Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: D7qr7+7ImPlnDLrySY/PWLiVs22XlzLsY5yGtYwrTIo=
Subject key identifier: 11:23:B3:8A:1A:8E:7F:2E:FE:B3:5A:3D:1D:9A:2D:BA:D6:B0:96:3A
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 0194BC3C308DBA15AD45B5E2652A4DBD145D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: RWgq/zJhcZgRDsTDQ2yTwf8umUDsxbzAOI7Y/ZEQIjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:30:8d:ba:15:ad:45:b5:e2:65:2a:4d:bd:14:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=1123b38a1a8e7f2efeb35a3d1d9a2dbad6b0963a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:5c:9f:18:c5:88:9e:3f:6e:3f:c9:50:58:
4a:11:2b:52:f5:73:02:5f:65:f7:58:a4:ca:b5:a2:
7e:ec:ee:b7:f2:e0:c2:4f:30:86:70:c3:d4:25:83:
1c:39:a9:50:01:9b:48:05:7f:99:fd:3f:76:11:f8:
a9:09:a2:63:c2:2d:2c:c2:c1:3d:32:7f:66:7f:92:
47:56:63:5f:06:dd:73:30:5e:50:97:bc:f7:ce:48:
8c:1d:fd:62:48:0b:96:c0:3e:45:d8:ac:4f:db:d3:
be:ea:87:76:b7:b9:50:be:d2:0b:68:cd:32:5a:3a:
34:d4:3c:03:6f:73:98:35:b5:72:63:ae:43:5a:58:
73:99:de:f0:30:86:17:c7:31:c1:a8:8e:4a:c9:f6:
2c:83:ee:a0:bc:1b:63:f5:d0:6a:0b:b1:b4:c4:00:
e4:29:09:80:46:5d:f3:04:81:30:46:cf:bd:e6:b6:
e9:7a:f5:46:38:dd:c5:51:fa:bc:e1:b2:f9:6e:7d:
6d:72:1c:23:85:5d:1e:67:b6:e5:78:91:45:07:0c:
43:11:b6:e5:4f:4c:78:7e:75:44:a2:4d:e9:18:b6:
7a:7a:ed:3c:d0:07:9f:ca:52:c1:80:92:94:1a:8f:
db:fa:21:11:84:72:71:9c:79:a0:1b:4a:c6:ac:14:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:B3:8A:1A:8E:7F:2E:FE:B3:5A:3D:1D:9A:2D:BA:D6:B0:96:3A
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c9:49:35:84:ca:34:ab:f7:3a:cf:c7:0a:bd:87:22:42:b0:
94:cc:d8:72:94:d8:7f:78:42:18:5c:6e:d4:d6:f0:ee:ac:be:
13:7c:72:9c:a0:b2:9d:b2:72:0f:fa:23:c8:cf:5c:fe:05:73:
4f:1a:ef:77:a3:ac:7f:3a:4b:34:b8:b7:ee:4c:92:37:6f:45:
89:1c:62:46:9b:b5:82:a8:eb:17:05:74:ef:d9:dd:92:85:80:
86:1e:8c:27:69:a2:e9:14:62:07:48:41:cb:da:72:69:d7:06:
3b:c3:8b:8e:2b:93:a4:eb:18:d6:e6:ec:23:43:b0:60:11:04:
9c:d9:ab:90:0c:cd:6d:c8:6f:86:e9:99:1c:57:43:c0:67:13:
6d:e8:41:0e:9b:9f:b2:f6:00:06:4a:02:0f:e1:50:12:aa:12:
cf:2b:c3:d8:51:95:0b:89:9f:fc:d0:a7:c2:b2:f3:51:95:78:
c9:d6:bc:d0:b2:94:73:da:d6:77:81:f3:c8:35:11:9b:9b:ec:
bd:9b:57:ce:76:87:f3:1a:38:82:13:e3:25:24:c9:ce:78:6a:
a7:5e:a2:10:83:9c:31:07:cb:cf:18:bf:4b:17:8d:bc:0a:31:
4f:54:3c:7b:c1:eb:f1:a6:90:96:29:54:35:e7:06:fd:5f:b9:
2c:03:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:26:48 2025 by rpki-client