Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File: cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier: iaEH0D7fpgmVWSL0Lo6qNKr867oGnK2d3W5RnLQW7aI=
Subject key identifier: D2:B2:01:99:93:F3:4E:5D:B3:23:1A:DD:92:63:5F:03:88:40:2A:78
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial: 0194BBCE4AE0AC8782E3AEA29E3977AEE41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number: 1232
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: Dg3_0N_QJLl_z9oMjas8amvsSl4.roa (hash: i//fT7WOmOH7LBZUXbS89Zg6KyN/Hg+cEJQRzh4C3DQ=)
2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: Q0yfvK5JlbWrUKDxBNR5pvfmLc1l8SlcyS0j8ZUaxLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4a:e0:ac:87:82:e3:ae:a2:9e:39:77:ae:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=d2b2019993f34e5db3231add92635f0388402a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:dc:e2:41:73:20:e6:ae:ec:96:a3:cb:66:
36:4b:47:4f:ff:0c:84:58:29:c4:db:4b:57:ce:5f:
a9:c7:80:66:23:e8:87:5f:40:e3:28:12:19:b8:40:
e5:6b:7b:fb:57:a4:19:89:db:af:93:33:65:73:dc:
db:ff:d0:75:73:b1:6b:57:81:41:d6:b1:63:93:17:
2a:86:02:c8:f1:eb:28:fc:90:dc:dc:8f:22:e5:3c:
41:85:b4:eb:56:c3:1e:18:44:86:fa:15:c5:00:e3:
e8:53:09:6b:94:e4:1c:0b:4c:fe:4d:68:67:95:94:
5e:07:22:4a:f2:c1:ee:77:03:84:51:82:ba:6a:b6:
1c:16:14:b7:4a:0e:ad:8b:35:31:b1:5a:90:4c:10:
6b:97:2f:97:f0:a0:2c:fa:c2:80:b1:27:6f:89:89:
e1:fb:66:01:87:25:a6:d3:d7:34:e0:ef:60:9c:af:
b0:c5:20:4a:16:e8:b6:2a:99:47:66:4b:21:4c:3c:
f6:94:9d:f5:36:ee:3e:d5:fb:95:af:92:e9:65:83:
89:13:04:d1:43:45:67:8a:f1:39:58:ce:28:e7:81:
dd:2c:78:93:c1:3c:4a:e3:f3:cc:e4:b4:8b:ec:87:
0e:ad:34:ff:28:8d:ec:48:5f:26:19:64:07:e9:af:
65:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B2:01:99:93:F3:4E:5D:B3:23:1A:DD:92:63:5F:03:88:40:2A:78
X509v3 Authority Key Identifier:
keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:91:8e:4e:c1:63:8d:7c:16:e0:a2:ea:60:55:ec:01:48:3c:
a7:9a:e9:da:c5:58:d6:cb:3d:76:58:e8:9b:d4:09:a7:f7:2b:
66:26:13:2f:be:e4:4f:eb:0d:d9:73:e2:f1:3d:1e:e9:10:43:
3c:53:6c:fa:4c:ca:de:9e:7b:60:83:b9:4f:8d:f4:37:de:34:
01:28:ac:91:bb:dd:70:27:f8:46:d5:cd:ed:f5:00:f3:7f:6b:
68:72:99:85:c2:13:70:e7:52:a8:b0:06:94:dc:ae:d3:da:cb:
58:c2:d8:2f:27:44:fd:72:d9:7c:ca:d1:17:d7:6b:eb:ba:c3:
b8:bf:32:e4:70:18:49:20:3b:8c:a9:b8:86:91:23:f2:42:21:
69:88:d1:71:4e:c4:ae:c6:64:f6:31:bc:88:c9:bb:fa:65:f9:
f7:90:19:64:91:e1:0c:4f:d2:46:79:ae:2c:9c:f2:ee:8b:46:
37:45:2f:df:05:b3:df:c7:73:03:c1:a3:6f:44:81:bd:08:a4:
d1:0e:b1:b6:25:af:6b:0e:e6:c2:61:c3:7e:0d:d9:df:fd:9a:
ac:ec:41:9c:90:15:b0:c4:f4:ff:a3:48:37:89:ed:5b:85:08:
98:a3:3b:d2:f5:e4:3c:4a:95:8d:00:58:a1:5d:05:09:45:97:
fa:58:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:28 2025 by rpki-client