Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
File: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft (raw, json)
Hash identifier: tkeAwR01v/ZslOSWomJpPb6Pt7lfSlUwjs/NugdXwJA=
Subject key identifier: AD:40:D0:CB:35:53:00:99:03:EC:24:BA:F2:AE:4A:F8:3F:FA:61:33
Authority key identifier: 08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
Certificate issuer: /CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Certificate serial: 0194BD17E609F5BA6EDEE58C874B636650E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl (hash: ZhxREpnEb58y9Q2C9P1tk80DQaz32ftAOVZwLGUszNc=)
2: QBvaKUProLFwUadr8JLWlBh2UrE.roa (hash: xpxsGWmbgKM4U5yVDwdEgOHu1jns29KEhnZ49U4Y2OU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:09:f5:ba:6e:de:e5:8c:87:4b:63:66:50:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08bf59899b7aca30a3c7d5db93b212d98709c89b
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=ad40d0cb3553009903ec24baf2ae4af83ffa6133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:18:f9:dd:a1:c1:cc:e4:91:4a:2f:d9:29:12:
cd:4c:1d:a5:d3:2e:df:ce:82:e9:2c:cd:9d:32:bc:
ca:63:b8:16:61:80:d6:c7:10:ef:54:51:48:3e:69:
4f:7b:53:17:60:84:65:7d:bb:ee:b1:9c:17:de:2f:
b7:a7:d2:1f:5a:b0:0f:68:15:7a:e1:68:0b:10:35:
90:a3:5a:e6:73:b5:67:a7:78:f4:4d:8e:26:e2:80:
c3:2c:b8:a9:f0:3b:16:6f:da:c8:ca:80:15:63:03:
f8:f0:84:b4:14:33:bb:8c:c6:e0:01:50:78:dd:d7:
6f:e7:30:0f:63:38:ea:c4:2e:00:d9:74:b2:ab:a0:
9b:cd:14:a9:1f:e2:68:bb:27:fb:54:89:0d:f5:86:
37:52:55:54:c3:1c:9a:99:61:6e:97:7c:b3:cf:31:
51:d2:b9:26:0d:ec:cf:c0:bf:dc:7c:54:d6:da:c4:
3e:43:38:4e:7d:c7:53:9e:d5:65:75:a2:00:61:8d:
bc:f4:10:62:fe:5c:47:94:cd:bd:bf:63:fd:03:c3:
23:1f:ec:31:81:ba:b4:76:cf:b4:7e:27:31:4f:2e:
0b:a0:d6:cf:46:b5:2f:33:cd:0f:53:8a:54:64:dc:
19:98:20:82:78:62:69:ef:a5:09:7e:e9:36:8b:2e:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:D0:CB:35:53:00:99:03:EC:24:BA:F2:AE:4A:F8:3F:FA:61:33
X509v3 Authority Key Identifier:
keyid:08:BF:59:89:9B:7A:CA:30:A3:C7:D5:DB:93:B2:12:D9:87:09:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce1677-d927-44c6-a909-3b2b51a5e3da/1/CL9ZiZt6yjCjx9Xbk7IS2YcJyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:ce:01:9a:73:fa:77:c3:89:f6:ba:cf:6d:0f:79:63:b0:
57:06:b7:66:49:cd:68:6f:2c:55:2a:ed:6a:0c:0f:7a:6d:64:
1e:46:8f:51:16:86:46:a8:17:60:ad:9f:91:1c:56:12:bb:bb:
35:a2:67:a5:01:2d:c8:f7:2d:1b:66:66:18:4b:ae:8a:a2:9b:
97:56:ac:14:4f:33:63:a1:6c:06:b9:0c:55:d3:25:31:4b:21:
98:06:6a:55:7e:fa:48:d3:f7:31:5c:0a:56:d5:2d:d7:34:92:
4c:7a:de:be:0a:00:5a:8f:9c:01:bc:f5:e0:68:63:19:b6:29:
ed:48:43:45:e6:e2:d0:d5:ec:a6:9e:83:c1:ca:42:1b:d0:ae:
0c:9c:e6:69:b8:d1:34:51:1d:ec:b8:a4:fb:40:2a:0d:67:a3:
14:c2:1d:7a:2f:be:16:88:9a:f0:0a:0a:2c:a8:db:23:84:a9:
73:1d:0f:b9:6a:c7:1d:f3:af:0b:83:7d:5c:3c:f7:45:7a:cf:
67:94:a0:b5:2f:67:1c:d4:4f:0e:06:15:20:bc:8f:5f:a1:77:
6e:73:8c:a1:97:2e:77:f8:83:4e:b9:71:15:4b:f8:0e:d8:31:
05:ec:e7:90:79:e4:b9:53:92:79:68:1e:8a:7f:83:9f:6f:b7:
80:a1:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:37 2025 by rpki-client