Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
File: cl3CBR5_PY1hf1UYng7m8xdNkto.mft (raw, json)
Hash identifier: lISG3gwTzgx50TqDiO2HmbGXMS3+YWgJnPsTtgD1mCY=
Subject key identifier: ED:CD:DA:F1:16:33:4B:AE:FC:DD:D1:05:E8:AA:49:F7:4D:40:86:2E
Authority key identifier: 72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA
Certificate issuer: /CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
Certificate serial: 0194BC3C68424F4210270718EC580DE39899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
Manifest number: 014F
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: cl3CBR5_PY1hf1UYng7m8xdNkto.crl (hash: zbvfQWsIIr+Pe/g4PKTGjX0QzaTXFeWTOsWzq2FL3xM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:42:4f:42:10:27:07:18:ec:58:0d:e3:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725dc2051e7f3d8d617f55189e0ee6f3174d92da
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=edcddaf116334baefcddd105e8aa49f74d40862e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:58:09:8a:15:a3:ec:13:e2:92:7a:77:11:
ba:4e:aa:4d:02:bb:24:ac:9e:e5:70:a9:28:71:8d:
c8:91:ce:44:57:32:c8:90:9e:3e:e7:aa:36:db:c2:
34:55:44:be:38:ac:6d:07:54:17:8f:3c:74:c6:53:
8f:b8:7f:ec:65:91:26:a2:3e:1f:df:2d:5b:f9:10:
b0:73:1e:ef:d4:67:ca:19:8f:c7:16:22:c1:c5:dc:
d2:df:69:73:e9:3a:9c:f9:95:06:6f:6b:e2:3f:ff:
04:f4:a3:1b:88:cc:9c:6e:ee:1c:16:fe:83:db:27:
bc:c7:59:64:de:84:d5:d8:e2:72:ca:1e:30:3c:44:
ca:70:3d:6a:53:34:31:49:73:cb:66:06:7b:2e:96:
56:22:08:f6:d1:8f:93:24:a6:cb:f1:85:89:23:01:
4b:60:2f:2a:36:93:a3:5f:bf:36:ad:00:68:38:99:
94:28:eb:f9:a2:a1:2e:75:74:ad:77:89:f5:aa:07:
54:e1:13:b3:1a:a8:cc:ff:d3:58:96:22:25:0f:0f:
ee:60:40:00:44:72:79:42:08:eb:96:ab:37:4c:ff:
f4:9c:ab:20:3e:e1:3b:da:a3:cc:a2:60:f3:35:1e:
3e:7b:08:1d:be:19:f6:d7:59:6f:ff:33:ef:e4:de:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CD:DA:F1:16:33:4B:AE:FC:DD:D1:05:E8:AA:49:F7:4D:40:86:2E
X509v3 Authority Key Identifier:
keyid:72:5D:C2:05:1E:7F:3D:8D:61:7F:55:18:9E:0E:E6:F3:17:4D:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cl3CBR5_PY1hf1UYng7m8xdNkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/984111-6f7c-4e69-94c9-ff0f52633527/1/cl3CBR5_PY1hf1UYng7m8xdNkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:a9:c6:35:a4:22:cf:06:a1:98:b8:b8:f1:3e:5d:59:7c:
2f:92:30:80:5d:dc:a0:3d:a7:cb:c2:0f:40:90:98:4a:64:21:
15:b5:d1:ad:1b:7d:bb:f1:7f:b1:9b:cf:5e:84:da:95:b4:25:
be:e8:33:76:97:51:36:38:8b:34:38:c6:fb:2a:66:a1:a5:48:
f2:67:21:64:7c:f4:a7:a4:f5:8d:26:71:da:75:ce:86:f3:5c:
c7:88:16:6c:c7:7c:f7:cc:f4:1e:8c:a0:d0:f1:08:0f:77:48:
e0:67:1d:f7:11:29:c3:7d:1c:4b:59:fe:43:bb:ce:c4:5d:0e:
ab:86:84:9d:9b:fb:82:9c:69:c7:3a:42:44:1a:a9:be:26:97:
bb:d9:55:16:46:eb:e8:01:f8:8d:3e:a1:c9:b2:d6:f5:c5:66:
72:3c:fd:d1:8c:08:55:86:da:c5:f3:5f:af:98:7a:46:5f:4c:
06:11:8e:be:12:98:2a:46:d4:d4:72:b2:4e:ae:e1:d9:a2:48:
b8:df:20:3e:b6:d0:eb:49:c3:46:21:52:78:e4:d1:98:04:3e:
14:50:73:dd:0b:05:ec:34:f9:88:5b:df:af:6d:99:b1:73:9c:
30:c8:bc:e7:15:d9:f2:2a:ba:67:11:10:15:60:ed:4e:e1:ef:
0d:34:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:14:54 2025 by rpki-client