Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: O9R9NRpoN4wPJ7P3eTLrlmzOR7o2yaxxW/3Df7GWCbE=
Subject key identifier: 58:3D:42:EB:F2:9A:6A:33:5C:11:0A:66:AF:13:7C:18:85:2A:D6:03
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 0194BCAA261F00D5838C46640F728FBAA502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0BDD
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: p4TKhKyBbQ+2JmqTAyYeIEia7e9/FUGJ4QahVGjcDXY=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:1f:00:d5:83:8c:46:64:0f:72:8f:ba:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=583d42ebf29a6a335c110a66af137c18852ad603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:00:98:6e:c4:6d:ce:f8:87:c1:d4:8f:a7:
40:42:62:aa:ec:4b:82:f6:6f:75:39:d2:37:b1:df:
18:1d:47:ca:b0:cf:1e:04:b3:e9:90:36:2a:cc:d4:
49:e7:04:6b:c8:20:77:1e:b6:76:bb:60:0d:d3:bf:
ad:31:f2:67:7a:3e:5d:b8:10:9f:80:c8:56:ac:04:
a6:24:f2:14:db:39:34:5a:38:c1:87:df:24:36:70:
da:e9:d4:8a:7a:48:98:6e:3e:dd:cf:af:b2:b7:2d:
e2:62:31:aa:48:6e:1b:47:31:91:61:bf:c1:71:b4:
14:95:fe:c4:4b:69:a9:ce:9a:8d:42:75:cd:0e:05:
a6:08:85:7b:c3:64:bb:f8:0f:68:f2:1f:88:51:09:
34:13:bb:1e:b1:46:3e:a1:2d:bc:e6:c9:17:30:2f:
8a:25:d1:09:e6:52:01:9d:5e:f8:e8:a5:6c:2a:ff:
ba:74:88:63:dc:69:70:b9:ee:76:74:e4:73:07:89:
73:85:55:b8:ee:d2:ce:5e:c8:f4:02:a1:87:27:f7:
02:86:7a:cd:41:62:be:6d:b4:52:39:8b:5e:3e:8e:
fa:57:bd:64:e9:e6:5b:ad:b1:34:15:73:94:e4:65:
f5:e2:72:f5:3c:68:19:a0:73:a2:2e:55:e6:3c:dc:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3D:42:EB:F2:9A:6A:33:5C:11:0A:66:AF:13:7C:18:85:2A:D6:03
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:95:8d:d2:c1:72:d4:ea:a4:41:af:e2:84:af:af:96:fb:
7b:4a:99:c5:ed:30:88:32:58:42:e2:1c:05:db:c7:0d:27:68:
c7:da:17:83:cc:16:b5:dc:33:ed:4b:f4:33:f4:3b:08:6b:ef:
cb:cc:94:de:c0:0a:f5:61:f9:fd:3f:91:d1:fc:05:72:81:80:
25:54:a5:ac:b7:83:d1:2a:87:fd:29:de:6b:d0:30:4b:44:95:
6c:36:74:ff:3a:20:ed:41:db:3a:73:08:1d:2f:f6:3d:8c:1f:
87:aa:6b:94:93:ea:29:25:81:fa:db:74:1f:40:c1:df:6a:1e:
db:c3:51:4b:2c:cd:ba:e2:2e:d4:49:60:6d:4c:e9:ab:9b:5a:
47:14:68:17:23:1c:2a:02:1e:2c:dc:c0:ae:01:5b:56:1f:e4:
a9:90:bb:0c:83:4e:03:1d:b1:56:ff:52:47:bd:09:93:5b:24:
9c:2d:93:e2:1c:b9:a2:75:3c:30:5a:d5:b4:56:a3:ea:28:6a:
19:ee:a8:f6:24:88:5d:77:56:b4:ff:bb:eb:6f:43:fe:bf:b2:
48:c5:ea:f4:1c:79:e0:8c:4b:27:b9:d0:46:c8:6e:28:c7:40:
3d:48:7f:cd:0c:df:02:d7:86:48:a7:95:07:52:c8:45:24:9f:
90:9e:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:14:10 2025 by rpki-client