Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
File: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft (raw, json)
Hash identifier: 9c41On6LeL4nbpX+gAEe/UxC+mmRrcAc/uyIWxKd1Bg=
Subject key identifier: CF:3E:42:7A:07:8D:29:C1:DE:52:6F:15:48:02:AF:13:91:5A:49:FD
Authority key identifier: 0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
Certificate issuer: /CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Certificate serial: 0194BD8585D20C47F4AE2C98272B29925BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
Manifest number: 0C37
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl (hash: xYeTAuFV5uHBNX2U326ab7CyLDfEV1XPMA5lZzbVCUE=)
2: q75mVExwlcu32JNTYIQla5p7m1o.roa (hash: x+d/+bvOF1j8LDo0fwzIQNZsHB7Abtd57CLyM/qqXNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:d2:0c:47:f4:ae:2c:98:27:2b:29:92:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b2ed24703d334b11cd22ee489fc3c64bdc06f4b
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=cf3e427a078d29c1de526f154802af13915a49fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:84:ad:eb:82:37:90:3f:93:e8:b4:8c:25:
33:0f:7d:68:ce:3c:02:62:aa:2b:87:f9:f6:2b:fa:
ee:1b:0a:5e:04:0c:90:61:8b:c4:49:0f:7c:4d:0f:
cc:4b:d7:a2:bd:76:5c:74:3c:25:09:60:c4:9d:91:
fd:b3:06:63:cd:f0:c8:1e:cc:1e:8c:17:77:10:26:
58:a2:93:07:cf:2f:16:46:b5:93:84:34:44:c6:43:
51:26:6a:bd:1e:08:36:c5:95:3f:67:29:f8:03:96:
eb:a7:3d:d5:e4:2f:7d:af:37:e1:3b:df:90:72:60:
7e:e2:d8:6d:28:00:cc:d9:00:e1:76:e7:6f:6e:f5:
ba:e7:2a:1f:32:2c:ad:94:ff:b5:9e:4b:5a:6c:46:
b7:6f:bd:5d:6a:fa:4b:4c:a9:41:38:93:a8:71:d1:
e1:25:89:74:6a:a9:1d:33:a4:20:41:10:38:34:8d:
a3:d6:de:e1:39:ad:44:a1:22:08:8d:12:c2:65:17:
59:b2:90:38:b4:40:7b:39:b7:53:b3:4b:2e:cb:68:
6e:d9:75:59:5d:96:e1:d0:54:99:62:44:d2:1a:47:
e9:83:1a:bd:f8:08:d3:1e:17:e8:76:bd:15:53:10:
50:1e:ae:56:ea:4e:da:9f:cb:33:2b:d2:29:1c:50:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3E:42:7A:07:8D:29:C1:DE:52:6F:15:48:02:AF:13:91:5A:49:FD
X509v3 Authority Key Identifier:
keyid:0B:2E:D2:47:03:D3:34:B1:1C:D2:2E:E4:89:FC:3C:64:BD:C0:6F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/7170e0-a043-4b78-aab1-b6488aec533b/1/Cy7SRwPTNLEc0i7kifw8ZL3Ab0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cc:54:2d:a6:e2:cd:09:2e:38:0c:83:ad:13:12:2c:de:aa:
bb:ee:b5:ce:f5:54:21:e8:30:2e:27:90:9d:d2:5d:b3:27:bb:
3b:f7:0d:63:6e:56:39:ec:1d:59:10:f0:43:c0:58:17:f3:61:
e4:63:e6:1b:a9:70:b7:bf:73:82:c1:b2:c0:e2:78:e5:31:9b:
59:9b:8e:a5:17:26:fc:ad:dc:cd:85:8b:d4:7f:77:04:1f:9c:
c8:2e:cd:df:22:05:d8:64:95:22:2a:ac:a1:dd:8d:bf:44:06:
d6:23:11:36:f5:f7:e2:e9:e4:9a:4a:59:b1:33:8d:37:f5:d7:
5a:62:31:1c:4e:29:32:27:f5:87:e0:41:6a:6c:67:4e:0b:48:
17:06:af:12:37:16:bb:79:8c:a6:2b:9d:e0:99:26:18:da:b6:
06:83:39:6c:6c:8e:93:b7:84:51:a6:ca:05:e3:2f:36:10:46:
0a:98:8a:ef:46:ed:57:35:fd:ec:ea:cf:ef:a9:0a:4d:ba:ce:
b2:ce:9f:88:6a:53:78:38:0a:79:27:b4:0c:d6:93:e0:c6:12:
8c:69:63:04:22:11:f4:c9:af:a6:50:00:a2:ce:03:4b:5e:29:
21:de:34:c4:05:83:47:3b:7b:a8:fd:5a:0d:fa:6a:07:c1:60:
d4:32:97:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:35:33 2025 by rpki-client