Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: fa+67fFIB+W1GHJK1AygUhtEwquVv9BzkQS2k+PSGIU=
Subject key identifier: CA:FA:C1:99:96:68:C8:75:BF:1F:3E:69:B8:06:00:B7:A5:8E:E8:E6
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 0194BC3BFB6433C228BA1A0097CEAC8F3E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: gR1P3MBg29zjmByCEKF/EP+lgHGXuncfUhdJHvBteto=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:64:33:c2:28:ba:1a:00:97:ce:ac:8f:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=cafac1999668c875bf1f3e69b80600b7a58ee8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d5:5c:f6:44:f5:25:16:08:39:b2:95:f5:6b:
64:c5:27:0e:99:0d:61:7a:f2:6b:67:11:b5:fc:49:
84:b7:fc:d3:49:cf:fe:45:f4:33:a8:a9:03:11:98:
e7:a3:18:c6:82:b5:50:ee:d9:0d:c2:5b:46:e3:a0:
ca:49:27:22:b4:ae:de:8c:84:70:a4:ec:c7:2e:91:
49:ed:1d:69:18:e4:9d:84:03:13:f5:d6:24:2a:64:
d6:99:2d:d5:ea:74:e9:76:ea:78:fd:1e:c9:b7:4c:
8c:55:45:e3:0d:49:58:e8:be:06:ca:3e:e8:e0:6e:
eb:48:b2:c8:5c:7b:df:f4:80:f2:58:51:14:f2:b7:
15:a2:af:47:21:ce:f1:4f:de:1a:c3:eb:fb:25:43:
9f:75:48:82:33:ab:55:77:ad:7a:7e:18:e3:79:01:
6d:7b:24:56:b3:a0:33:84:5f:ee:20:d2:07:3d:1d:
e2:51:81:79:f3:26:57:c5:57:cb:64:1c:7e:c4:7d:
24:65:cf:1d:c0:fc:2d:d9:98:92:7e:f2:c4:56:1b:
73:11:fd:5e:9a:ec:dc:6d:9a:a6:f5:9b:58:8f:08:
29:4f:d7:0c:12:7f:8e:cb:89:ea:d5:d2:5e:e5:69:
b1:9d:4e:66:82:35:d1:f7:c6:86:1f:44:8c:ec:fe:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FA:C1:99:96:68:C8:75:BF:1F:3E:69:B8:06:00:B7:A5:8E:E8:E6
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:a0:ac:20:86:c6:89:f6:62:3c:d2:37:31:a6:8f:14:5e:
a5:ae:1d:96:09:c8:f8:d7:75:13:d9:7c:14:4c:c3:a5:f3:1d:
59:99:32:cb:9a:3b:7c:4e:38:b9:cf:f6:3a:b1:81:1d:3c:e5:
1a:66:21:9a:4f:29:6f:99:a7:6d:8a:ab:b3:da:38:b4:10:ba:
c2:3d:96:cb:95:9a:f9:49:c6:4e:5f:f0:f6:4a:68:76:a3:1c:
3b:30:9a:f6:a6:36:0a:78:d5:a1:5c:9e:e9:45:f2:18:17:6f:
ed:29:2e:ac:1a:fc:a6:1c:1d:f6:0f:64:46:18:1d:4d:71:e4:
b3:ab:37:23:28:b5:4f:37:83:bc:0c:a8:3f:9f:15:43:b0:1b:
09:1c:e7:42:60:ef:c4:6d:80:31:5b:d1:08:98:0f:05:6e:be:
63:28:6b:d6:83:69:b3:08:32:ee:9c:e8:73:71:34:ca:9d:3c:
ae:30:0f:6d:89:21:40:db:66:50:03:b9:24:a1:aa:85:2e:28:
6f:f0:e2:c2:de:69:ae:fb:29:a4:45:43:f4:c4:1c:a1:1f:7b:
3c:7f:39:d8:5e:17:b3:f5:c4:e9:60:da:ef:0a:c8:15:c1:fc:
b5:ef:3c:e4:50:a1:0b:f9:1c:85:58:73:fd:6a:aa:e0:8b:d0:
38:60:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client