Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: uZpkW5cvz+VX2S2WpmmYpNsLMP3t2UASffS64eq8MO0=
Subject key identifier: 55:3E:DE:7D:CF:4D:A7:6E:14:FC:6A:51:B3:CF:97:F2:9F:C9:ED:83
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 0194BD4EA22ADE6924BE102E1FECC5051D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: BnZ18m27JG41iStc-0bf7RUhMqc.roa (hash: 506prusX3qMZHHvl16GjdziNik+Zaiptx5uE6D2elAc=)
2: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: ILqGzehsBpbL9VSbLYeKDJVH57ynKTYv2kQD/OYNXwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a2:2a:de:69:24:be:10:2e:1f:ec:c5:05:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=553ede7dcf4da76e14fc6a51b3cf97f29fc9ed83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:d6:35:c4:7e:01:bc:1d:09:80:46:bf:5e:
4f:7d:e4:60:bb:07:37:b7:b2:c2:72:9a:55:97:05:
27:61:66:97:1c:da:72:6b:49:23:3e:82:59:37:04:
4e:83:bb:e1:77:3b:5b:d8:c0:51:60:ee:96:95:2c:
30:9b:23:5e:1f:ef:db:19:6b:60:7f:29:c8:dc:1d:
1d:04:9e:71:ed:8c:fc:83:b6:d2:8a:68:39:18:85:
c1:be:4a:17:45:df:ee:dc:d5:fe:4a:55:f1:4d:33:
44:e1:a3:2d:8a:5e:8d:10:1e:af:c6:73:c3:bd:36:
b3:e0:36:16:78:d9:46:1d:5f:05:33:49:ca:15:93:
ce:9f:e8:e0:53:d3:bd:29:95:16:52:70:be:a2:5d:
98:84:fd:7f:03:84:d4:1c:3b:70:09:82:d9:f0:83:
e0:36:14:61:1a:50:dd:cf:63:37:f0:cc:1c:79:54:
cc:51:44:df:14:fb:2c:86:32:ec:07:c8:29:25:d1:
ac:da:62:56:52:72:e3:04:ee:7c:66:30:0f:6a:d5:
2c:c3:f2:ca:4b:df:75:f0:c6:ff:48:54:9a:26:81:
4d:31:bd:e5:47:02:5e:5e:27:43:07:47:3d:b0:78:
f5:8a:c8:19:4c:52:43:0b:63:2a:9c:c7:a6:33:4d:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3E:DE:7D:CF:4D:A7:6E:14:FC:6A:51:B3:CF:97:F2:9F:C9:ED:83
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c8:12:c9:52:f0:5a:65:b3:05:45:23:d2:07:72:ab:e3:5c:
d8:8e:ee:71:14:25:92:24:4e:f8:9b:62:ad:a6:76:17:6f:f2:
fa:3c:a2:6e:52:5a:17:88:db:6b:10:84:8b:1a:87:ff:07:cc:
a7:3e:5f:fb:7f:d5:99:0a:11:78:3a:52:b2:4f:6d:6e:df:dc:
1b:b2:01:62:a0:a5:a2:9c:21:83:95:f6:b6:a7:a9:c2:75:61:
e6:0d:9b:4a:72:07:14:bb:3b:2a:b7:1c:23:04:7a:f1:e1:3c:
d8:52:5b:5f:da:18:15:c4:b5:45:2f:63:fd:25:04:14:d4:94:
f4:35:97:33:e0:bd:df:7b:1b:8c:81:5d:90:6c:a7:aa:c4:bb:
c9:99:86:6a:d8:c9:90:90:e8:96:d7:9e:d3:5a:4e:cc:42:76:
6f:92:f3:9d:5d:14:7e:c2:06:89:83:3f:72:b0:99:0d:3c:19:
0d:4f:9f:48:f3:9d:68:2f:70:5f:b2:dd:ff:0b:96:0a:92:14:
6f:2a:35:c3:07:8a:a0:bc:54:b9:a2:eb:7c:70:df:90:b1:27:
9d:b3:a1:51:d5:75:4d:b1:3a:d2:68:03:e3:5c:d0:70:2a:d5:
fb:7f:21:71:52:4d:b8:57:33:b7:44:36:47:28:7d:14:e2:1e:
54:e5:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:01:31 2025 by rpki-client