Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
File: cXHYtM9nc7WfBzLg6ejSWpt3P64.mft (raw, json)
Hash identifier: yhw+8wbE6iZQGoE02UxWxl17HboOX/kkWrTrELJUeAw=
Subject key identifier: CE:C8:18:2F:51:A2:EB:EE:B0:CC:AD:EB:17:AC:1F:5C:BF:B3:D4:D5
Authority key identifier: 71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
Certificate issuer: /CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Certificate serial: 0194BC3BC21E581A449CD117B6EF88429CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: _Z-p7KxUVg6ghEbeseFL-OOEudI.roa (hash: su5vjqQnoBgVAVEbXkHU+T0GhwXhzdquZDKzgBwrhQ4=)
2: cXHYtM9nc7WfBzLg6ejSWpt3P64.crl (hash: 0aBZNWxjNFJ9uRgfKZWu8aQfzYS4XAqbbS1k0nw56vo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c2:1e:58:1a:44:9c:d1:17:b6:ef:88:42:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7171d8b4cf6773b59f0732e0e9e8d25a9b773fae
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=cec8182f51a2ebeeb0ccadeb17ac1f5cbfb3d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:3d:4e:04:2e:ea:ec:c9:be:b7:16:01:7a:
0d:44:b3:03:6b:b4:76:9a:69:03:2a:4a:8d:31:8a:
95:b1:be:99:20:5a:08:7f:26:53:a3:b5:4f:e6:9b:
6d:60:b7:27:2e:5c:db:a2:82:d8:21:dc:1c:a5:87:
ae:5e:52:f5:6e:df:b5:28:29:5b:b6:03:7b:45:20:
c4:e8:e1:1e:7c:57:8b:1c:f3:65:b1:9f:f5:44:ef:
e8:05:a4:61:00:2b:89:a4:c7:c9:21:4b:a3:7f:c7:
59:1c:eb:d1:3b:b8:03:52:51:95:c6:b6:5c:ae:3a:
03:7e:e6:31:b2:e4:d6:ff:77:45:47:04:48:37:06:
fb:25:08:b9:bd:b9:ac:bc:86:3b:1a:d5:49:e7:50:
43:28:46:d2:d8:5c:35:d1:d3:e6:db:8d:47:5b:67:
77:7c:3b:57:52:19:eb:ed:61:7b:61:59:8a:ba:0f:
1f:38:82:45:0f:b4:aa:54:f7:74:be:ee:5f:de:9b:
76:df:71:f4:04:37:81:13:5d:93:dc:24:9e:a7:d4:
cb:21:6f:ec:e8:29:16:98:82:7a:2e:21:09:68:1c:
a5:82:a2:41:47:f2:53:db:d4:56:f7:ee:78:80:28:
87:d7:de:31:84:1b:b5:12:8f:f8:84:82:ce:c4:fa:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C8:18:2F:51:A2:EB:EE:B0:CC:AD:EB:17:AC:1F:5C:BF:B3:D4:D5
X509v3 Authority Key Identifier:
keyid:71:71:D8:B4:CF:67:73:B5:9F:07:32:E0:E9:E8:D2:5A:9B:77:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXHYtM9nc7WfBzLg6ejSWpt3P64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/9778b6-dc2b-4586-91de-53a07368b9ea/1/cXHYtM9nc7WfBzLg6ejSWpt3P64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:33:94:fb:39:1c:8d:75:3b:f8:d7:ab:98:22:e4:8f:6f:77:
f7:46:c7:5d:55:4f:e4:42:39:46:86:57:83:a1:2c:52:85:f3:
79:99:ae:32:21:9a:54:de:d2:9f:fa:2c:d6:a0:44:cc:14:41:
77:34:72:b6:d5:14:26:9e:6e:db:b0:c9:c9:96:77:32:c4:a3:
82:7e:01:3c:65:44:fe:ce:cc:66:1c:1a:03:38:8e:2d:c1:85:
05:2c:51:e8:64:95:0a:76:6c:92:64:a9:df:46:e9:ed:ed:68:
e2:fd:b1:84:0f:9a:dc:aa:59:19:fd:a5:fa:60:eb:35:00:ef:
3f:47:da:43:ba:a0:91:91:81:79:ab:59:51:24:ff:48:55:8e:
6d:4d:67:58:a8:cb:74:1f:53:14:86:1c:7e:e1:52:58:01:50:
ba:16:d1:46:8e:65:99:ea:b5:21:39:e4:33:8f:ae:87:91:13:
bd:27:54:a8:be:5e:17:5c:93:c2:cf:1b:1a:70:50:ab:7f:37:
cf:b5:b9:13:3a:89:c1:df:0c:ca:90:6a:38:40:6e:d6:d5:d0:
20:e6:9e:0f:90:ed:fb:07:a4:5c:2b:c3:5e:65:ab:07:2c:32:
73:1d:46:de:0d:c3:71:79:bb:63:d2:01:7f:f4:f3:2c:62:b5:
3f:61:20:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:18 2025 by rpki-client