Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File: cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier: pOrf9BIrIbanOmzw3VGwRINx5HgbXcMYaaLRP59KWi8=
Subject key identifier: CA:56:24:04:CE:84:CA:16:9A:BD:D5:C2:D9:9D:C1:2C:80:91:8F:A4
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 0194BC3BF70E1DE3F0807BD691A707E2D928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: 6C11G15V6D5gYmhMsyqZ+EE1YbSHlLw/1yc+0tcWTmI=)
2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:0e:1d:e3:f0:80:7b:d6:91:a7:07:e2:d9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=ca562404ce84ca169abdd5c2d99dc12c80918fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5e:32:34:ec:06:24:82:2a:3d:b4:da:60:44:
22:d8:97:1c:6a:5d:c3:49:23:84:69:f6:49:9a:af:
e8:28:50:35:0f:c2:8f:f4:66:72:38:5c:01:a3:e8:
0f:c3:48:b7:c3:39:fd:f3:b5:be:28:96:ae:cb:8a:
9c:d1:c5:cb:ac:1b:d7:d5:66:5d:8c:ed:b0:c2:c9:
ef:f6:2e:8e:ca:0b:7d:5c:4f:f3:09:4a:24:7e:8f:
68:8b:8d:e0:fa:84:50:e5:c1:14:60:bf:35:5e:e0:
e3:e2:ec:73:64:da:d8:c4:6e:08:33:02:f1:c9:6e:
38:cf:c5:de:20:cc:64:2c:c1:c6:41:2f:a9:c5:5d:
7e:a8:43:0a:d2:25:f9:d5:e4:41:75:79:02:e9:00:
35:69:91:ea:3d:a9:52:2f:ab:ea:97:bb:53:d0:d8:
1e:84:55:ac:10:80:2e:6d:5a:65:ba:f8:cb:06:4c:
96:0a:50:8b:ec:f3:0f:9d:88:bb:48:ab:c3:41:57:
33:62:dc:5e:d2:81:fa:69:f1:de:80:7c:df:ad:4a:
b2:30:81:f6:a1:e9:91:0c:f4:db:d6:f5:48:90:68:
7a:3d:74:ec:8e:6c:06:e2:e5:1b:35:8c:09:91:7b:
99:74:2d:ed:eb:f1:8e:e2:8c:2b:0e:64:87:c7:8b:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:24:04:CE:84:CA:16:9A:BD:D5:C2:D9:9D:C1:2C:80:91:8F:A4
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:3f:e8:94:c6:a5:5d:4c:ba:dc:e8:69:7a:1f:4b:fe:40:bd:
35:4e:c4:1c:ca:15:eb:90:e0:df:6b:79:29:a9:f0:85:22:b7:
ab:d7:2f:4f:af:67:4c:3a:b0:0e:5b:6e:e1:3b:cd:8a:0d:84:
84:9a:e3:b9:7f:b9:da:a7:e2:15:5e:55:ae:db:12:3a:2f:e6:
91:8c:82:3f:8f:ba:19:60:76:aa:53:95:4d:07:83:d2:ae:3a:
15:2f:48:23:78:db:a3:6e:a9:03:8b:8a:cc:8f:90:93:24:bd:
98:9b:2c:0a:6f:ab:02:2b:e9:ae:56:64:62:d7:02:83:bb:bb:
43:92:85:ed:69:f9:c0:09:4f:d7:ce:cb:58:3e:ee:c7:d1:34:
3e:2c:bc:02:4f:cd:3b:c2:6f:de:c3:56:18:ae:81:c6:38:2a:
d1:f1:e6:97:8f:9c:86:52:97:42:96:7e:4e:5b:b7:3a:90:9e:
af:3d:36:89:94:85:44:4f:19:be:ec:51:21:0d:05:2f:7b:4f:
73:13:7f:1f:29:09:2c:cf:f9:5c:ca:5a:25:8d:02:08:ef:51:
c0:31:4e:82:db:01:e8:48:29:98:29:e7:d2:b9:5c:63:37:e8:
35:2b:ff:a0:3f:9a:0b:6b:07:ec:f2:ab:2e:97:be:f8:be:95:
b9:58:9f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:30 2025 by rpki-client