Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
File: cCw58YaCB38HK2IRb9TxaQh0r5Y.mft (raw, json)
Hash identifier: GTo3kk2v6n38vJJ7327Y08+zVoifXZ0/qMJXPiUdqeQ=
Subject key identifier: 29:F5:17:FC:81:44:66:3F:D0:D5:C9:C8:61:2C:FE:AF:28:85:4A:8E
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Certificate issuer: /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial: 0194BCE083F9A528A680EC1D573C4EE2F97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
Manifest number: 076C
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: DFyDZ0KcwXioQ8Y-7_O7BreSJ0c.roa (hash: 7LR5rGZdheek5FSN9VgvzhBSKbDgdVslo+r8yKVN2G0=)
2: cCw58YaCB38HK2IRb9TxaQh0r5Y.crl (hash: Y4BiMagzcsr31vFoxICefhAsbQY9CbU0GZK4jfvr64k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:f9:a5:28:a6:80:ec:1d:57:3c:4e:e2:f9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=29f517fc8144663fd0d5c9c8612cfeaf28854a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:6d:1f:8a:f2:e9:91:dc:24:56:bd:cc:60:
52:e6:e8:61:fd:35:b0:a2:11:bb:90:9d:88:b2:50:
77:45:0e:a8:3d:c6:6f:8b:fa:6e:36:b8:13:2b:07:
c1:29:ff:3a:e5:4d:72:55:55:5d:9d:b3:da:4f:0a:
2c:1c:d0:43:ea:41:a1:aa:3b:9c:81:0b:21:e4:c1:
ad:c8:3f:e7:79:ae:06:a5:c8:24:35:ed:1f:71:6a:
8e:f2:8e:15:83:94:d0:f7:4d:87:3f:e7:d8:3d:63:
19:f4:dc:d8:9c:64:3a:c6:23:bb:95:c5:f8:6a:d5:
b0:fb:a3:52:8f:f1:23:79:6b:48:30:b8:8c:64:e1:
25:02:7b:21:8e:cc:00:b4:49:50:96:8d:c4:76:1d:
0e:fe:8a:a8:d6:28:ef:5e:1d:83:07:2f:52:b8:7d:
05:23:96:51:8c:0a:d5:d9:2b:93:f3:73:6a:8d:fe:
92:33:ed:6b:28:9d:aa:73:7e:bc:19:dd:93:c7:ec:
d9:0d:12:4e:b5:f4:4b:f6:6f:31:2e:90:f0:e8:00:
b1:7b:b0:6f:a8:c0:e7:ec:ec:c2:cc:8d:53:de:ec:
4e:57:38:6c:0c:d7:6b:15:2e:35:87:8b:be:52:68:
48:4b:f6:6d:a9:09:7a:48:55:60:58:3b:6e:5e:79:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:17:FC:81:44:66:3F:D0:D5:C9:C8:61:2C:FE:AF:28:85:4A:8E
X509v3 Authority Key Identifier:
keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0d:cd:8a:f8:36:f1:df:91:46:09:eb:dd:69:6d:54:04:26:
75:5d:9b:57:7e:b6:29:ab:89:0b:b4:59:d6:21:5b:c6:d0:98:
78:ee:61:17:e6:cb:ef:8b:17:7e:12:38:07:33:b8:36:30:62:
6e:9a:27:e1:cd:e0:66:3c:18:06:22:8e:25:59:ed:3c:49:66:
60:e2:a5:19:ff:91:6e:c1:16:65:62:95:ac:db:8d:a7:e1:f0:
7e:4e:90:41:89:4c:e0:66:b7:a7:46:80:0e:cd:a7:b1:bb:45:
68:dd:0d:50:67:51:8d:de:4c:9a:c1:46:c1:02:f3:81:f6:b7:
eb:4d:4a:f9:3f:06:61:e5:c2:ee:00:1e:65:ce:54:26:ee:76:
8f:30:a6:a7:c5:97:ec:e2:5b:59:70:3b:dc:b1:60:4e:c9:8b:
07:42:f3:c6:72:66:a6:fe:c1:ed:12:85:f6:80:da:e4:8b:80:
71:31:df:b8:ca:46:8e:91:70:1f:b8:fe:27:19:f9:77:11:4c:
92:62:af:51:4c:57:57:a8:95:22:7f:20:f4:e9:ce:11:89:76:
62:d5:8f:3d:2a:4b:27:aa:f3:dd:a3:08:5c:c9:3b:87:5a:ee:
ac:3b:05:74:56:78:33:94:1b:3c:b2:1c:0f:c8:70:b5:92:eb:
10:43:42:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:47 2025 by rpki-client