Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: 9xax9XyGir1PWApq61IS6lrUwI8X+KhGyAv7g+E2FEs=
Subject key identifier: B8:7F:C6:6F:45:30:FB:D3:71:AC:94:CB:F6:53:FE:C7:4B:07:57:F0
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0194BD1756AC0BA718DF3E3DF2E1972C7EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 11D5
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: dc+qcLBnTb8oqVp0rmEkIjjuwEKZdru75N910nWl0N4=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:56:ac:0b:a7:18:df:3e:3d:f2:e1:97:2c:7e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=b87fc66f4530fbd371ac94cbf653fec74b0757f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:1a:50:b6:96:3f:b3:f9:7e:fc:f8:f2:92:
bc:3f:ad:87:2e:e8:6f:84:28:cd:76:ff:57:e1:1f:
11:c5:db:83:6d:53:dc:ab:da:45:29:41:20:7b:f9:
fc:45:c6:b5:6f:fb:0c:39:68:4c:be:43:38:51:5b:
7c:b6:f6:37:fb:c6:db:82:2f:d6:26:5a:36:22:71:
d9:a8:e5:9c:70:de:2c:9e:3c:35:e5:a0:87:a7:ac:
0d:4e:ae:86:9f:4f:51:70:1a:fb:02:5b:e2:30:6f:
08:2e:89:e9:25:e1:37:e8:d7:be:dc:19:89:27:a0:
24:16:4f:e5:1a:97:56:78:45:ad:2a:24:2c:ca:31:
4c:29:cc:d7:88:ca:86:79:79:2f:50:6a:0e:5a:d0:
dd:a5:3c:f6:a4:61:3e:6d:16:34:d1:39:d8:a4:1f:
c5:96:34:03:c0:03:0a:21:73:02:cd:30:23:fe:79:
73:6e:11:71:03:1a:b3:eb:3e:20:b9:77:b2:12:cd:
c8:94:c1:58:42:6f:fa:38:c1:b4:0e:12:33:fc:ac:
6d:65:1a:ae:83:9c:c5:cd:00:7d:45:0f:1a:32:08:
6a:de:8d:9a:fe:50:7e:8f:60:3e:f9:bd:5e:d8:49:
b4:4a:1e:6e:a1:1b:bf:8a:cf:de:3a:b3:db:f0:5b:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:C6:6F:45:30:FB:D3:71:AC:94:CB:F6:53:FE:C7:4B:07:57:F0
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b4:6b:e2:43:dd:f5:14:61:03:ce:b0:a2:05:c1:84:4d:ce:
30:d2:ea:a7:2f:14:7f:a5:84:6f:cd:06:88:3b:ae:75:72:d0:
44:d3:f2:f5:46:ed:14:90:63:20:be:f2:e0:c2:84:1c:bc:8e:
16:dd:22:f6:c6:2f:30:3a:f5:f8:19:a8:03:c7:29:1f:8c:87:
c8:44:c7:7e:c7:f7:20:00:b0:f6:7b:e7:e8:99:7c:e3:95:74:
ae:9f:64:5a:cd:76:3e:53:83:1e:96:04:07:e9:65:70:4c:0c:
d6:38:7e:10:ba:58:e8:1b:8b:69:ca:96:3c:71:af:7e:26:22:
18:3b:f7:fe:b9:a2:fd:38:64:29:92:96:9a:ff:bc:3b:90:ca:
e4:99:26:d8:b5:b1:24:2d:8e:92:06:d4:42:b1:3d:9c:47:5e:
75:bc:2c:ed:83:e6:27:49:24:22:77:08:bf:bb:be:33:4a:7b:
ef:1b:f6:a7:f4:6c:a2:82:c0:16:fc:a3:10:9d:28:76:78:80:
5f:d6:fc:f8:26:9a:03:47:5e:f4:af:76:81:30:67:0e:85:fb:
97:e4:66:0b:cd:82:9a:90:8d:9c:58:2a:53:8a:f0:99:55:b5:
dc:20:3b:bb:ed:14:49:c8:28:74:8a:5c:6a:ea:38:4c:43:0e:
a0:4a:42:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:07 2025 by rpki-client