Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
File: cHSIc9gyAihk-skAZdUdjie0Pl0.mft (raw, json)
Hash identifier: 1SkG/fCwlj7titV9cmkSnNq66ClRWLgG8qghXsup8tc=
Subject key identifier: BA:5B:CC:3F:BC:B2:DA:E6:A4:F5:65:4E:A9:2D:D2:61:B7:8C:69:65
Authority key identifier: 70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
Certificate issuer: /CN=70748873d832022864fac90065d51d8e27b43e5d
Certificate serial: 0194BD85582F5D4D6726180D7DCA8783A872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: cHSIc9gyAihk-skAZdUdjie0Pl0.crl (hash: hCh/1KdhF0r7vaF9JWumeh9v1Drm66w3jlU3Evs7uFk=)
2: luaqw9G-VvVeUOUerH8hYnJDYmk.roa (hash: cGv6tVYRF/4yXJn3TxE1a8gXuaOG4Us7R7XWbyYOP1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:2f:5d:4d:67:26:18:0d:7d:ca:87:83:a8:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70748873d832022864fac90065d51d8e27b43e5d
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=ba5bcc3fbcb2dae6a4f5654ea92dd261b78c6965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:de:c8:07:e0:92:08:28:d2:8b:e3:6c:ed:
04:17:01:bc:db:5e:cf:c9:ed:89:af:8a:f7:c1:28:
3b:5e:c3:4f:5f:4f:5d:e4:0b:6a:d4:5c:45:0d:ba:
a5:71:8d:91:b9:45:10:48:02:3b:10:76:96:d2:97:
e0:8f:bf:e1:a4:0b:bd:b5:03:9d:92:cb:d5:b1:ab:
e3:6f:d4:76:b0:c6:7a:0a:bc:fc:e1:3f:f2:5d:eb:
4d:8c:20:00:0f:e7:d8:44:86:f0:d8:d4:e0:72:a9:
06:00:c5:4b:3d:28:69:36:6e:15:8e:41:c7:dd:e4:
69:63:c7:ff:66:fc:db:87:88:27:c2:df:29:eb:97:
10:2c:e4:2d:50:e5:19:95:a2:3f:f2:95:c7:98:56:
05:81:0d:62:f7:27:c0:b0:4e:0a:b3:76:87:0b:29:
53:c7:0d:04:6b:48:49:cc:ae:6e:b4:40:7c:58:be:
48:0d:f0:52:23:ac:66:05:3b:26:e6:c3:d8:d2:b7:
51:7a:be:27:50:86:10:16:86:df:7c:1e:94:c1:17:
00:5d:f8:29:8d:c7:a9:30:e5:a6:83:a0:ac:64:63:
f8:5d:37:87:4a:34:52:66:8e:16:85:47:0e:9d:1f:
aa:f5:65:1d:66:11:ef:b9:f6:62:ca:ee:a2:ee:9c:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:CC:3F:BC:B2:DA:E6:A4:F5:65:4E:A9:2D:D2:61:B7:8C:69:65
X509v3 Authority Key Identifier:
keyid:70:74:88:73:D8:32:02:28:64:FA:C9:00:65:D5:1D:8E:27:B4:3E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHSIc9gyAihk-skAZdUdjie0Pl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa3350-aa2a-4477-9fcd-a60b2cc8d080/1/cHSIc9gyAihk-skAZdUdjie0Pl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:44:a4:4b:44:5d:8f:dc:0e:0c:42:5f:63:02:0a:6b:41:e2:
b4:70:d8:35:28:a0:ff:47:3e:d8:08:ef:20:ee:d7:62:b6:34:
6c:33:27:43:13:05:ab:f6:fb:cd:04:3e:18:11:55:50:48:40:
67:a7:2f:e5:65:13:ff:f9:6b:59:1a:c8:47:96:39:39:dc:f4:
ed:3a:de:d3:11:23:ad:10:75:9f:79:b3:e6:af:48:9a:e1:40:
99:f8:f7:92:ba:c9:b7:9c:13:cf:04:3b:62:43:a9:80:06:c8:
aa:18:a4:b7:75:46:cb:a9:cd:44:09:55:69:84:3b:2b:b9:bc:
25:17:a4:50:1e:75:31:13:c5:77:2f:34:a2:27:df:f3:fe:a3:
34:0f:3c:e2:ad:4d:ba:dd:1c:89:ca:dc:8f:a4:08:31:de:f7:
87:68:6c:01:e7:54:50:fb:ae:00:3f:57:82:ce:97:59:e3:d4:
58:00:24:d2:a4:6c:1a:a7:8d:b7:5b:c0:c0:b6:b9:1a:39:a3:
87:2b:b1:25:be:7b:19:8e:d3:a9:b8:40:29:34:a4:20:28:df:
0c:64:7b:e4:5c:65:77:f1:a4:78:39:ab:36:38:28:01:52:ec:
8b:6d:23:e4:fb:4c:25:60:89:0c:5c:6b:7d:e0:ef:c9:d6:89:
b4:26:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client