Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
File: cFo7sRdTjbbbnFz9WnlL899pfCc.mft (raw, json)
Hash identifier: KBKh49/lHDMgSqPQrv8uptXT8QMmi3WQV6I9vZLDjcU=
Subject key identifier: 35:54:54:C2:33:4D:2F:28:E3:4C:BE:F3:39:DB:EC:C8:B3:5E:C0:C0
Authority key identifier: 70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
Certificate issuer: /CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Certificate serial: 0194BBCDF54F8F9B2FEFD1C195FD1228B012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: cFo7sRdTjbbbnFz9WnlL899pfCc.crl (hash: k6nEa0s3qfiHrYPIt7M1f7YOW+9Zdbc+BUXPb8qEnfo=)
2: wL6tLZZKC26B362dOxei9VMeWYo.roa (hash: cyglEBGINCGd1/IgiI+VhGd2UBRJLqq47Yds0263110=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:4f:8f:9b:2f:ef:d1:c1:95:fd:12:28:b0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705a3bb117538db6db9c5cfd5a794bf3df697c27
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=355454c2334d2f28e34cbef339dbecc8b35ec0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:c5:13:df:d5:7d:38:49:dd:3f:53:c8:56:
63:e8:c5:50:ac:c4:d9:c6:57:32:d7:4b:3e:bb:b2:
cb:3a:c0:a2:36:ce:97:5f:49:80:23:6a:8d:f2:65:
25:61:71:c0:9a:ec:38:bf:fd:e4:6b:c6:14:99:2e:
26:12:03:83:48:3e:43:55:e5:af:da:9d:dc:69:03:
9a:4e:bd:5d:fc:b3:0f:5e:71:e0:b3:24:5a:6b:f1:
e0:9b:99:2b:fd:08:95:e6:33:9f:0d:27:4b:23:75:
e5:dc:65:49:24:f5:2e:d1:19:48:07:15:9d:6d:1e:
c7:91:cc:70:b3:ea:66:5a:65:c1:19:fc:95:c6:54:
51:60:7d:c6:4e:1b:39:75:02:cf:06:f9:bc:40:70:
28:4a:44:d2:a6:bc:f0:40:2d:e6:44:13:8d:69:b9:
f3:9d:8c:f5:86:74:3e:f3:e8:25:43:27:5e:7e:eb:
22:15:cb:f5:f8:7a:05:5a:d0:3e:83:d1:d7:92:98:
84:8a:aa:f5:f4:7b:e7:2f:2f:92:7e:0a:33:28:8e:
7b:1f:51:89:8b:b8:84:53:e2:2d:41:8c:3d:c4:06:
9b:f0:c6:58:6e:3a:5d:5e:fd:ff:bf:01:b4:d8:5b:
88:f2:10:d0:0e:6a:33:6b:5b:f3:a2:44:bc:93:4d:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:54:C2:33:4D:2F:28:E3:4C:BE:F3:39:DB:EC:C8:B3:5E:C0:C0
X509v3 Authority Key Identifier:
keyid:70:5A:3B:B1:17:53:8D:B6:DB:9C:5C:FD:5A:79:4B:F3:DF:69:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFo7sRdTjbbbnFz9WnlL899pfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3f7ab8-6b39-4362-a27e-77660371a1ec/1/cFo7sRdTjbbbnFz9WnlL899pfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2a:a9:63:9e:09:e8:80:8d:73:1e:8b:e0:a2:5d:f3:0b:a6:
62:be:7d:5d:b2:a6:c4:e7:6c:e0:0a:79:8f:e1:1d:5a:ec:02:
95:8c:38:b2:3e:b3:fa:4c:1b:c0:ff:4d:34:34:1b:6e:f8:11:
0c:3a:57:16:8c:e3:0d:20:75:89:34:c1:09:53:08:53:83:b5:
70:d7:9c:f5:a9:14:42:13:a9:b1:2d:64:ee:a4:6e:c8:73:93:
f8:d6:21:9d:34:30:11:32:aa:69:cb:de:d5:4b:30:e9:b7:7b:
71:9a:b3:07:ef:74:99:63:3b:ad:5c:6c:d1:47:f1:62:d0:ae:
84:9b:51:d3:5d:06:02:d8:e1:c9:91:14:4d:16:ae:bd:88:7c:
23:99:1d:b3:8b:f4:67:ae:68:6d:61:0c:1d:07:e4:eb:35:7f:
5c:77:b7:a8:69:3f:c8:98:27:24:8d:73:4f:73:7e:b0:7b:73:
b3:22:30:c6:93:c6:cb:90:b6:f5:ba:5e:39:7e:cf:d9:a2:cf:
aa:62:ac:c9:97:d1:6c:f0:d1:81:61:60:08:f1:e8:d8:aa:82:
43:fa:1a:b2:79:8c:3c:41:d0:50:c4:ad:9a:43:30:ba:af:42:
c2:c9:5f:12:f4:75:bf:c4:02:b0:0a:8e:2c:07:dc:ba:d1:2a:
3f:1a:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:09 2025 by rpki-client