Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: KrCbxENL34lQ21GXTXEk79qFI4DDYJ4XUH6R/oA0+3E=
Subject key identifier: 63:D8:CB:82:BB:10:B4:30:64:99:E6:4A:FA:63:C4:BB:39:EC:1E:EB
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 0195DFD8CC2562B03F30F4FD0E136E9B07C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 04C7
Signing time: Sat 29 Mar 2025 03:01:21 +0000
Manifest this update: Sat 29 Mar 2025 03:01:21 +0000
Manifest next update: Sun 30 Mar 2025 03:01:21 +0000
Files and hashes: 1: I35QWc2nLFeohwH6DngqA3KZZFg.roa (hash: aZgBsm07l1h8BIWKajFFEnRBCv4q5gOkXWvMXnSlf3g=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: 7rhh4Uh00G4atFLNij6FbfT6jrZD0mF0QJogoD2B3cM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:cc:25:62:b0:3f:30:f4:fd:0e:13:6e:9b:07:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Mar 29 03:01:21 2025 GMT
Not After : Mar 30 03:01:21 2025 GMT
Subject: CN=63d8cb82bb10b4306499e64afa63c4bb39ec1eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:b9:af:79:91:3e:a7:49:66:f1:8f:20:7e:
cd:0b:15:3b:de:e0:72:ba:58:22:b5:94:22:95:2c:
4c:5c:44:9d:55:70:df:09:1c:11:8a:7f:db:cc:77:
96:ac:c1:66:85:b5:8c:d4:17:35:10:aa:05:95:3f:
1a:4e:6e:df:f0:1c:4d:40:b6:8f:97:a9:ca:ba:4e:
d1:7c:42:0a:78:bf:3e:04:8e:ef:2e:21:91:d1:f4:
b8:61:53:1c:2e:8f:e9:00:3b:fe:db:ac:cd:d4:c4:
2e:c6:42:f1:4b:53:d3:09:d1:3b:2b:d9:10:8a:b7:
57:0d:bc:4b:9b:c3:b4:9e:c6:61:c9:bc:71:79:aa:
fc:2e:3e:b3:39:d8:ee:65:bb:cf:85:81:0c:5c:29:
ad:33:5f:2d:8c:6c:da:0d:2a:9a:38:2d:cc:76:c7:
3f:1e:59:1e:63:63:dc:ce:d7:89:bb:0b:cc:cc:53:
02:03:32:6e:52:59:a4:72:90:9f:fa:9e:f0:fe:0e:
e6:fa:c9:ce:67:94:95:8b:3b:ce:9b:7c:b6:fe:ba:
92:2b:d2:4f:c6:db:63:ca:80:40:3e:e5:83:2b:68:
a3:fe:60:0b:77:1d:4c:0e:82:f5:77:33:ca:7d:9a:
ae:44:f9:90:69:4e:f8:9d:97:6e:6c:47:60:a4:b0:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D8:CB:82:BB:10:B4:30:64:99:E6:4A:FA:63:C4:BB:39:EC:1E:EB
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:93:64:3e:43:29:41:f5:d8:96:e6:93:c5:7a:24:41:39:9c:
b1:63:f0:0e:1e:4e:44:cf:4e:bc:11:9e:9e:fd:f2:a4:b0:c0:
d8:d5:25:38:61:42:10:67:94:04:46:f2:1c:e2:d9:e7:48:76:
d5:89:a5:11:7a:61:2f:3b:9c:22:08:b8:e2:d2:c6:fb:29:bd:
4b:71:6c:bf:1d:7f:1f:e4:9c:62:5a:41:68:fa:9d:47:e9:07:
67:ef:28:94:d1:b2:56:33:59:c1:6e:c9:f2:77:2c:fc:d7:4e:
59:26:86:34:61:7d:03:f6:69:76:7a:ff:23:30:b6:b3:da:1d:
21:1b:d5:9d:0d:38:31:ce:c6:64:78:60:4c:2b:8f:82:66:09:
09:cb:b6:78:7c:13:64:a7:91:46:38:67:59:3c:74:80:41:25:
a7:84:76:63:58:11:ae:26:a4:b1:86:22:16:9f:cf:45:72:3a:
6e:e6:53:3d:02:5c:91:c9:0b:d3:d6:57:96:54:2f:d3:35:44:
c7:7f:af:e6:10:33:18:85:a6:18:04:fb:1f:19:76:c2:db:34:
95:a8:2f:47:ef:9a:32:20:78:4c:53:0b:bb:de:e7:c6:51:d1:
6a:4a:0b:33:fe:70:65:d6:07:f1:b9:5c:f8:29:cb:ef:5e:6e:
01:31:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:53 2025 by rpki-client