Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
File: cBKlLoiwGDLPDuN8zath3s59EsY.mft (raw, json)
Hash identifier: DBp7oKpIk40him48rPaYiPArNB9Mv+zeHC8PfMhJOy0=
Subject key identifier: 57:4A:66:DD:99:43:55:20:75:33:88:16:B8:A4:87:FD:8E:31:F9:CF
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 0194BC72879EA45D0D113FF53522AB074E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
Manifest number: 08AB
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: cBKlLoiwGDLPDuN8zath3s59EsY.crl (hash: GSUSdMdqSCURb9oiVeF0yFZyIUR4uDYCEEUhtmaez3A=)
2: muE7z7bw5WUF44PtXee-WtjAnUQ.roa (hash: eOTAuS8cb5e4NeqERvCCoU2l75Ey2kGH2CxTpug1Tes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:87:9e:a4:5d:0d:11:3f:f5:35:22:ab:07:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=574a66dd9943552075338816b8a487fd8e31f9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3c:56:f0:c6:66:77:7b:f6:8f:c6:c5:a7:04:
c0:b7:7c:5a:5a:69:0c:3d:fe:a0:7d:ec:d5:9c:e5:
cd:06:8f:67:7e:1a:9b:a5:28:5f:bf:76:cb:72:ae:
7a:35:14:61:6d:a2:00:af:86:9a:65:d5:f7:89:d7:
5f:d2:67:ea:9d:c9:df:f4:bc:f4:1b:14:10:cf:ac:
fb:d1:31:1f:fa:b0:77:ed:25:27:7b:83:c6:8d:94:
2a:e4:77:af:e2:9b:e7:d1:41:d8:e8:51:f2:5d:d9:
a6:cc:2b:7d:2c:89:69:80:18:1a:c0:55:49:a0:ee:
e9:14:49:7e:01:1f:c4:3c:cb:9d:04:de:f1:fc:6a:
c5:1c:e2:5c:a7:4e:9c:19:2f:8b:ea:92:b5:d3:c1:
a5:68:11:d9:03:45:09:18:5c:c8:f0:a4:41:7d:62:
d7:5b:63:fb:d4:22:5f:35:e3:fa:c8:33:aa:e2:b1:
df:cc:e9:c6:0a:2a:7d:ad:7a:c6:d0:7a:a2:ca:9c:
5b:25:b8:66:d9:87:8f:81:3e:8a:05:68:88:a5:d7:
84:da:be:1c:13:c3:6b:77:cc:02:ef:b0:eb:04:9f:
29:5a:ed:1f:ef:f4:bf:ed:14:a9:c3:c8:f0:d8:51:
fd:a2:20:2f:33:a7:a2:4e:8d:45:88:51:6d:41:77:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4A:66:DD:99:43:55:20:75:33:88:16:B8:A4:87:FD:8E:31:F9:CF
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e7:e2:2d:6b:f9:80:9d:38:22:7b:1e:c1:75:b1:49:24:a8:
4e:a4:21:85:39:fc:d6:22:0a:cb:d0:b4:09:dc:c7:10:d6:b2:
00:2c:6e:dc:f6:77:b4:8d:92:6e:9e:7a:81:1d:cc:04:89:f2:
c7:6e:e0:e4:21:b8:10:22:ea:e3:9f:61:7c:7f:fd:7f:c0:df:
c4:0a:58:b3:87:5a:0c:af:09:5a:9f:11:a2:ad:00:8d:54:ed:
0d:71:4f:74:ff:c6:40:35:62:1f:cf:7d:bd:ac:eb:22:a3:bb:
ac:76:86:ae:6c:84:e2:45:c8:74:f4:f9:c0:4d:21:a9:e6:a1:
a2:35:55:fc:02:65:7c:15:ee:df:f2:e0:6d:03:6f:ea:45:4e:
5d:d3:0e:f4:0a:de:d0:5a:b0:3f:6a:33:60:6b:ff:a5:22:39:
ba:66:01:fb:56:58:b8:e8:f1:0b:ff:86:58:8f:f7:f9:31:c3:
68:e7:a5:1d:06:b6:51:17:1a:10:3e:83:c0:26:e8:c1:49:7a:
2d:c3:ce:76:60:83:d7:da:9a:12:a1:cd:5c:50:d4:cb:23:64:
89:8e:da:87:e0:23:e4:ce:a4:7a:8b:61:59:7a:d8:24:21:29:
b2:e3:3a:90:95:ab:a8:bf:8d:a6:5c:df:ce:f0:d8:2e:e3:c0:
69:22:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:13 2025 by rpki-client