Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: R27Gf1z0+5/SuwCovfbvj/z2dq03wGZ2ZyudN4Ao/MI=
Subject key identifier: 5A:21:C5:74:AF:C4:23:F8:A0:61:82:9F:8B:4A:22:F7:76:29:8F:B7
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 0194BD1770FAAD25181B9575F40A569788C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: AeRqa3lHrTdVmpPK6cepfrD+H66SQDvW378z4wqNMo8=)
2: inuScwE1S9lEULUDFOPt0YYBMRU.roa (hash: hvD+jjYBAY5jZaJA8u8QgEl8M7kubkCEj9ntL0iNAX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:70:fa:ad:25:18:1b:95:75:f4:0a:56:97:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=5a21c574afc423f8a061829f8b4a22f776298fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:31:4d:3e:fc:26:97:83:47:03:c0:bf:7e:
91:6c:60:e9:e3:40:a2:e3:a0:9d:0e:97:cf:95:e8:
6b:f5:3d:23:13:b6:82:b6:ee:6c:3e:91:e3:d9:c8:
0f:23:7f:04:1e:37:49:0f:82:12:8f:dc:6b:dd:4b:
94:33:80:8c:5d:32:e6:a4:55:78:3b:99:60:0f:1f:
03:88:10:c7:bb:43:80:23:39:4e:11:4b:87:41:50:
9f:4e:1c:58:c0:5e:f7:7e:1a:22:90:75:e6:f0:f5:
17:38:06:90:78:e3:dd:f3:cd:13:a1:86:eb:0b:16:
69:57:b6:35:2c:5d:de:ec:ae:69:da:0b:5a:6c:ff:
59:a1:b6:80:a2:ed:98:23:54:47:ff:c1:98:7d:75:
db:8d:e9:62:c7:a9:60:e7:6f:11:57:f9:a2:40:28:
d8:52:40:cf:11:95:75:24:01:0e:a2:2a:70:23:ad:
69:a9:48:0b:c8:c4:1a:7c:65:75:91:28:e2:bd:2a:
fd:49:54:3b:e4:62:ca:17:17:b2:6a:e6:c9:7a:ce:
f9:f2:03:25:ae:3d:de:bd:29:db:81:a8:5a:ec:e8:
94:03:4c:a1:b1:6d:2e:59:08:fa:41:75:14:e5:f0:
0f:1b:0e:23:58:b8:03:0e:df:33:6c:b9:fb:60:1b:
8e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:C5:74:AF:C4:23:F8:A0:61:82:9F:8B:4A:22:F7:76:29:8F:B7
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:34:68:3c:ca:05:ae:66:5c:21:39:83:70:21:a3:6c:31:a4:
92:40:53:e4:a2:2c:cf:54:d7:2d:e6:f5:ae:5d:da:e6:08:98:
32:8e:82:ee:88:7f:8a:87:fb:cf:16:09:bc:6e:8f:8f:59:4c:
9c:1a:13:f2:f6:11:07:e6:af:aa:0e:7d:d1:91:d0:f8:00:7c:
27:11:68:7c:0f:70:e7:7d:53:fb:a7:46:e9:c1:19:84:53:61:
f7:d0:3b:a9:c1:0d:f9:41:d5:7d:cd:e9:19:3e:12:3d:56:78:
b0:b9:49:39:d9:56:ab:4e:93:15:ed:eb:fd:7c:e6:75:df:cd:
bd:18:f8:d4:c4:92:1b:94:66:01:ba:73:5e:1f:a9:e6:7b:ae:
7b:45:ef:a2:3c:70:cb:20:21:88:a2:24:b1:1b:4a:b7:ba:cc:
18:7f:34:2c:7f:08:94:b5:94:7f:55:ea:c4:39:af:b3:71:2c:
3a:c4:04:37:59:28:e9:eb:45:09:bb:6a:88:64:f8:61:57:a2:
98:1e:04:69:fb:f1:8d:fe:47:29:a1:22:a1:18:92:09:23:12:
50:fb:a5:12:52:d6:73:a4:95:38:f1:11:24:5a:90:ec:43:af:
63:5b:c0:49:de:98:9b:d9:5c:80:58:05:a3:e3:ec:e3:43:ce:
34:70:d1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:37 2025 by rpki-client