Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: jmapWYmr7UGaDYUuNDH4dgnyFfpVHD4KHLMotz1xLoA=
Subject key identifier: 51:7E:A0:DF:A1:8B:99:D3:9F:77:01:05:3B:D2:6D:60:9D:63:13:F9
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 0194BC05179458B8F2FA63BFA0D9651896A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 0C2B
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: Bm65E--O4RsSyCzNAmCOH5DCwbg.roa (hash: Dk5vtQSO5xVuQ/klL2R5yHYHzC51XBPO7azd9yPCmHY=)
2: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: xICXKfH9AaXWXeZzWJtUXzFQZBSMO5zxLdpw+yTa5ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:17:94:58:b8:f2:fa:63:bf:a0:d9:65:18:96:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=517ea0dfa18b99d39f7701053bd26d609d6313f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:64:a2:68:46:d7:52:50:7b:9a:32:0d:bb:
1a:bc:be:e5:ae:65:92:b0:54:49:f9:1e:15:32:64:
3c:e6:1e:85:75:98:1c:fe:47:8c:e4:e6:3c:14:01:
c6:69:b2:e4:ab:f9:7e:82:31:7e:9d:21:e6:57:7d:
5b:1e:3d:7d:64:6d:7e:9e:03:ea:1c:d5:13:bf:cf:
ce:85:aa:9a:9d:17:00:88:fd:bd:c6:1b:f3:0b:55:
95:44:84:f2:c0:2f:92:10:b0:06:77:3c:f9:af:15:
e8:b8:24:86:98:a0:67:cc:9a:95:ca:4b:8d:fe:ae:
04:13:10:cc:0e:da:29:d2:46:89:c4:1d:30:b9:1a:
97:b2:26:c0:7e:e6:0f:e1:0e:d3:a2:d0:a2:ac:27:
35:2a:eb:22:a4:7f:24:25:7e:ee:6f:a4:f2:1c:5d:
43:fd:8e:63:54:52:9e:47:c7:0d:f1:80:76:ab:20:
c6:db:01:52:c0:56:f2:87:72:b4:76:4d:ac:6b:4d:
e3:0a:b4:26:95:f4:91:06:5e:ba:f7:c5:ae:05:df:
43:ad:42:fe:bb:34:bf:27:f6:86:f6:3f:6b:06:8d:
76:b3:47:40:6e:a2:fc:8a:1c:93:30:d8:84:c1:e9:
a4:01:45:ff:8c:12:5e:3c:5b:6b:b6:6f:92:02:7d:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7E:A0:DF:A1:8B:99:D3:9F:77:01:05:3B:D2:6D:60:9D:63:13:F9
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:1c:c9:cf:82:24:24:d0:b3:a7:25:fd:6b:06:a7:b6:f6:48:
20:2e:4e:97:a3:1e:f9:66:e7:a7:81:8c:b6:61:da:bf:33:a2:
f5:1e:fe:e0:4c:52:59:56:00:3a:84:bf:fd:47:99:43:5e:71:
43:4f:ea:3c:ad:28:68:4d:d7:24:2f:8a:e6:7f:9c:2b:5f:02:
d3:59:69:73:9f:57:f6:be:a3:57:d8:68:da:71:4c:3c:4a:13:
11:ce:1e:42:c9:75:f3:6a:fa:b7:e9:98:2c:d2:8c:a3:12:b3:
cf:d3:4a:3a:62:27:64:b4:8f:ff:f4:a4:05:e3:ea:f2:f0:ec:
6d:d4:ff:eb:ea:17:dc:1c:51:81:29:6c:c8:3f:3e:a0:e7:6d:
18:d5:97:7c:5c:1c:37:01:a8:73:5b:cd:2e:5d:34:6e:5c:28:
fb:d4:20:dd:8b:df:cf:a4:14:24:64:25:47:f7:da:0b:87:44:
4e:b4:d3:6e:f5:c8:92:9a:b6:1d:f6:0c:1a:b7:88:e2:fd:c2:
27:df:ef:15:e7:56:7a:27:c4:dc:ed:04:d2:07:99:52:31:4e:
b9:c2:6d:d6:d3:11:6f:ad:3d:73:31:b7:15:52:c5:1a:b0:07:
15:86:72:01:d0:a7:a8:b0:ff:b4:46:21:e2:17:b4:c5:b8:fd:
91:85:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client