Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: GxMUZ7CLbBnms7XGC5E81rPc0LBT1X/UBpRhWrYNglc=
Subject key identifier: 15:C3:6D:B8:D9:C6:A1:26:94:E1:65:EF:8F:B8:35:ED:3E:07:A5:2B
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0194BC3C6265D26AF3DECEF79C1091D6DA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: xdzjSzF6xX4MR38fIIsIdFcLGG2pe9WFShqswRM4AUk=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:65:d2:6a:f3:de:ce:f7:9c:10:91:d6:da:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=15c36db8d9c6a12694e165ef8fb835ed3e07a52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:61:05:f3:23:f4:ab:91:2a:f7:cf:02:be:
e7:75:e2:85:46:bd:98:c2:de:af:9d:2d:4f:87:fe:
d2:bc:7d:0d:9a:93:f1:fa:34:fd:5d:16:db:9a:9a:
5c:7e:d2:b4:35:3b:27:67:68:a0:cb:5f:48:b3:3c:
b8:44:8b:ea:b8:61:3b:93:98:8d:a8:f2:34:ab:47:
ed:c0:e5:67:be:2d:64:45:c7:a6:e8:90:e9:b1:dc:
77:e6:d0:53:ff:46:1e:a4:e9:db:e4:7a:b4:68:31:
d6:e7:d6:c4:07:6e:90:0e:f9:92:bc:8a:e8:b2:63:
11:74:ac:7c:a7:71:ac:c9:36:76:01:5d:0b:ae:ef:
b4:c4:db:34:f6:6d:6b:04:bb:e1:12:58:17:89:d5:
ee:7e:62:62:21:91:c1:37:57:9a:1b:3b:14:dd:da:
e9:e1:fc:e6:88:35:63:11:86:13:92:3f:47:37:39:
89:30:33:36:a7:1d:bd:59:08:ce:44:fa:27:6e:51:
7a:5e:38:ea:93:f6:e9:7a:6b:e3:09:04:b2:d6:5e:
b1:c1:75:5d:8b:5c:93:73:7f:98:dc:30:07:4e:42:
5b:47:a2:e7:58:b1:e8:40:c1:a2:80:4d:65:f1:0b:
f4:34:a3:15:80:a3:2b:da:5f:0f:cd:7d:2d:fc:6a:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C3:6D:B8:D9:C6:A1:26:94:E1:65:EF:8F:B8:35:ED:3E:07:A5:2B
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:20:7b:2a:4f:38:e6:1d:5b:d3:c5:b6:53:ad:11:6d:9f:1b:
aa:ce:54:0b:9f:2a:1f:5e:3d:40:4e:7d:7b:e1:db:cb:aa:34:
bb:b4:7e:b6:19:2f:43:60:e3:a1:fb:ba:31:9f:8f:2f:8d:26:
74:2a:20:48:67:30:c2:84:fe:bb:7e:ab:3e:53:fd:58:76:5b:
a9:e9:59:d9:02:9f:c1:f9:c4:91:de:34:1d:30:fb:ea:91:6d:
fc:b2:c0:3b:9d:9e:b1:56:be:68:22:c8:e5:85:ba:8a:01:37:
b8:ce:d7:1e:2a:a0:4e:bd:a9:0f:57:b6:c9:ec:3b:9f:db:3c:
3d:cf:06:24:7e:64:59:10:8e:2a:cf:a0:f9:53:bb:fa:92:c2:
64:22:7c:7e:e9:fe:17:9f:ea:cb:20:d4:1f:bf:51:a3:58:c0:
70:0a:3c:6c:9f:d6:ac:3d:fb:60:70:71:2c:64:9e:76:1c:00:
cb:48:d8:2e:7a:a9:8a:6e:8b:17:11:8b:6b:82:96:fd:2c:d3:
87:42:5c:0c:11:bf:62:ac:55:e3:cd:82:e1:dc:cd:d1:ca:6d:
0f:12:35:2d:07:5d:8e:ec:be:ba:a5:d6:d3:21:4c:ed:5c:62:
ce:6f:19:bd:1d:8d:42:c5:a9:1c:b0:14:49:0b:eb:18:c9:83:
90:58:a6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:21 2025 by rpki-client