Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: bk7dhtMbJj25WbfbPqAF/1BQS8y2ohL9z1ZrwpYGVaw=
Subject key identifier: 13:07:A8:0B:BC:D5:E2:37:F3:2C:02:2C:DC:9A:F8:C7:98:46:1C:46
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0194BCE071019B18292F2DFBA20C7894AB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: MiidwHIacUQLO22KQ4IeotF38g80DCTzRryPoLQG5H0=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:01:9b:18:29:2f:2d:fb:a2:0c:78:94:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=1307a80bbcd5e237f32c022cdc9af8c798461c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:2f:79:ac:53:90:b8:bf:8a:a2:27:dd:42:
b1:e7:9e:04:d4:ed:d4:74:f4:62:97:25:18:28:ea:
9d:da:29:cf:71:52:c4:00:90:24:a1:fa:44:7a:eb:
58:15:9f:b2:98:a8:2a:65:3f:08:86:43:23:a1:e5:
0f:07:8a:14:24:4f:01:f1:61:13:13:10:3f:e7:36:
d6:f6:60:58:11:64:c3:ea:61:98:8f:3a:15:d6:c9:
c7:93:1e:60:96:b1:7e:e4:9b:38:82:0b:5e:93:65:
8d:d4:96:44:16:59:41:30:23:7a:33:a1:19:98:e4:
f4:87:7c:4f:f0:77:4f:b6:3e:ba:69:8b:85:1f:10:
a2:71:bc:0a:22:91:5b:01:d7:3c:11:89:83:f0:0e:
ee:cf:7b:c9:8b:65:74:0f:22:f8:a6:c7:dc:34:c9:
8a:82:b1:0e:55:eb:13:67:df:9e:63:3b:41:52:aa:
58:4c:3c:ce:05:bf:11:f3:6e:b2:ca:19:29:6a:9d:
e3:12:3b:09:fa:1f:6d:78:e5:9e:c3:d1:ca:6b:9a:
0d:fa:b2:7c:43:76:20:f1:4b:50:88:b2:13:b2:79:
63:78:a4:27:8e:a9:42:da:a7:1f:94:20:71:3a:87:
05:df:ee:a0:06:b8:2a:cf:af:c4:87:4d:6b:90:ef:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:A8:0B:BC:D5:E2:37:F3:2C:02:2C:DC:9A:F8:C7:98:46:1C:46
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:66:9b:5b:f5:3c:fa:68:14:59:1c:85:b4:4a:69:e9:dd:
04:89:fa:ef:91:94:5e:4a:94:ed:00:16:28:64:ef:98:bb:83:
a2:da:e4:1b:b9:1f:5b:ab:83:8a:a3:1f:f9:7b:5b:be:cf:2d:
15:a8:53:97:98:10:76:42:00:45:82:e8:b8:6b:0a:1b:19:3c:
06:14:5e:df:d3:8a:27:13:70:bd:8a:b9:2f:95:d7:40:57:82:
e4:af:0a:b1:a0:81:8b:00:38:14:e9:48:53:d3:d6:c4:ce:1a:
74:18:48:e3:3c:c1:f4:6d:bb:60:5c:ad:48:a2:64:57:75:91:
c1:6d:aa:5f:35:7e:28:f9:b4:aa:cd:df:1d:32:ed:fd:38:41:
c1:17:97:46:34:34:3f:54:c4:a6:ef:56:f6:72:9e:41:ab:99:
e6:ad:f7:50:7f:d3:41:20:3f:a6:05:9b:76:88:f5:db:5b:cc:
96:1f:aa:94:6b:10:ab:64:11:0c:fa:1f:db:79:15:c9:63:99:
78:98:9f:ee:59:95:8c:eb:31:20:ea:f8:88:a0:2f:33:7a:9b:
87:fb:b3:33:02:a5:42:14:7f:c2:ff:10:66:85:97:34:83:58:
4c:24:2b:30:37:49:d9:68:a3:48:ae:db:f2:a0:c9:68:05:e9:
a4:38:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:28 2025 by rpki-client