Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: hPIWmo7Wg0Z0EW0Sgdn569iNPDuL4MlpyNCDLCWix3M=
Subject key identifier: AD:B0:81:61:C3:F6:C1:6A:18:FF:FB:C8:D0:8B:95:30:70:68:E5:82
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 0194BCA9AC9AD11796A638365902305E4880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: Y-ORdAusYkZsKOUTFP8lOiqiHAs.roa (hash: VsoWMS+G3RdpKa8Z+B6s882TzbmXTjisQIhsADrOhSU=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: t5dQLXCjE91dAyDJE/aYsoqC3yaWAMOdcltVTcKsK+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ac:9a:d1:17:96:a6:38:36:59:02:30:5e:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=adb08161c3f6c16a18fffbc8d08b95307068e582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:3f:87:5d:9d:5d:f3:a5:a3:3a:55:8c:f5:
53:d4:b8:87:05:84:f2:fb:b2:54:2d:62:75:da:17:
ef:89:bd:eb:fd:e2:7c:fc:f1:0d:53:23:77:df:9f:
fe:5e:14:6f:4c:e2:df:05:54:0e:58:dc:a7:a9:46:
ff:49:04:3e:6c:4a:63:57:66:fc:23:ec:a4:ca:7b:
dc:5e:fd:6a:2a:46:52:1b:34:95:5f:04:8f:22:85:
ef:62:4a:3e:a8:ef:5f:ae:c4:a5:cc:a4:f5:a9:31:
87:ab:65:4a:8e:59:cc:f0:97:d6:a1:d6:f2:d2:e8:
47:f3:72:3d:42:1c:68:e7:d0:bd:de:ed:99:c0:5b:
78:eb:12:0e:a9:1d:55:dd:46:b1:b9:3b:a3:3e:f6:
97:58:60:80:03:22:a5:c2:eb:fe:c5:ab:5b:4b:bf:
b2:2c:70:84:fd:9c:5f:4d:ca:77:a2:66:20:a7:53:
fe:7b:25:51:1a:03:19:88:b2:ae:92:10:8f:35:15:
2f:61:7f:d3:83:78:5a:8b:77:67:19:3f:33:dc:b0:
e8:e8:e8:64:d1:7a:d9:9b:5c:ed:de:f5:42:a2:d0:
2f:53:95:c9:14:7c:b0:3d:55:75:bf:0e:b8:42:10:
f4:f5:27:04:ed:25:73:cf:15:a7:8c:44:1b:8a:cf:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B0:81:61:C3:F6:C1:6A:18:FF:FB:C8:D0:8B:95:30:70:68:E5:82
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:43:d8:2f:9f:2b:55:49:b3:b3:c2:06:11:c8:a8:ac:fd:46:
21:09:1e:ba:57:6d:79:60:7d:51:76:59:95:73:f6:73:c5:2c:
ce:56:22:15:76:d1:73:9e:4f:56:56:26:47:29:c6:ae:ec:a4:
fc:87:2c:6f:78:8b:66:3c:02:ac:96:39:8f:26:cd:8e:1d:00:
23:fe:0d:c5:4f:e6:fe:10:f6:53:d7:80:37:23:6d:24:d1:bb:
fb:5d:74:9b:a2:15:12:b7:0d:dd:fc:a2:33:0e:dc:2d:9c:ce:
6e:a8:56:af:de:ee:f2:de:a8:d3:09:b4:9a:74:33:a3:57:9f:
4d:7c:41:b6:8b:1b:77:24:3e:35:f6:59:c7:29:25:1d:38:82:
9a:f3:85:7a:15:af:ca:7b:a1:15:3e:b9:7f:17:8b:78:9e:e5:
43:04:46:2b:1b:7e:82:c5:c3:74:c0:70:53:98:34:4f:4c:41:
f3:51:6b:bd:1e:0b:57:bc:9a:28:f7:d0:f2:d7:11:53:bb:be:
57:fd:43:6b:4f:00:af:a4:ee:0b:3f:9b:a8:6d:50:5e:18:44:
02:5c:2b:6b:ab:2f:24:d0:e5:a5:d1:14:fc:2f:a3:15:5a:e1:
c3:e1:8a:3a:37:20:19:4e:af:2d:da:68:4a:dc:00:6f:59:eb:
0d:62:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:47 2025 by rpki-client