Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
File: cHl9sHv21Fl6wtyL40-JKYAI8s0.mft (raw, json)
Hash identifier: LRxoegTKo98zZ9cyu3D8bVplElajtc/ZmJgh9dwzxQY=
Subject key identifier: 0C:05:5E:AA:FF:36:9B:83:CA:69:4E:76:39:50:59:3E:D6:E5:5B:F5
Authority key identifier: 70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
Certificate issuer: /CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Certificate serial: 0194BC72DEC17338150EF85BCD5E6FB4C136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 7_33wgCbi5Y-BqE-WsoqVlLEolk.roa (hash: yRQ5YaJv9QRGwiGdb4XkbJa+PHmS1LktsRDaDtP0+ks=)
2: cHl9sHv21Fl6wtyL40-JKYAI8s0.crl (hash: 8nciQCjqQEi7GzSdTMiM+nFw8wPkaEygdwh9MP6+Z4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:de:c1:73:38:15:0e:f8:5b:cd:5e:6f:b4:c1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70797db07bf6d4597ac2dc8be34f89298008f2cd
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=0c055eaaff369b83ca694e763950593ed6e55bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:f2:5e:5e:1f:7f:87:73:3e:04:30:ec:89:
20:7f:a5:0b:e8:1a:0d:88:f7:d2:c2:ab:1e:cc:09:
48:af:59:55:6e:62:a3:a2:24:71:cb:8c:69:ed:46:
6e:a3:38:39:e1:88:2a:95:33:04:bf:ba:ac:03:65:
3b:c1:06:3a:19:89:79:a2:e4:aa:db:87:1e:c4:a0:
c7:4a:78:89:29:56:0f:f4:92:72:d8:5a:c9:ab:73:
c8:e3:6f:19:58:fc:81:57:dd:c3:8b:a9:29:f4:e1:
8a:99:ab:f0:4d:12:ba:12:01:7f:2f:09:99:13:c3:
0e:20:1e:87:69:94:53:62:b0:97:d3:cd:e5:b3:72:
20:dd:52:d6:95:4e:2b:ee:4e:ee:b1:c0:ab:58:ea:
83:74:53:93:d9:7c:90:33:29:d5:5f:1c:c2:13:68:
68:7f:ec:03:68:2d:a3:b8:e8:e8:49:b9:b7:f6:2b:
47:73:03:78:30:ff:30:4c:76:0a:8e:1f:68:ae:7d:
16:69:e6:7b:55:6e:86:89:e5:ce:fd:8f:1e:ef:f4:
a3:00:8d:f1:b7:61:d8:f2:38:ab:f1:1f:fe:b5:bb:
24:43:42:a0:ad:24:d6:08:f4:f0:8d:69:d4:68:43:
53:16:aa:dc:d9:bb:e8:f3:a0:d0:93:ec:90:ed:da:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:05:5E:AA:FF:36:9B:83:CA:69:4E:76:39:50:59:3E:D6:E5:5B:F5
X509v3 Authority Key Identifier:
keyid:70:79:7D:B0:7B:F6:D4:59:7A:C2:DC:8B:E3:4F:89:29:80:08:F2:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHl9sHv21Fl6wtyL40-JKYAI8s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c2ee7a-cbb7-470e-b965-907daa46463b/1/cHl9sHv21Fl6wtyL40-JKYAI8s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a0:4c:e7:07:81:b5:dc:bb:84:0b:ff:4f:f8:78:34:1f:2d:
44:16:a6:fc:a9:49:6b:2d:09:20:b7:4d:77:a4:fa:ff:db:dc:
0c:2c:6d:08:22:bd:aa:b0:33:05:97:ca:d3:72:55:7e:c1:db:
29:53:16:02:43:d5:a1:73:ea:a2:3f:9d:0b:d7:01:73:ee:eb:
11:c7:be:13:89:0e:04:15:d5:be:99:df:aa:ff:64:7c:fd:d0:
b9:db:71:48:17:b9:29:83:67:5e:bb:75:b3:a7:3a:61:3d:24:
0e:31:75:1a:02:88:82:d4:c0:d2:3b:1d:51:81:f1:29:13:4b:
22:c8:37:41:5e:be:a1:eb:38:ce:65:b4:49:27:27:78:fd:8f:
17:ff:9c:d0:05:f0:9b:c1:51:f8:c7:4c:a5:8f:10:b4:16:ea:
3a:50:de:b1:2a:2b:fd:c6:b4:f9:78:99:5d:18:ac:a3:88:ab:
c2:6a:25:22:98:c8:0a:4b:71:c9:28:7b:0b:d0:8d:f2:96:6b:
04:36:00:a7:f0:61:bd:ac:63:24:28:ed:b0:ce:86:58:4f:f2:
60:71:a7:64:d2:3a:a2:0d:41:4b:d9:64:8e:e9:f3:b9:e4:0c:
8e:f7:9c:de:0b:f2:2c:a2:64:fd:02:e3:73:23:84:80:96:ce:
51:cf:75:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:50 2025 by rpki-client