Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: pQfacv2Dn36M23UvQW4D8mqr4iNNSF6U6JYYX+Kuulc=
Subject key identifier: 75:73:CC:47:0E:06:9E:F9:23:EA:9C:76:81:9A:83:6E:98:23:FB:25
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 0194BC72A941BE7408A0D9E5010E376DBF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: w1AmR6pDkFdbdfPOZXik6QZURTwr1r/BLyS+urrUGwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:41:be:74:08:a0:d9:e5:01:0e:37:6d:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=7573cc470e069ef923ea9c76819a836e9823fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:61:aa:be:37:17:69:b6:49:dc:d1:8e:c4:
a2:1f:cd:2d:e4:7d:e8:31:40:7a:50:70:a4:5c:c3:
23:e5:cc:16:35:74:66:f1:73:ab:a8:ff:9b:c9:3c:
c0:92:65:0b:38:e8:40:42:7e:91:40:c8:bf:98:12:
e2:92:83:03:21:ae:a9:d0:a3:80:38:03:36:93:b7:
de:12:ee:24:ed:14:20:b9:4f:16:44:0f:8a:20:30:
79:21:ce:25:e7:f5:30:f5:32:8b:5b:ed:ab:40:09:
72:06:0d:7c:33:7d:17:3a:80:0b:3d:59:85:1a:cc:
a8:15:52:74:aa:71:05:7d:b4:93:16:52:c5:d4:90:
aa:35:49:ff:6e:1b:aa:8e:f1:8b:f8:99:c1:a5:c4:
f6:41:81:a6:80:ce:46:0f:00:f0:8a:fc:9d:98:b8:
64:f7:eb:15:11:2b:7d:91:4b:f3:3e:30:e3:b3:7d:
e2:da:30:da:87:07:17:b7:c3:21:9f:b2:6f:6f:f9:
4f:e0:a6:64:c2:f2:84:5a:08:4e:e2:5b:22:32:6f:
ae:ff:f3:0c:63:a5:c4:91:1c:7a:47:4a:6d:28:a0:
7f:1d:f5:e2:a7:10:92:9e:e2:ac:a3:db:bb:c3:9f:
cd:23:74:f3:af:4a:f9:d7:88:ad:37:2c:2f:e7:ca:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:73:CC:47:0E:06:9E:F9:23:EA:9C:76:81:9A:83:6E:98:23:FB:25
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b0:a1:86:17:ff:3d:e9:3a:3f:70:a2:5f:c0:fa:d3:30:8c:
9d:b5:b1:73:77:a1:db:04:ba:a6:8f:f3:63:2f:a9:c9:7f:d7:
ab:b0:bb:3e:93:86:75:24:21:d5:57:22:bc:cb:f9:b8:bf:99:
20:30:70:07:ef:8b:a5:8f:c2:5a:8b:71:63:a3:b8:07:c5:df:
98:55:f2:e6:f1:70:50:e9:27:4c:7a:da:72:a3:09:04:50:d5:
31:0a:cf:4a:88:4d:46:c1:9b:01:a3:79:07:0e:f7:b8:99:86:
f0:ca:d3:f4:5f:0c:16:a0:66:8c:bd:51:fb:07:18:0a:88:72:
c2:27:5a:c1:a1:e0:ec:f0:9b:10:81:dd:ad:d2:67:55:87:78:
68:8f:76:5e:a9:ad:45:94:92:4f:b1:31:ac:68:39:d0:99:cb:
4b:b8:40:c4:e2:31:65:b6:8b:32:03:99:3f:bc:a3:c0:6d:fb:
c9:19:bb:81:00:5f:ae:77:65:61:83:46:22:4a:b0:10:28:55:
6a:77:4f:3b:6a:aa:7d:c6:bd:fb:86:a1:c3:74:db:02:25:e4:
bf:a5:b8:12:26:a1:55:c9:8a:70:d3:dd:e7:a8:dc:80:a3:b0:
17:9e:49:a9:dd:67:75:f9:fe:1a:9e:00:3f:0d:49:b4:0e:b5:
8e:03:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client