Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: 9ZuPW4ZL/COXAxvkr801zMISQGd8oim7rLCunmY5IeA=
Subject key identifier: D9:BE:53:FE:AE:94:B1:B7:8A:31:5D:A4:92:B1:C2:A4:F6:19:B6:A8
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 0194BD4E3F2F1843C7656AD264525DBA748A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 07CB
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
2: Wjj1kpiXhjG0hx-0COqhWnTNOPE.roa (hash: ey3L2YyJuty8vhFHZZL+WJhzpetLmiA7gejbhsfcpR8=)
3: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: JEAKDUTnB0zUcXcIeBvHQC7k/A8GIZOyCiNdM8zr8iM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3f:2f:18:43:c7:65:6a:d2:64:52:5d:ba:74:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=d9be53feae94b1b78a315da492b1c2a4f619b6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:2a:75:d9:70:7a:cb:03:bb:5b:80:f7:d5:
47:17:ca:bd:02:0b:6e:bd:37:53:ae:e5:c1:dc:e9:
24:18:b2:9d:d2:e0:0d:c1:f7:d0:83:6c:7d:36:3e:
45:46:cf:48:2d:c3:93:55:15:5c:bd:7a:80:9c:10:
1c:4d:f7:3c:4c:bc:e7:50:e8:e0:ae:f3:72:75:0e:
ed:ca:ec:1f:72:84:1c:4a:49:93:3b:68:23:29:54:
17:b7:1f:ef:9b:45:2b:6a:eb:f6:51:ed:53:69:df:
de:9b:fc:53:20:a7:c4:f6:34:30:6f:ad:fa:a2:66:
e4:55:26:6e:f7:85:b8:ff:0d:5c:34:1c:9f:05:96:
41:4b:55:e4:3d:e7:34:d7:7b:7c:8c:4b:7b:f7:8a:
db:b3:0c:6d:29:9b:f0:ca:84:67:d7:f4:49:19:c6:
9f:5c:77:5e:4c:4e:fe:70:7d:b0:f6:2f:13:b6:59:
0d:67:01:31:0a:54:07:3c:02:17:7c:63:7b:46:71:
72:25:c8:13:97:04:17:29:bd:99:f1:84:be:36:90:
3a:0e:ff:93:74:7e:70:1d:69:0d:0c:ad:79:1a:ea:
35:b5:1d:d7:5f:fd:d6:bd:fd:83:dc:85:92:d1:98:
5c:78:ee:0c:13:be:71:9b:11:2e:46:85:ba:0f:eb:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BE:53:FE:AE:94:B1:B7:8A:31:5D:A4:92:B1:C2:A4:F6:19:B6:A8
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:fb:11:4b:91:a2:2d:73:b3:3b:a0:74:66:61:f7:5a:43:
b2:26:91:24:b6:1a:5c:b4:42:00:da:2c:f4:20:e4:71:b0:9d:
e7:58:41:58:a9:72:89:dd:8b:77:8b:db:a9:30:89:60:13:58:
bc:52:42:28:2f:9d:8f:37:a8:63:6b:f8:36:6a:84:02:9d:56:
e9:65:6a:2f:7d:b0:ac:c4:79:d9:03:e2:73:78:8f:ad:80:59:
b3:34:c8:4d:2b:a4:e0:22:66:51:49:fc:5c:5b:90:6c:4d:84:
22:d2:83:39:c8:a4:dd:8c:d2:f2:43:e2:bb:dd:3a:51:e2:7b:
25:8c:3b:f8:f6:bf:8c:05:45:ff:3b:c7:47:da:d3:37:e0:44:
2a:f3:3f:45:d4:6b:c3:ac:52:ed:d5:31:6c:54:71:03:44:8e:
b6:82:2e:bd:4b:34:75:03:f4:98:5c:bd:61:38:94:28:28:01:
b5:be:f1:a7:6a:06:c1:79:36:37:c4:c6:88:55:06:16:7c:ad:
8d:84:7a:73:0c:11:d8:c1:52:57:34:88:09:43:00:b3:66:d5:
d1:99:44:c3:ce:df:43:11:6f:aa:e9:de:c9:7a:4b:56:b3:21:
71:01:6a:8b:3c:69:13:cb:e7:8a:95:a0:e1:e7:2a:52:57:1f:
24:4f:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:02 2025 by rpki-client