Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: CrnxLMiGKKFPWGl58gN9ousLXTrrk//R28+tIr/+trA=
Subject key identifier: A2:83:99:60:27:AA:E5:21:54:07:8C:59:5C:17:FC:1A:84:56:ED:CD
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 0194BBCE06542C711B24E266B47426942193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: 7inrwd5Vg7CPmrCcV1uI8TdjHcY2bKYMVUwbcSwbm5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:54:2c:71:1b:24:e2:66:b4:74:26:94:21:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=a283996027aae52154078c595c17fc1a8456edcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:5b:07:01:d6:0c:34:fb:a9:90:76:f9:07:
c4:6f:4e:5d:71:e8:4f:ae:00:0e:a4:2c:a9:e7:7e:
e5:9a:4c:7b:d8:8f:9d:a0:ff:e8:2f:55:3b:5d:4d:
67:87:69:93:60:64:8e:32:fb:01:2e:51:8b:f8:72:
a8:c8:9c:78:c7:c6:1d:f5:83:6e:0c:48:a4:fc:7d:
f0:69:ec:ec:53:37:08:3f:4c:f6:6c:b1:51:28:88:
4f:91:b1:a7:70:ae:76:7d:8c:46:dd:d5:37:85:cf:
b3:74:6f:4f:a2:b9:20:fd:4d:48:84:aa:1b:68:b6:
b1:8d:f0:69:e8:cf:25:15:0c:e3:b8:fa:ae:c9:4d:
0e:5b:bc:9e:4c:09:f5:f3:94:6d:8c:19:b9:74:5c:
ff:7c:d9:de:89:cd:7e:9f:91:ad:a0:5f:fb:90:94:
75:8d:59:72:55:4a:9a:6a:64:cc:dd:fe:0a:e7:dc:
56:33:30:87:5a:d6:ad:59:1d:8f:0a:07:13:58:39:
2b:99:1d:e5:f4:d5:d7:9d:e0:d1:00:3d:37:52:a8:
1d:ee:65:35:07:a9:70:74:10:53:68:e6:6f:a2:49:
90:54:a9:40:04:8a:5d:08:20:fd:dd:b7:fa:6c:6f:
ce:2a:bd:71:26:73:f8:e0:bb:8b:6e:97:68:26:7f:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:83:99:60:27:AA:E5:21:54:07:8C:59:5C:17:FC:1A:84:56:ED:CD
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:21:33:8e:e6:a2:8a:ca:5d:e4:0a:a7:52:fa:d0:59:d2:ce:
e0:6e:ab:a3:8a:78:96:80:43:91:37:3d:78:50:69:eb:0e:61:
b2:00:20:2a:84:75:60:20:ce:b7:2a:fd:6d:00:ef:fa:c1:6e:
0e:1b:f1:42:f1:9e:bb:a9:2e:08:f5:15:42:a1:6d:f9:d5:4b:
48:5b:17:ff:ef:bf:9a:2f:58:ed:7b:af:27:f7:61:ce:47:f6:
7a:ea:e3:0f:0e:68:25:10:21:33:f3:53:05:20:1b:bb:62:bd:
06:60:af:7f:41:cc:a7:1e:13:d0:2a:e5:64:13:ce:ee:c9:df:
78:a1:49:9a:d0:d4:db:5e:f8:83:21:1e:00:e9:18:fa:6f:70:
16:dc:4c:7c:39:4c:03:4b:5d:f3:f4:db:24:d7:ae:80:3d:30:
8f:94:e0:39:a7:8f:36:e6:04:18:8c:cc:91:74:1b:23:e2:2b:
b4:2f:94:26:4b:68:80:d2:cf:bb:74:42:8a:be:5c:af:b9:d4:
d1:84:d2:cd:1f:6d:35:e0:92:3d:64:ed:31:15:b3:1e:65:67:
63:93:2e:c2:99:4b:72:9d:0f:b3:27:70:d4:9f:ac:3b:7e:c0:
67:2d:c8:fa:2d:02:8e:d6:ba:9e:d5:59:86:c5:6f:21:88:e1:
77:54:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:06 2025 by rpki-client