Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: swFjTZgNeADJzI/+ZZrzA7gsntE6ipZ6vDBKbzfCyyA=
Subject key identifier: 9C:1D:AB:D3:5A:F2:82:EB:6B:D7:9F:58:B5:B5:73:A2:5F:4D:44:70
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 0194BD4E48265407FAD1BC22BD9B7ECA6E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 1143
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: tsUtgdUaLsXCb5aueOILQIFGv0egB+IEg8HGkjmgr6A=)
4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:26:54:07:fa:d1:bc:22:bd:9b:7e:ca:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=9c1dabd35af282eb6bd79f58b5b573a25f4d4470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:57:5b:51:47:1f:c9:9e:59:e9:63:4e:40:
5b:2b:5f:5b:b3:bc:ef:77:8a:90:24:fc:70:4c:0e:
64:2e:de:d8:9c:b7:01:c1:2c:dc:9c:39:37:6c:27:
51:60:1b:58:15:57:57:2c:89:e8:17:f1:c9:b1:4c:
7d:2c:14:59:3e:98:55:bf:85:77:00:54:a8:ab:48:
92:bb:bc:32:2c:21:47:15:8d:65:35:38:e2:0f:80:
75:c4:27:9a:b4:f4:1c:c1:39:de:18:9e:70:c6:0c:
60:02:bd:1f:cd:54:79:58:d9:80:43:d5:b7:e9:2c:
f6:76:49:68:c1:00:0e:e2:17:a7:1c:b8:8f:6a:1b:
3c:1d:07:71:0a:a7:60:37:0a:3c:82:02:1e:fa:17:
1e:c7:b3:1b:fd:14:66:ee:a4:22:09:4d:2c:2c:6c:
f3:0e:9e:0a:0a:f6:fa:c4:cd:91:6c:21:f1:86:60:
29:d2:66:ea:6d:4d:2b:42:f8:00:14:84:52:c6:d8:
46:0a:e8:6d:fd:ed:9d:25:4f:9a:d3:59:90:73:25:
34:39:1a:d0:31:e2:1a:dc:c1:7c:9c:09:f5:d8:67:
d3:70:9c:8b:b7:9d:ce:ef:b7:6f:df:06:b2:58:09:
84:f6:d5:9a:de:fa:d7:12:3e:1a:51:bb:9b:78:8b:
cd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:AB:D3:5A:F2:82:EB:6B:D7:9F:58:B5:B5:73:A2:5F:4D:44:70
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:9f:c0:49:e6:cb:48:d6:f5:f1:b5:41:06:80:67:cf:d0:
23:0a:8a:a8:87:6b:9f:2a:24:48:dd:d2:67:93:ae:7f:55:12:
aa:ef:64:85:cb:3c:04:a7:45:0f:6a:29:6b:9f:40:fe:a4:0d:
cc:b1:de:8c:ab:70:60:52:f7:f9:a0:a4:f7:68:0d:6c:54:5a:
73:4f:92:e5:31:49:80:92:ae:4b:b3:db:0b:c9:df:52:5f:79:
2b:0f:21:d1:7e:e2:54:0e:a0:12:79:15:9d:f7:5c:88:42:42:
69:fa:61:ca:f1:f8:7d:43:15:a3:f6:aa:87:be:a6:9d:f9:11:
20:e7:ff:ee:2c:f6:05:94:3f:95:ae:07:1a:a5:ec:71:5b:02:
d5:6c:82:8d:8e:a5:36:3c:0a:b6:89:41:21:f7:80:73:58:7f:
11:eb:c6:37:2f:9c:ff:de:9f:26:06:90:1a:4a:e2:d0:ad:29:
ba:09:bd:8f:ac:a6:3b:56:6a:ab:18:07:2c:81:77:d0:75:69:
7e:55:bf:55:80:3e:8e:48:d6:31:50:b0:6a:b5:a4:51:14:30:
d4:90:b2:9d:40:e7:14:4d:33:c2:bf:98:b3:f3:92:d8:43:44:
80:e4:0d:33:68:fd:de:b7:f2:b0:de:4a:51:96:c1:8f:91:09:
89:7d:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client