Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: ESYaRR5g6RcYCE4Al4+kbfaS4Q4dlSnFRCmoDDHPbhQ=
Subject key identifier: FF:D0:42:5D:D8:F0:E4:C9:BC:00:C9:BC:F3:BA:2B:E0:9F:7D:BB:19
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 0194BBCE32458A5A2AA1CC633104FF29E713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: V1giX2gWfIX7jWaclALHgZ9C5ZWDOg1oc4pCmxWW0CU=)
2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:45:8a:5a:2a:a1:cc:63:31:04:ff:29:e7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=ffd0425dd8f0e4c9bc00c9bcf3ba2be09f7dbb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:7b:ca:3c:03:f7:68:b2:0e:88:9d:f8:03:
66:e7:3c:cd:23:43:12:63:b6:42:8d:86:a3:98:61:
f5:3b:8c:92:f7:c3:f0:cf:4b:3c:a4:ee:a6:3f:26:
b7:e8:a0:7d:94:09:28:6c:54:93:61:e0:bd:c2:22:
47:7b:2d:04:38:d4:34:f7:86:33:70:3a:04:92:9a:
fd:54:f0:92:d8:d6:ae:b1:e9:1a:c4:6c:20:f2:94:
5e:e0:6f:f2:58:4f:a3:4b:ec:53:c5:4b:23:b9:20:
a4:57:e8:3a:2b:84:00:bd:13:36:f3:22:52:37:1b:
87:99:0e:3b:3f:2c:b1:43:55:9b:d5:89:c3:ee:50:
ee:d7:62:91:8d:7f:fc:65:57:bc:fe:8b:0c:fe:bd:
7a:04:8e:3b:d0:be:19:ad:3a:59:dc:5f:42:c5:08:
0d:75:b3:85:28:b9:e4:13:21:1d:09:b4:fa:1b:fa:
ce:93:83:5e:6a:65:fc:40:97:99:69:a9:eb:19:a7:
af:1e:05:85:cd:a5:69:de:38:d6:1f:37:91:12:53:
7a:5d:4e:77:44:9b:1c:11:ea:2c:74:c7:41:3c:90:
d4:cf:30:1e:8e:4a:8f:28:1d:37:4c:96:87:ee:1f:
c1:cf:81:54:35:86:a3:c1:f6:1c:20:0e:25:52:cf:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:42:5D:D8:F0:E4:C9:BC:00:C9:BC:F3:BA:2B:E0:9F:7D:BB:19
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:80:01:1e:39:25:08:d5:8d:b0:b3:29:e7:8e:7b:e4:d3:
7b:93:78:50:8e:c4:5d:6b:ea:6f:6e:7e:3d:8c:0b:ee:03:b8:
47:91:f4:f6:c8:2e:8c:ca:d3:96:44:e5:ff:97:a2:d3:c1:e3:
84:20:99:bb:72:a3:a6:ed:47:8f:95:c1:84:74:f1:ec:d9:84:
9e:59:7d:d6:2a:88:c4:b3:4e:c6:f7:6b:54:41:82:2c:ea:67:
82:17:09:a4:5c:e9:cd:d4:af:e1:2a:c8:15:96:91:37:d8:83:
c7:df:14:03:27:12:2a:0a:48:61:b8:0c:bd:d7:9e:0c:46:25:
3f:1d:43:73:1b:e2:16:40:b6:51:89:3d:93:71:aa:04:92:e8:
5a:4b:ec:b9:c4:c7:75:ce:a5:0e:b8:50:a0:fc:7d:07:a6:2d:
09:79:8b:cc:52:f9:f2:4c:37:83:48:78:9d:33:d3:76:49:28:
4d:5d:3e:b3:ab:fb:e5:d8:a4:a9:9e:3e:f6:6b:ed:a7:52:73:
97:32:d3:d9:65:ba:ab:82:8e:bb:ab:15:5a:70:ab:52:64:28:
61:c9:6d:e7:3d:10:25:4c:21:3d:68:b9:36:1f:16:2e:f1:7f:
66:bd:ff:fc:0a:cd:09:15:0b:17:82:21:e7:73:38:85:80:67:
9d:73:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:54 2025 by rpki-client