:40:e5:43:47:34:3b:bb:
ee:27:c5:de:6c:92:52:79:56:18:f2:74:fb:c1:7c:
b6:37:8d:9d:56:ee:9c:60:8a:d2:8e:8c:77:e1:95:
1d:6b:db:1e:dc:e5:c5:87:ad:f8:62:82:16:ae:eb:
0d:d0:39:b6:da:24:79:57:4e:ee:ef:4a:af:b7:24:
81:af:f2:e0:41:e5:d5:93:a0:29:41:62:bc:0b:08:
0e:cf:c7:0f:94:45:76:6c:e7:54:86:dc:bc:6c:52:
b1:fe:3c:ec:b0:fe:66:38:7c:3c:df:38:b2:91:3d:
ad:b2:a6:90:9e:dd:22:34:15:f2:ec:f8:35:a4:76:
58:06:05:82:37:20:06:62:57:c7:31:95:22:bf:4a:
07:ff:ee:e2:66:19:82:e6:50:c6:81:86:79:e1:de:
13:e6:b5:09:6c:f3:d9:28:07:f8:76:d9:44:5c:97:
13:14:b4:4d:d5:2c:e6:d5:e3:72:40:8d:33:15:7d:
cb:45:e3:97:66:67:6d:98:5b:98:0b:a9:93:30:9a:
46:04:a2:c6:bb:1f:bf:78:22:58:3c:ea:56:7b:dc:
48:08:02:b1:04:8f:53:b4:0b:63:68:f4:0a:8f:16:
99:9a:9f:7a:75:01:51:5d:ac:6d:b4:ae:0c:69:da:
0e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:88:BF:83:08:7F:21:F0:B5:3F:46:62:63:47:24:E8:25:DE:F5:3A
X509v3 Authority Key Identifier:
keyid:73:67:C4:90:44:7F:50:45:C0:23:67:DB:8D:21:B4:E0:87:49:FA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2fEkER_UEXAI2fbjSG04IdJ-nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/62584a-47ce-4aa8-8992-5ba756e78869/1/c2fEkER_UEXAI2fbjSG04IdJ-nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9d:38:59:d7:4e:60:0b:01:37:89:9e:e9:82:b1:a0:9f:85:
4c:2e:ef:85:ea:b1:f2:0f:69:2c:de:fd:61:56:58:fb:21:bb:
67:ea:bd:d0:ca:c8:21:27:f7:8e:4c:ae:56:fb:47:2d:c3:84:
05:62:56:4d:e4:7d:20:e1:f1:9a:f2:55:3a:15:0c:51:f4:d3:
d2:2d:4b:37:01:2e:16:5c:12:df:f3:59:28:8e:8c:83:87:e4:
0c:55:1b:79:64:b4:d0:6c:88:4b:e2:b9:32:cb:06:8d:ee:94:
18:ea:07:55:f2:72:46:5d:bb:0a:cb:83:81:3a:36:48:1b:7e:
05:04:91:1d:1c:79:3f:3b:f9:7b:76:74:08:4d:9b:9d:bc:c2:
b9:57:30:90:25:cd:70:d0:ca:33:7c:e6:f3:44:d9:23:b2:69:
82:a9:c4:ab:29:9a:23:4c:07:a4:16:2a:64:8c:4a:60:7b:7f:
f9:b5:7e:df:d1:ed:fc:c3:c1:ac:a6:d0:a9:d5:3e:7d:4f:31:
5f:b9:e9:25:3a:14:8c:28:db:76:23:9b:92:78:d5:46:34:90:
79:d5:8f:0e:71:31:7b:3e:23:88:e7:82:ac:01:80:9e:45:c3:
0f:b6:ac:56:1c:db:66:98:b5:df:3d:3f:cf:2d:af:db:ea:84:
22:17:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:56:47 2025 by rpki-client