Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: D+7mwMsNsYrEQb/khBeR4GDK7+DeRusDu36Oo8LQmI4=
Subject key identifier: 5C:53:7B:39:CA:85:12:9A:47:18:67:A8:76:FC:13:DC:61:5C:96:62
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0194BBCDB05C2CB531FBF4070989B36B26EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 1457
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: 3vEPBG1oI2P7D_OfeL-L-zO3dlY.roa (hash: tN3ytiGRqjapeYsvwHwSYsXkP2Hw2Lot2BTQS7jncsI=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: /0l6rEFZg08sRBUkI8Umw7n5/ahl0369CsNwU4vP1S8=)
3: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
4: nBrCNXIxf-HXjG6SCmJRZD_jcnQ.roa (hash: fDw965TyoDwI2wb9Akp8Dv8OmyrRgQj+LSrCx9J2W5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b0:5c:2c:b5:31:fb:f4:07:09:89:b3:6b:26:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=5c537b39ca85129a471867a876fc13dc615c9662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:a7:34:98:c2:a8:0a:c2:70:fd:8d:15:d6:
ce:d5:b4:0e:dd:8a:76:e4:44:40:ac:f5:0f:8e:36:
8a:26:00:75:3f:c0:0a:73:a8:57:bc:f5:fa:33:6e:
bf:09:13:2e:42:f7:38:10:5f:8f:f6:07:44:7c:ca:
85:55:fc:7b:bf:9e:e8:6a:a4:b0:70:cb:ab:51:f8:
3d:bf:75:49:2c:32:46:40:d7:4e:f0:37:ac:9f:19:
fe:06:65:0b:69:ee:da:df:0a:9c:99:e8:a9:96:ba:
36:5a:59:6a:0a:9a:23:43:69:3b:22:8e:f2:b0:8d:
f3:7b:58:52:2d:6a:42:70:fe:91:f8:30:9d:a5:8e:
5a:69:03:9f:f4:9e:17:eb:42:ed:59:81:75:63:8c:
67:ba:0e:24:97:25:0f:95:fc:93:b5:c7:bd:1a:04:
34:77:22:72:72:ba:8f:9a:30:aa:6c:6c:19:8d:83:
fd:72:eb:44:bb:c4:d9:b1:72:47:19:11:2a:bc:55:
37:0f:37:4d:41:77:e9:cc:de:30:68:54:c5:83:d7:
ba:69:3e:42:44:f8:80:ef:e0:ff:31:e0:79:83:d1:
41:93:2a:20:1c:74:8a:09:fa:f3:de:e4:46:e7:2b:
3d:bc:20:6f:da:a4:f7:8c:00:c5:54:5b:8f:06:d0:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:53:7B:39:CA:85:12:9A:47:18:67:A8:76:FC:13:DC:61:5C:96:62
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b9:38:7c:25:03:0d:c4:e1:7e:3e:6b:0f:46:1b:80:a1:f5:
3a:f7:ba:8a:07:28:f1:5e:e9:4c:5f:a2:80:6f:11:d5:ef:49:
e6:38:74:a2:46:fe:18:fc:52:a0:f7:c2:e9:ce:57:f5:29:56:
db:31:36:04:8a:2c:72:0a:9a:09:ef:82:df:78:38:77:9e:0b:
28:c1:55:28:f4:d8:6d:13:46:47:0c:c2:47:5e:f3:7f:f9:81:
50:ca:ad:df:25:de:10:fd:f9:de:37:e4:cc:60:b0:67:79:c5:
9a:fc:06:52:8f:49:3a:b2:a0:aa:83:61:c5:af:6e:14:0e:03:
62:2a:51:43:51:c0:03:0a:63:16:f9:e4:48:28:f4:14:21:b1:
33:2e:77:00:e8:74:35:9e:9d:4f:d2:f9:7a:d0:94:cb:a4:16:
20:59:1e:c6:dd:42:5b:72:0a:f2:d9:57:32:14:da:35:68:95:
39:86:55:b6:c2:a4:6c:4f:81:fa:44:02:73:ea:04:d0:00:25:
45:0f:01:09:2c:1d:58:2f:89:e7:8d:a2:19:6f:b6:3a:06:8b:
fb:3f:6f:70:14:e4:04:3e:40:57:e7:16:9f:26:6b:df:9a:5f:
94:e4:21:2a:8d:f8:07:3d:42:87:3b:61:80:01:82:44:c4:19:
d3:db:12:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:44 2025 by rpki-client