Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft
File: 1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft (raw, json)
Hash identifier: Zax17ptiBurTqzhN46G+wEJICVrcYFoevbQa6FL+jw8=
Subject key identifier: 21:43:10:21:21:E7:50:8F:3D:D9:EA:61:5A:E6:A7:63:44:C5:53:FE
Authority key identifier: F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
Certificate issuer: /CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Certificate serial: 018CC871B7229BB8B15FDCCBF2BD269C3213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft
Manifest number: 0375
Signing time: Tue 02 Jan 2024 04:32:24 +0000
Manifest this update: Tue 02 Jan 2024 04:32:24 +0000
Manifest next update: Wed 03 Jan 2024 04:32:24 +0000
Files and hashes: 1: 1-Cpc1t2F0szYnNFPBcj3zA59u2k.crl (hash: abe9XbGUeQKEYQ5GNsPTMUeZkw9FhCJrkVyX5xRRtWk=)
2: M9CwfbDWkx72PgGOjYmkQxLu0hA.roa (hash: 0eExHE/De636x//Gl7/lYpSzKFcpReyahSNEXXv7wWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:b7:22:9b:b8:b1:5f:dc:cb:f2:bd:26:9c:32:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82a5cd6dd85d2ccd89cd14f05c8f7cc0e7dbb69
Validity
Not Before: Jan 2 04:32:24 2024 GMT
Not After : Jan 3 04:32:24 2024 GMT
Subject: CN=2143102121e7508f3dd9ea615ae6a76344c553fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:a5:44:fd:a6:34:99:5c:42:96:5d:b7:fd:
59:79:87:4d:81:da:1a:0c:df:67:01:67:0b:fc:e2:
c0:e5:f0:7b:2a:60:73:d3:9b:bf:76:a8:24:fc:32:
f4:c0:3b:52:19:48:92:ee:29:2e:e2:3a:7a:32:ca:
1c:ad:a1:ba:d1:68:71:7c:ec:01:b9:5a:13:a6:95:
c2:b4:4a:d3:68:ae:e1:da:54:d3:3c:71:95:a9:70:
9e:15:9a:5c:92:8c:ba:76:b4:c5:bc:55:a9:3f:ea:
7a:b8:5d:44:c2:3c:7b:bb:09:97:93:1d:14:ad:02:
5f:2d:ac:9c:dd:6a:32:42:bb:8e:b6:4c:90:ea:09:
0e:67:84:1d:c8:00:d3:32:a7:92:03:d3:65:b2:7d:
0e:02:b4:64:2c:86:73:55:a1:2b:fd:86:bc:63:76:
ea:df:51:a2:65:72:cb:30:63:61:9e:4a:cc:18:7a:
33:e2:5e:a6:56:89:cf:de:fd:c9:3f:49:7a:6b:91:
be:04:c1:78:b3:8b:9e:ad:31:0a:a6:ce:ff:c9:bc:
b5:32:f5:42:0a:bb:a7:83:9e:ce:ee:f2:a3:3a:02:
e7:51:69:57:d3:16:34:cd:d8:b5:60:9d:f2:e1:b2:
ad:f1:1a:43:30:00:ab:33:46:71:72:67:64:c9:23:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:43:10:21:21:E7:50:8F:3D:D9:EA:61:5A:E6:A7:63:44:C5:53:FE
X509v3 Authority Key Identifier:
keyid:F8:2A:5C:D6:DD:85:D2:CC:D8:9C:D1:4F:05:C8:F7:CC:0E:7D:BB:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cpc1t2F0szYnNFPBcj3zA59u2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/3d9631-e932-4733-acec-c85329283a5a/1/1-Cpc1t2F0szYnNFPBcj3zA59u2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:7d:48:54:fb:b2:47:69:4d:43:9d:f8:b2:9b:30:45:5d:2b:
57:7e:76:97:db:5d:78:d4:e7:52:23:17:af:ac:2f:ae:17:49:
31:7e:25:d4:fc:8d:0f:96:4d:14:d3:f1:23:9c:3a:0c:db:2e:
90:21:68:51:df:5e:e5:82:b8:ec:8c:30:c6:f5:d4:81:58:68:
fe:0c:05:7c:06:07:37:c3:8a:1f:5e:8f:59:fb:59:dd:77:30:
a5:fd:d6:aa:e3:cd:bf:a1:b2:72:3a:80:b1:dd:9d:57:f0:c3:
42:21:ec:e0:3f:7a:ac:62:b4:57:aa:4f:ae:1e:ed:88:4d:5d:
48:9d:31:cb:0d:36:09:47:22:f4:ff:be:5c:b8:f8:77:43:1b:
da:bb:9d:e3:10:b1:1a:ba:03:f8:67:1e:86:5d:74:fc:18:35:
17:77:91:c5:0c:7f:83:30:82:5b:a3:bd:29:03:eb:2f:88:b7:
66:d4:ac:fe:d0:01:c8:44:1f:af:7d:dc:f4:a4:2e:11:3b:75:
00:80:98:c7:a8:dd:9e:06:69:43:8b:a2:05:24:fd:37:79:b4:
c0:a2:d5:38:02:0b:df:c5:cc:c5:b1:c0:a8:7a:44:a8:a0:13:
0e:d6:20:9c:90:11:cd:2e:a1:92:ee:5b:96:8a:bd:6b:16:24:
c0:95:aa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:15:59 2025 by rpki-client