Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json)
Hash identifier: PM6jBm2UriPVlzaYeR0SAvRqM1IDAVtNNhuOVlluZOA=
Subject key identifier: 70:B0:3B:5E:AA:29:77:5C:58:DA:E7:A2:91:AD:F5:17:0E:FA:F4:82
Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Certificate serial: 0194BCE0E06CF437CB3F1EA115F543EDC12A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: TKoxALo9u8PRYJQQjNMDBzOManE.roa (hash: e6LRQQhGn2Pm43QUsi5AMgfehOrdW1tISUFnEIiJny4=)
2: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: MnwkAUUwDgBx62Atfo2HZB5nkRERdSn2R+rQkyr8HzI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e0:6c:f4:37:cb:3f:1e:a1:15:f5:43:ed:c1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=70b03b5eaa29775c58dae7a291adf5170efaf482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:e8:f9:1a:1a:62:ae:37:f1:46:97:38:be:
cd:ce:a1:0b:62:83:0c:00:bd:23:1d:40:b8:4c:b8:
50:40:de:19:55:47:15:c7:e4:b6:31:b1:55:ff:d4:
67:55:c6:e2:59:1d:c6:7e:8f:46:69:ae:df:98:3b:
a3:7a:f2:74:6a:b0:c8:a3:5c:04:a8:30:51:16:45:
15:0d:03:e1:8a:29:89:1b:df:c0:dc:72:e2:07:98:
29:42:5c:a9:24:b3:aa:45:98:fd:08:ff:b7:4c:ab:
e8:ba:4c:7c:22:a5:c9:fa:9d:d1:0b:67:0e:15:84:
2d:27:d2:04:d4:ff:7c:c5:cb:ef:42:8b:28:b2:f9:
58:a9:28:80:21:8d:a1:e6:c7:d8:7f:b8:14:92:3b:
1f:d2:55:03:78:05:39:09:67:2f:ca:19:50:1a:64:
43:67:f7:b1:e6:b4:d6:a9:fe:b2:2b:95:a4:ce:a9:
fe:84:68:7d:1d:68:9b:41:c3:34:0b:29:5b:dd:f9:
57:9e:1e:3b:58:e0:c5:4a:d6:b3:d0:f2:ec:cc:76:
23:be:0a:7f:35:4c:0d:6c:01:39:8d:2a:82:7d:54:
6a:13:82:75:f4:7e:97:1b:5f:fc:4a:ab:70:a1:f8:
13:95:10:ba:04:35:8d:1b:ab:47:67:69:45:5b:ad:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:3B:5E:AA:29:77:5C:58:DA:E7:A2:91:AD:F5:17:0E:FA:F4:82
X509v3 Authority Key Identifier:
keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d7:ea:33:15:ad:59:14:78:4d:48:62:90:90:4d:76:8b:1b:
7a:09:6e:f1:92:ea:95:dc:e5:61:04:c0:63:ad:8a:eb:9c:0e:
f2:76:97:e0:01:f9:a1:57:ac:ca:76:c7:3e:e6:06:7e:62:05:
bf:f8:94:d2:23:e7:9d:3c:52:3d:c0:71:51:5b:92:e4:ff:a6:
b2:8f:dd:11:84:8d:19:57:e8:49:ec:68:52:0f:d9:99:0f:a6:
e4:82:b9:cf:fd:7c:0d:ea:fc:a5:f5:e4:c8:7d:18:49:01:73:
09:ca:55:37:4a:aa:1b:57:a8:43:73:65:fc:10:90:f7:b8:9f:
7e:1a:3a:2b:81:04:51:82:ca:d3:02:5e:9e:c7:de:00:81:af:
0f:11:2d:ab:be:05:8c:f6:79:f6:01:b2:8c:f3:61:9d:49:a3:
b1:59:3d:f9:06:32:a4:37:38:fa:22:ff:24:cc:85:80:7c:23:
74:51:8e:b1:1c:2b:5c:69:58:55:16:fd:8d:b4:5d:d9:9f:eb:
46:9f:34:65:20:89:25:fc:1f:5f:84:1e:c8:5a:b4:e7:bd:95:
b2:6a:99:c8:21:e8:c3:37:6b:3c:29:16:fe:73:13:91:82:23:
e5:e1:33:73:be:50:76:81:b9:c2:f6:a5:19:47:a2:ca:1a:3b:
ab:a7:2a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:22 2025 by rpki-client