Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: 3tH1xAUlE7sTnrJqxDviPq1rpVop9UOip2yY+XGdR3A=
Subject key identifier: 1E:E5:73:E0:F2:60:2B:B4:74:78:43:B6:35:BE:2A:19:BC:71:9A:8A
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 0194BC04C091FF75D50A7BAAD15E05DFBDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: Jr7vu+6/WuWJJb4sU/+gjxLNlidkoIQZjwJeleHxiJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c0:91:ff:75:d5:0a:7b:aa:d1:5e:05:df:bd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=1ee573e0f2602bb4747843b635be2a19bc719a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:dd:18:24:5d:23:95:e8:b4:c1:f1:f0:df:
01:d9:81:c9:1d:cb:f0:b1:eb:df:ba:fc:00:d9:76:
82:6f:61:b4:6a:5a:33:a8:83:a2:d9:81:fd:07:08:
60:63:d3:e2:e4:01:68:c1:67:fa:5c:da:76:f6:b4:
f2:f4:55:d0:16:ea:0f:61:57:b1:78:3c:f8:18:1b:
53:a8:ea:23:c3:09:21:68:98:89:56:23:b0:d6:98:
bb:c2:3c:da:42:83:76:2f:23:a9:d7:d0:5f:94:78:
49:4c:b5:b9:a7:a4:d2:b7:3f:58:7c:f1:c9:ab:43:
ae:98:b0:0b:a1:0c:78:2a:19:af:d1:62:0e:af:b5:
21:57:81:10:e1:e9:1f:d8:9b:a6:0b:24:63:56:37:
48:e3:2e:c1:3b:c5:58:06:65:a6:86:a3:a3:7b:06:
2a:30:2b:0a:34:0e:a0:05:8e:8d:1c:2e:fd:39:f1:
22:91:71:bf:29:41:96:db:a7:47:b6:2b:ba:51:d7:
e8:f2:2c:e1:a5:ab:69:27:78:0d:85:01:77:36:39:
d1:0e:f4:11:ec:d6:68:8e:7a:a0:73:b1:ae:4f:3f:
64:b5:79:44:c3:54:03:a9:b2:aa:85:47:3b:0b:58:
e4:fd:f3:5e:1f:5d:fd:3d:eb:f4:f3:78:ab:f2:84:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:73:E0:F2:60:2B:B4:74:78:43:B6:35:BE:2A:19:BC:71:9A:8A
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2d:90:23:52:43:7e:8f:80:ea:6b:99:39:f1:ef:65:c0:a3:
14:4f:ed:51:cd:e6:29:a3:5c:82:c2:c9:57:d3:5e:20:dc:58:
05:84:05:f4:45:93:6f:67:02:ec:99:56:ed:69:de:fc:61:83:
58:7e:f6:e9:ba:9c:69:a9:e8:bb:a9:b8:05:d8:bb:09:25:27:
b6:4a:b7:be:04:8a:f8:16:3e:7a:b6:d1:82:7c:f2:b8:49:7d:
dd:39:48:b2:70:73:f3:2b:73:4f:87:a5:5e:af:da:3d:c5:1c:
36:5b:8d:18:45:0b:07:97:1c:e0:0f:56:f3:62:d6:f3:e5:72:
2b:e5:2f:8c:04:c0:38:d4:64:ca:fd:47:85:e9:77:55:06:fc:
22:6a:eb:d2:e8:95:60:b6:27:2b:24:52:c5:63:58:88:35:c6:
f9:21:62:17:b1:9e:bc:45:63:36:9f:69:02:08:d4:aa:da:a1:
49:60:d8:a4:4d:5f:19:7d:e6:33:42:08:03:37:0b:88:08:b1:
f4:fd:7b:7b:32:e9:76:26:e6:a4:ca:7a:53:b0:11:e2:03:4b:
a0:1a:20:a5:02:2a:4f:e1:45:48:b5:12:20:4f:ab:af:23:6d:
85:ff:4c:19:06:f1:c5:e8:ce:2f:65:bf:1f:5f:95:03:bc:5c:
d1:cd:a7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:48 2025 by rpki-client