Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: 62+65SSmmsJWT08gHOr2DRg8kiDljwlssUpAWf09mpU=
Subject key identifier: 3F:A3:3C:D6:CF:73:F4:0A:BD:80:09:D6:76:79:3C:A5:F9:DD:CE:B1
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 0194BD4E4C32D0027F0B6E2F5CDECE2FB5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: 26W+kYM2MD8UDiWJvSaLRU5AoDA4PDk6k2Lzx43hYtc=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4c:32:d0:02:7f:0b:6e:2f:5c:de:ce:2f:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=3fa33cd6cf73f40abd8009d676793ca5f9ddceb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:88:6c:cb:05:dc:45:46:a5:60:86:a8:61:
a9:2f:d5:2b:77:bc:9d:b3:4d:2c:6f:15:46:86:d7:
34:51:d1:67:4c:df:d2:54:3f:6f:d8:f1:2f:f8:0a:
19:ac:6a:66:ff:45:d2:c7:f1:97:c6:9a:83:8e:35:
70:cf:31:ef:be:e8:6e:9d:3f:e1:4b:c9:8f:d7:3a:
06:a8:da:f0:66:8b:34:80:e3:f2:93:c3:23:4e:f9:
8c:43:f5:f7:67:ac:2a:fe:de:db:f4:14:7f:68:3e:
e5:0e:49:fe:d8:81:33:23:9b:40:dc:c6:ce:07:4d:
57:0f:b5:47:27:ec:84:5b:46:ab:58:98:0d:42:98:
4a:a7:92:12:5d:61:c3:69:67:aa:69:05:a7:4a:7c:
9f:25:72:2c:6d:83:dc:f1:49:22:7c:3c:f4:2f:1c:
9f:7b:68:54:27:94:fc:68:40:9f:1f:e4:a3:bc:37:
2d:75:92:69:db:42:79:81:25:e3:c4:a2:75:0b:cc:
8f:a9:d5:2b:05:4d:72:42:39:42:ae:82:0f:35:68:
fd:ad:ef:ae:b5:38:39:39:b3:75:e1:c2:69:33:e3:
da:07:a7:5d:73:1e:6b:fb:1e:1b:66:e8:ff:e9:ce:
be:25:fb:d3:c9:91:4e:40:49:8d:a0:93:56:b1:00:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:3C:D6:CF:73:F4:0A:BD:80:09:D6:76:79:3C:A5:F9:DD:CE:B1
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:00:68:20:f7:cb:61:95:fd:f8:15:69:03:a7:46:33:a9:8a:
e7:cc:cb:bb:8b:ca:43:33:d9:05:14:c2:c7:3d:7f:c2:51:84:
4d:74:67:11:48:e6:8e:7c:53:89:30:14:5d:cc:ba:e2:d6:63:
96:33:28:0d:0f:8d:da:06:db:3b:b5:85:bd:f7:03:00:72:02:
8b:56:9c:ef:ee:e6:d1:36:e5:2f:b1:fa:31:c9:e8:b5:fe:a5:
04:d7:63:26:65:6f:a3:0c:39:4a:f6:e7:ff:d0:83:6f:e1:11:
25:5d:52:ad:92:cc:e3:5a:53:f7:7d:ed:dd:06:a1:92:0f:b1:
50:2c:3f:4b:d2:7e:b4:e6:d1:f5:86:d1:04:de:97:33:c1:0e:
25:a0:73:a8:68:60:f6:7e:9a:e2:a0:03:ff:b7:1a:3d:d2:34:
de:b1:d9:37:58:0d:07:00:5f:7d:30:8a:d8:ce:e6:43:03:53:
c0:5a:f3:26:ea:81:25:29:26:4e:98:68:4e:df:9b:97:56:d5:
20:68:57:d5:24:ef:f8:d4:60:66:d3:5d:56:4f:bb:11:c9:ce:
c6:58:28:89:44:7f:d5:8c:5a:c5:27:02:eb:fa:86:3f:95:17:
b5:dd:ee:64:31:96:0a:19:75:88:f4:6d:a5:55:3a:dc:63:17:
ae:31:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:25 2025 by rpki-client