Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
File: C-s440u-F-FXcnBsepYaheXRi1w.mft (raw, json)
Hash identifier: iPTkPuDagTXhQ/o+hk+CnoXE29SJ9YEwVFeMJFg450M=
Subject key identifier: 3C:7C:F7:A3:BC:F4:37:D6:63:6A:29:E7:58:48:D1:81:10:85:23:42
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 0194BC3BFC50D44AB616CF181B19AF1F8D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 18cY9ujv5WzKPjVh_KMBfXh1aXk.roa (hash: AoZKU4W+c1WobUJd6Een8bS6Zt7ZI7obunCUnf1FkdE=)
2: C-s440u-F-FXcnBsepYaheXRi1w.crl (hash: RCGu8UGWCNuhD1MZ/g7IjsgSTe21qz+JRheqf4/8Aok=)
3: hEoePDP6Dx0gBaTVWE1noB64nyE.roa (hash: 58m4hCJe+S0Ryzf3qCogIZjp2PXi+C5F/DAAlF1eAqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:50:d4:4a:b6:16:cf:18:1b:19:af:1f:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=3c7cf7a3bcf437d6636a29e75848d18110852342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:ad:75:19:a3:0c:2a:01:6e:4c:9f:92:04:
8b:86:3a:64:f0:1e:0f:e9:37:f9:88:7f:a0:a7:1d:
26:e0:03:a1:f7:c8:6d:10:aa:c1:a4:f2:b9:87:dd:
98:3d:fa:26:c5:52:e2:68:17:80:1a:da:22:e1:de:
28:16:a0:36:00:52:29:9a:72:be:40:1b:d5:34:4b:
b6:9a:aa:77:cd:9e:39:9a:16:c4:75:b3:57:85:af:
ad:c6:48:a4:34:14:14:2a:0e:19:82:51:c1:12:cb:
0b:bc:1a:cd:da:09:ba:72:0b:08:f9:8a:2a:a5:27:
09:2f:dc:c4:e2:53:87:24:6e:18:ad:d5:c4:30:b3:
25:0b:35:cc:1a:27:d9:4f:bf:68:1b:08:8f:7e:b4:
c4:33:93:94:74:f3:01:cf:83:43:af:02:5d:5a:c0:
6d:66:fe:bf:29:46:7e:92:46:fa:ec:dc:62:fb:55:
fc:e3:16:f8:44:21:39:eb:49:32:2b:94:a8:00:0d:
04:58:e6:9e:35:e6:bf:9b:f6:fc:8c:85:b5:94:66:
cc:68:d6:e5:16:30:d3:af:04:0d:e6:13:ff:6c:53:
52:3b:93:d3:ad:7f:03:97:d9:99:cb:14:bc:67:d3:
a1:74:40:bc:10:47:60:59:56:45:9d:0d:bb:63:5f:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7C:F7:A3:BC:F4:37:D6:63:6A:29:E7:58:48:D1:81:10:85:23:42
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:df:a0:64:46:d3:f0:4f:7b:8b:2d:b3:51:6a:c1:fe:5f:0b:
4b:3c:8b:61:7c:30:6f:9a:14:78:29:d1:b2:91:16:46:7f:75:
9f:36:cc:31:57:c1:43:ce:18:f6:7c:42:f2:43:c2:39:c5:26:
d2:84:3a:09:99:9c:00:ea:6f:fd:04:4d:66:7a:22:50:4f:36:
7e:16:eb:d6:10:ac:68:bc:d6:59:45:b6:d6:a3:76:8d:c9:07:
43:ff:31:d5:ef:cd:63:4a:63:b4:c9:fc:07:e4:ba:c2:4f:c9:
7e:5a:c8:11:50:95:db:be:be:f7:0f:7b:48:d5:26:d0:cd:e5:
6f:04:34:9d:19:2e:02:69:21:8b:30:94:0d:a9:c8:3f:95:68:
05:36:bc:0c:5a:c9:26:1f:20:08:85:7f:7a:0b:ef:1a:97:0c:
fd:7d:41:05:a9:05:48:fb:13:3b:02:9c:49:fa:84:6a:58:f0:
e6:dd:17:c0:ee:1f:53:df:ff:d1:c2:34:fc:8c:4a:6b:9f:b6:
62:1c:a4:19:67:8e:49:e5:c9:1a:91:7d:30:3b:75:91:3a:84:
f4:cb:5e:5a:20:a5:be:0a:ea:08:d1:3e:c9:ef:16:7d:62:da:
85:7c:80:10:71:d8:41:07:4d:72:9e:2d:1f:97:50:d2:3d:77:
74:be:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:00 2025 by rpki-client