Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
File: cnFQa_q5Ese4FxuWuFoJmxQObNg.mft (raw, json)
Hash identifier: 4grkdP1aCtmgh02SXHjpCQjYTezzJxk0zhEh+Ey9tAg=
Subject key identifier: 1F:DE:5D:19:69:FC:41:50:EF:53:B2:01:B8:2B:0E:1C:F1:04:B6:EE
Authority key identifier: 72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
Certificate issuer: /CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Certificate serial: 0194BD4E761BBB33A69429A8492843A39AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
Manifest number: 024E
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 1-t2gcnq_wGKj6Cw9yBTlPkMhqpA.roa (hash: biNGhGH5AKAvuvZqlWI6oNS4u1EhxLRFN8pAccYPS0U=)
2: cnFQa_q5Ese4FxuWuFoJmxQObNg.crl (hash: r7K5eeLHKB83WDkEoJsQK3oW9C8hmcEt5Ke8jkwFOFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:1b:bb:33:a6:94:29:a8:49:28:43:a3:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7271506bfab912c7b8171b96b85a099b140e6cd8
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=1fde5d1969fc4150ef53b201b82b0e1cf104b6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:5f:a2:4d:51:52:77:bb:3b:91:f3:93:9b:
e3:38:9e:fa:23:bb:91:a9:4d:5e:84:1c:92:f9:bf:
bc:3c:04:6b:b1:9d:4d:8c:fb:f9:39:a3:7c:c2:3c:
41:82:69:59:e7:e2:a5:fc:db:1f:0c:7e:a1:6f:4f:
56:75:83:7c:fc:b8:a5:d5:45:45:d0:88:08:b2:2f:
cd:62:52:b4:50:01:f2:95:c5:73:26:83:04:92:84:
ba:61:d5:c2:dc:0a:e5:d5:68:49:7e:0a:f2:0e:a7:
16:b0:35:10:b4:30:e8:5e:04:da:94:29:15:2b:4d:
9c:ef:5b:40:9d:06:04:99:88:c0:d8:31:52:e1:e2:
18:7c:25:69:8a:82:25:31:93:9c:07:9c:c0:41:a2:
30:4b:60:54:34:15:81:f2:c8:fa:28:d8:12:0c:ba:
38:fb:9b:c4:e2:ce:70:83:c9:b1:bd:1c:5d:d9:e0:
04:1f:b9:f8:2c:7b:a0:0a:23:a1:b5:7b:65:f2:a1:
98:34:a1:11:e6:44:68:42:c9:77:ad:6f:2e:d5:4b:
69:d3:4d:2f:96:e4:a2:74:b9:0d:8c:79:92:c5:84:
cb:db:26:60:df:ae:5a:c6:52:5e:ce:e8:ce:df:ea:
f1:78:0f:ac:f0:8d:d0:6c:de:5f:cc:62:f0:cd:c4:
15:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DE:5D:19:69:FC:41:50:EF:53:B2:01:B8:2B:0E:1C:F1:04:B6:EE
X509v3 Authority Key Identifier:
keyid:72:71:50:6B:FA:B9:12:C7:B8:17:1B:96:B8:5A:09:9B:14:0E:6C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnFQa_q5Ese4FxuWuFoJmxQObNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd5824-2dde-403e-b2c4-d225032d1858/1/cnFQa_q5Ese4FxuWuFoJmxQObNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:66:7c:fa:c5:5d:c4:04:de:13:44:40:d7:8a:d0:db:c4:1b:
bd:59:d8:bb:89:76:38:f1:27:22:b0:9e:b6:cf:22:3e:98:dd:
92:1e:a8:68:74:dc:17:20:4b:bf:a7:a7:75:d6:fe:30:5f:55:
d9:81:62:d0:50:bd:11:bd:e6:96:04:c2:86:b9:1f:f3:26:97:
06:0b:94:eb:53:16:8b:66:21:87:e0:0e:51:ca:78:86:20:78:
76:67:66:17:d4:72:65:16:27:01:8c:5d:35:46:2e:4c:7b:9f:
0e:1e:ee:e8:77:58:85:be:3a:16:8b:92:e4:86:51:52:bc:56:
fb:99:1e:f7:f3:fe:ff:8b:03:dd:3c:a1:a5:07:7f:c8:7b:12:
6c:2e:f2:0e:55:57:3e:8d:c6:b2:8c:f2:fd:f0:28:1a:60:d1:
6c:36:31:60:5b:02:59:88:06:80:43:cd:4a:56:70:7c:d1:87:
1c:05:96:17:da:7d:a4:64:dd:10:f1:2a:52:dc:3b:f9:b2:fe:
92:4c:55:0a:0f:34:4f:96:d2:1f:34:f5:72:db:29:ac:26:1a:
38:57:50:b2:58:bf:12:79:30:6a:97:b0:91:58:65:27:55:61:
58:cb:27:e8:b8:5d:13:f9:16:ac:aa:a1:d9:a6:25:4e:c0:67:
07:9f:68:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:03 2025 by rpki-client