Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: Hd9PWcdPqNj0/lnJVu3f1xaet8t2fyhGP7DKvS3wot0=
Subject key identifier: 70:EC:01:17:A1:9F:84:65:95:3C:9C:50:E1:CB:E8:D9:35:CD:14:BA
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 0194BBCDBEFB1A0D559DE0EB631AC2D5256A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 7qqVYIQpii7sSozRc22nqZnfo2OQ6f4HzYRrPEMb5P8=)
2: xbK0xWiY34_RomWctzp72CJLeyA.roa (hash: uGlhM5SP1wH5GgbXheJ7ZYAOlhLuCV1Bj19dNLN10ho=)
3: ztCPKk8w1aeaQKuLHJz_e0TSo9Y.roa (hash: eX6lgcMXGHHyxYwjBqAxjQIWBeaf2J3CyUG15tvpJ0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:be:fb:1a:0d:55:9d:e0:eb:63:1a:c2:d5:25:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=70ec0117a19f8465953c9c50e1cbe8d935cd14ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0b:2b:40:d9:99:0a:49:42:cc:9d:47:cd:1c:
f9:f6:73:2f:49:f9:52:a4:83:84:89:60:22:de:17:
2b:06:5a:67:e7:ac:ab:d1:7a:e2:12:1c:e9:f2:23:
cf:27:f1:2b:2b:04:f4:a8:19:3f:64:16:5f:de:04:
28:a8:35:96:65:20:29:17:c0:d7:ee:e1:71:a7:90:
bc:fe:54:72:76:43:f2:88:80:64:53:c0:ca:02:07:
e8:b0:8a:1b:2c:09:89:0d:db:5a:af:ed:af:34:08:
be:95:fb:dc:a0:2d:99:64:1a:b9:36:af:bb:f5:8c:
7e:62:1c:1d:71:aa:df:28:28:ff:8e:7c:f2:f2:b5:
99:e4:ba:e7:6b:9a:5e:40:ac:8c:3b:9a:f3:3e:9e:
3d:28:51:9a:e1:cd:b2:c1:4e:0b:61:12:c7:61:59:
a8:cc:bf:bb:47:42:88:ef:60:26:a6:24:24:e4:0d:
d8:fe:a7:c4:f5:bd:8e:58:49:5a:16:70:a1:fb:8e:
2d:4b:f5:d0:0d:bd:e9:44:53:c5:58:5a:b4:8e:b9:
28:1e:31:4b:7d:39:2a:2d:4c:c5:8a:3a:6d:aa:2c:
53:e2:5a:69:50:60:1c:9d:13:ae:cd:c8:fe:48:1a:
5e:42:8f:14:e4:e0:14:e7:a1:22:dd:16:f6:05:1c:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:01:17:A1:9F:84:65:95:3C:9C:50:E1:CB:E8:D9:35:CD:14:BA
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:48:7e:37:c6:e8:e0:39:17:4a:d5:7f:56:20:f5:05:b7:80:
4a:9a:cf:0e:88:ff:6d:25:61:bb:da:44:12:34:cb:fe:db:9b:
da:6b:4b:25:8c:2d:8d:9d:3d:8d:51:b9:12:d3:60:0c:5f:68:
1f:ab:55:1b:e0:ca:cb:8e:1c:43:fc:41:5c:af:cc:60:c1:4b:
45:f4:9d:e9:1a:d8:89:9b:2c:c4:87:0b:73:23:d1:5c:6a:14:
89:92:84:22:6a:87:fb:ce:48:5c:75:fb:ae:3b:76:47:c4:06:
5c:45:2c:a1:02:19:71:7b:ea:9f:ca:47:e2:a9:8a:ee:39:20:
87:1c:5b:55:0c:83:c7:db:3b:e6:a4:a8:d8:bb:16:3b:5e:bf:
78:57:e5:d4:72:ac:25:6d:49:31:9e:1e:21:d3:90:a0:03:bb:
ec:d7:94:33:a4:d1:1d:69:5e:2c:b7:b6:14:3b:07:b0:05:56:
f2:81:a7:d5:2d:2c:0e:b4:1d:85:13:9a:84:d1:d2:4e:dd:6d:
44:36:a5:c4:f9:b4:9c:b4:e5:af:fb:42:b5:4f:f4:cf:65:3a:
36:b7:a9:62:60:30:29:42:f8:71:56:95:a2:fc:4e:f6:7f:88:
63:c6:ce:77:20:fe:4b:7d:9c:9e:2a:5e:8e:a7:8c:b0:d2:75:
c2:6b:f5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:09 2025 by rpki-client