Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
File: CLP7QBlnsG-EG8ah6dSSqadfkmg.mft (raw, json)
Hash identifier: LYIpzwdSEMXazI0viXZ6bCQ/i/XbbiXrrmqVNyPPOm4=
Subject key identifier: 4C:68:4B:A1:02:0E:35:6C:D9:11:85:4D:53:97:3F:25:A6:47:22:B4
Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Certificate serial: 0194BC72F8D33FDEA8E9BD58FAECAD0788CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
Manifest number: 01B8
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: CLP7QBlnsG-EG8ah6dSSqadfkmg.crl (hash: +xnYr1HQ1n6HGuyEYcV9j8zQy4Ym/1Z3X108u7/kt3A=)
2: eHRO21DmqwNpVgTB2vD5a-Ys0dI.roa (hash: aBKp2xE7MsTi71gMh8o9d5bU6XkJQ/dv6sIkU9dHe34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:d3:3f:de:a8:e9:bd:58:fa:ec:ad:07:88:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=4c684ba1020e356cd911854d53973f25a64722b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:4b:2f:de:b5:67:e8:60:1d:5a:ef:69:8d:
7d:c6:69:dd:3a:ee:cc:04:ff:c4:af:f1:89:20:a8:
b9:6a:f4:14:6e:5a:d3:3f:ce:51:61:c4:c1:5d:63:
f8:df:87:ed:12:4e:8d:6e:ee:d6:dc:81:f8:2d:08:
58:fd:cd:80:4c:64:53:12:9a:d6:87:df:3e:2f:5b:
e8:03:b8:60:28:eb:21:6b:6e:04:52:cb:80:b0:56:
77:c7:6f:65:ee:af:59:c1:19:14:c4:46:07:52:b5:
1f:f6:bb:94:40:f8:07:03:04:2b:f7:be:d0:90:af:
10:eb:a3:d3:4a:ea:dc:40:dd:26:e6:01:c1:35:c7:
ce:3b:b9:6f:44:5a:ee:70:d5:23:40:ab:cb:09:d9:
f5:3f:27:8b:26:af:17:d5:86:cf:1d:17:b9:1a:56:
0a:66:74:3f:43:69:f4:02:25:85:c0:80:1b:e2:b8:
e6:37:35:3a:d6:5c:2d:df:01:47:23:ad:1f:37:96:
42:56:24:00:40:c4:6c:59:4a:03:b9:2e:82:78:aa:
9a:17:dc:f0:56:a0:8c:79:bc:13:39:51:b7:5b:39:
a1:00:d8:32:f3:e8:af:6e:88:eb:be:92:9e:12:bd:
66:85:2f:86:2c:e9:41:7f:c3:c6:44:7c:dc:eb:66:
58:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:4B:A1:02:0E:35:6C:D9:11:85:4D:53:97:3F:25:A6:47:22:B4
X509v3 Authority Key Identifier:
keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0f:00:76:2f:91:a4:32:a2:f4:26:ad:b3:ab:e5:1b:d4:a4:
9b:2b:94:62:27:4b:d2:4d:69:74:27:c7:a7:c9:f4:ad:fd:12:
17:09:b3:f9:62:a9:58:bd:bf:c3:78:f3:ad:0e:9a:f0:7b:c6:
be:04:f4:f9:ef:19:28:6d:de:9c:78:b9:fa:0e:c4:90:77:c1:
4e:99:d5:bc:d3:d4:a9:b8:c2:6e:69:59:0c:5d:ae:84:60:5b:
b4:41:09:cb:ed:80:db:e1:45:d2:dd:1e:fa:2a:a9:b4:37:af:
cb:cc:25:9b:44:c1:4e:8a:7d:6e:63:d2:ff:8c:81:80:1a:10:
ec:c4:ed:fd:c8:f4:b0:2e:fd:2b:cf:f4:5c:7f:ee:59:d8:0c:
2c:e7:cf:ea:f9:07:e3:10:c1:5d:29:04:00:2b:5c:af:1b:63:
80:c4:9b:4e:2d:c5:0e:91:e8:0b:54:d0:2e:2e:ea:5d:66:a6:
0f:ee:0f:43:f8:b9:87:ec:92:54:61:95:59:38:a4:b2:c8:63:
68:70:ed:23:2f:5a:dc:33:df:87:29:62:28:75:91:bd:4a:64:
2c:a3:ae:83:07:f1:15:e6:68:2d:7e:53:89:3b:6a:8a:74:0b:
2a:29:12:10:34:7e:c9:5e:d9:ab:c4:9e:36:1a:7e:3c:55:dc:
8b:72:2c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:28 2025 by rpki-client