Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: S5XiYPRTZMTz8mQLzoZYgCGbXWrfwGr3Z3PLwtzHSF4=
Subject key identifier: 4C:4E:38:B4:83:AE:EB:10:D4:8C:02:11:DD:0B:99:BC:B0:9D:07:33
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 0194BC73282982865799DAD10FFCA1A9C7FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 01A0
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: 5_sbpD9bl2e-9ZUzwa0dx1fekbE.roa (hash: zgbevUmIAJrzV5Ei+G6fiiOaUat2c7OgWp0BEvn+Gtk=)
2: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: b34Fj2je15CDTLuNU+yt4aXlagyCa63fNAvMjzK+IXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:28:29:82:86:57:99:da:d1:0f:fc:a1:a9:c7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=4c4e38b483aeeb10d48c0211dd0b99bcb09d0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:7d:22:6b:ae:ca:e5:7d:42:a1:3b:66:1d:
27:6a:2e:74:c6:79:0b:63:24:da:cc:8d:b9:a0:ca:
44:3f:cc:74:e5:89:1f:9c:ab:44:eb:e7:ba:c4:6d:
b5:d9:bc:f2:12:23:5e:7d:72:01:0d:c4:05:88:10:
6b:ab:2c:d7:71:82:0a:b1:74:90:63:f7:68:9b:ba:
7c:16:4b:e3:5b:62:6d:35:ec:41:54:ad:1e:cb:5e:
ee:4c:18:a5:d9:b8:45:34:f3:a1:fa:33:86:0a:d2:
cb:b9:d8:61:2c:a6:3a:ab:9b:80:07:f0:a2:b1:42:
27:b0:18:e1:40:7b:8a:f4:7e:f6:cc:49:df:a1:07:
8a:49:1e:c7:97:67:0a:8d:c4:12:b5:09:a7:db:60:
ae:61:f3:01:ac:2f:47:00:dd:0c:54:fe:96:11:5f:
b6:24:e0:bf:0e:0b:8e:4c:a2:5d:9c:bb:9d:d4:1b:
e9:aa:94:f1:1d:d5:38:d8:42:cd:3c:9a:72:88:20:
2b:9f:12:fa:9b:8b:17:6f:16:09:71:b8:7a:14:bd:
38:5a:da:d8:d9:97:98:e5:2c:14:19:13:9f:5d:53:
c2:78:a7:b3:c6:ef:78:e9:07:ed:2c:1a:35:b7:b5:
f1:8f:3a:80:8e:7e:fc:49:20:da:70:86:04:77:bc:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:38:B4:83:AE:EB:10:D4:8C:02:11:DD:0B:99:BC:B0:9D:07:33
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8c:01:2b:db:57:b7:27:a4:8d:45:7e:06:09:f9:29:69:51:
b2:f1:bf:c5:af:e4:a7:b0:ec:74:6d:03:e0:c4:83:47:f2:90:
f2:74:c1:96:a6:2a:f1:09:d2:aa:78:6b:2d:50:dc:e5:13:e5:
b4:7d:c2:35:38:ab:44:83:6e:1b:95:41:b7:2b:12:51:5c:27:
0c:e5:35:af:74:08:42:b2:44:16:47:81:17:d9:12:da:a6:d4:
36:e8:87:7a:c5:14:0b:90:20:dc:47:4e:58:15:7f:f4:09:50:
55:06:cb:65:9f:ac:f9:3f:e0:2e:04:f0:89:52:c7:48:da:48:
a2:95:84:27:05:6b:7b:45:70:d0:e5:1a:9f:e0:30:e4:39:25:
0d:5d:b6:48:c2:c9:c5:9f:6a:90:43:a9:5e:1c:78:5e:3f:fc:
1d:9d:5f:a1:92:54:b8:7b:cc:99:f5:43:38:97:9c:d9:af:f7:
23:b7:7e:e0:74:03:7d:6d:8b:c2:d6:52:e7:f0:0d:c1:cf:9f:
41:b1:41:bb:ab:bb:85:19:5e:d2:a3:e6:63:7d:04:6d:46:00:
8a:d1:a0:88:34:63:5b:1a:4f:92:ea:78:17:f7:b4:4d:3f:86:
56:5b:a8:c6:42:d1:11:7a:45:30:50:45:43:06:e3:15:09:d3:
d8:b7:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:22 2025 by rpki-client