Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: Hbg/u6xEC6MJzRDeW5OaTzHiQNMJ9KlfGa5KfvdDz/4=
Subject key identifier: 53:EC:6B:71:4B:C8:6A:63:AA:83:D4:1C:35:5B:5D:C1:80:0D:C8:44
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 0194BC04BEB0BC8DAA30E0790F313EB36910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: YmAUFfLrFcaqVvvEJsMc8WsBmr2q5qpS6G84uZk6DX0=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:b0:bc:8d:aa:30:e0:79:0f:31:3e:b3:69:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=53ec6b714bc86a63aa83d41c355b5dc1800dc844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:13:e0:ba:b5:24:cf:c7:ef:cb:62:ad:7a:
47:b8:ac:2b:74:96:2c:4a:b9:4d:6e:12:7a:6e:44:
d8:9c:dd:2d:ad:b0:a8:b4:fa:b9:74:5e:92:ad:f9:
11:32:04:5f:16:07:e5:4d:db:3f:f0:2a:fb:a6:86:
ba:77:e4:6e:ce:2a:7c:4f:20:1d:f3:27:1d:20:0b:
1a:44:c7:06:6a:28:a0:f0:5d:db:13:88:82:ca:ac:
74:f5:08:a5:53:59:f1:cc:fa:5a:cd:21:2b:e5:c8:
4e:dc:ef:8f:69:11:03:73:a8:c6:7c:f5:1a:2e:89:
a7:ef:71:c3:a1:51:1d:e8:99:38:e0:7b:bf:fd:22:
83:72:86:22:5c:39:c0:9a:eb:75:7d:6f:8e:c8:85:
cc:d2:50:e3:3c:3e:54:1f:cf:74:8d:60:04:3b:75:
d1:7a:82:c5:1f:90:47:ae:f6:19:ba:4e:ea:b2:df:
cd:00:d6:2b:90:8c:46:21:68:e3:06:a0:0f:29:ef:
29:e0:ed:2e:3a:a1:6b:14:0a:e9:7d:47:fc:de:b5:
cb:f2:46:bd:5d:2b:52:5d:17:59:4c:3c:80:f7:ce:
7e:2c:95:45:8f:80:22:b8:37:93:26:d7:db:15:cd:
2a:d5:01:09:53:16:54:00:33:77:37:0a:a8:ff:24:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EC:6B:71:4B:C8:6A:63:AA:83:D4:1C:35:5B:5D:C1:80:0D:C8:44
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:fd:b3:c6:36:59:06:64:21:68:fe:a9:6c:57:a6:20:37:
21:0a:06:5c:c8:7b:bf:27:f2:91:aa:4c:38:e0:16:86:d2:1e:
e3:61:e6:b5:66:2b:f3:26:93:63:bd:39:34:7d:a7:03:dc:f0:
26:e5:7e:ba:14:e8:1d:13:b7:ba:8f:33:74:2a:b8:65:70:0e:
89:c0:2e:17:f0:77:db:67:95:c3:06:d9:c2:b0:50:d5:69:64:
0d:ae:0f:d1:07:1c:7c:c3:e0:60:04:df:3b:9e:cb:00:da:ba:
d3:9c:bd:95:ee:d8:6f:81:98:e9:45:ca:4b:f9:a0:1e:e8:ba:
c6:7a:42:f1:93:55:e1:de:b8:a2:ff:59:e8:07:98:78:c7:87:
4a:14:80:2c:a7:fa:86:e9:5a:dd:af:a5:4b:a7:62:96:b4:be:
e8:17:92:bc:ff:68:29:1e:59:a4:5c:33:13:2a:44:7d:5f:2a:
26:4a:5d:5c:ca:56:5f:fb:3b:7d:4d:e2:19:d3:08:91:b1:2f:
53:68:e7:7f:df:63:5d:0d:b5:e1:d0:1b:b2:32:d6:18:98:15:
9c:80:32:58:a1:a4:b0:e4:93:44:d0:da:ab:71:94:c1:c0:0a:
d4:ce:5d:ba:67:4d:4a:47:b4:68:a0:ae:8f:96:eb:24:57:f9:
97:f7:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:53 2025 by rpki-client