Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: RBfFW1mOQXCXYhxoLbDznvVmyo0IMp4EGkGAxwmBskM=
Subject key identifier: 28:A8:01:EA:1B:94:74:9B:28:0D:B2:F1:5A:0F:76:C4:40:07:36:B7
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 0194BCA9CBAB3CA546EF8F2E3B6EE15F79CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 031A
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: G8BSDrxhNV1Y/pbpGnJp/ux5Rx5UqivUWxlYpw02ZsE=)
2: fE9GzrH3d-6Th3wBzYY1G9LbRew.roa (hash: xyXKNFQngeKokd5hS0djUT+QlJzpKydn7zNDkVQlZFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cb:ab:3c:a5:46:ef:8f:2e:3b:6e:e1:5f:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=28a801ea1b94749b280db2f15a0f76c4400736b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:18:d3:aa:4a:80:0f:d8:d5:44:63:1a:fc:70:
37:af:3d:fd:1b:ec:1e:b5:c5:20:11:76:7d:b2:ad:
7f:71:a2:12:15:60:01:a4:92:53:6d:87:de:74:43:
41:c0:f5:8a:27:de:9e:96:49:71:4c:18:44:cd:87:
21:2f:19:9d:14:45:57:13:d6:7d:53:28:1c:bd:9d:
d5:c2:c4:f5:d4:83:ea:45:7c:1b:d4:51:70:ba:6e:
e2:b2:09:2e:91:e1:e2:c5:db:8d:33:dc:6f:fe:00:
a8:9a:74:7d:71:85:92:7f:29:9e:bd:d1:d8:5e:d0:
6e:6b:23:9c:96:bb:e6:d2:a9:06:3a:a8:9b:16:c9:
32:0e:d9:91:32:7a:e2:5e:01:a1:3d:4a:da:70:2a:
b2:fd:36:f9:a2:82:d6:16:51:92:f9:fc:32:28:ce:
61:00:3f:9a:34:33:07:34:40:39:0d:02:bf:a8:dd:
01:bd:e3:10:50:17:43:71:0d:f3:67:fc:9a:8a:ff:
d1:79:c2:5a:87:7d:8f:6e:58:44:d5:9e:96:ae:f4:
f1:c6:2a:4a:90:a5:1f:2b:cc:84:c8:72:20:3c:54:
0f:e4:b9:7f:37:1f:b2:2d:b4:d3:b8:3e:fe:e8:e1:
fa:f5:a3:7f:16:98:b6:46:10:50:65:8d:21:25:9a:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:01:EA:1B:94:74:9B:28:0D:B2:F1:5A:0F:76:C4:40:07:36:B7
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:00:05:bb:33:cc:86:30:74:5f:cc:b3:ec:d5:dd:50:ae:c9:
41:9e:05:44:f2:e3:8a:2e:53:01:49:bd:57:4d:93:bd:02:b0:
54:a4:13:86:b2:ef:b9:39:c1:a5:29:14:16:c3:7c:2f:71:20:
dc:45:8e:43:47:d7:2a:e7:2a:7b:b8:14:15:70:df:9c:87:01:
70:50:fe:35:88:1d:4f:98:80:fa:c5:98:84:60:58:10:36:5b:
52:54:1f:f8:a4:44:65:73:1e:06:33:28:15:42:ba:b2:bc:16:
72:1e:7a:72:e9:55:fb:97:f1:77:98:54:b6:97:7d:5f:76:e1:
3f:6b:41:25:bc:e7:4a:3c:1a:09:c1:0c:b4:8c:15:6d:46:59:
15:71:5f:e1:2a:07:55:b8:bf:a5:97:f4:43:04:31:8f:6f:66:
05:da:70:6f:aa:52:7c:50:2f:ae:02:5b:54:d1:0d:65:04:8a:
34:b5:ac:53:4a:e6:cc:c6:0f:bc:ea:22:01:98:3e:a2:96:3b:
57:fe:e5:73:19:06:a4:42:9d:96:aa:69:75:e7:82:11:df:2f:
06:be:bc:e5:8f:e5:55:e5:64:79:65:17:f7:dd:e4:a3:d0:9e:
4c:a0:47:bb:b2:6d:04:bf:bf:70:5f:ad:f8:28:0a:a3:f6:29:
f2:eb:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:54 2025 by rpki-client