Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.mft
File: c-vxK1fHzGubu9Fh7TG-FknErBw.mft (raw, json)
Hash identifier: bRYvZ0FIAt1YEG6jXZ4sK7n2NuiGCbel7zr1zEjVYuQ=
Subject key identifier: CC:70:F0:9D:A3:1E:A8:7D:C1:3C:CC:C2:29:7F:C2:D5:63:17:06:F1
Authority key identifier: 73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
Certificate issuer: /CN=73ebf12b57c7cc6b9bbbd161ed31be1649c4ac1c
Certificate serial: 01932E68BDD1D25CC7A808479104E8A3C598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-vxK1fHzGubu9Fh7TG-FknErBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 06:00:36 +0000
Manifest this update: Fri 15 Nov 2024 06:00:36 +0000
Manifest next update: Sat 16 Nov 2024 06:00:36 +0000
Files and hashes: 1: FhhRpDatuNGnSb_n00wtAV-7RfM.roa (hash: jojgAk6EIhPJEQxlKUEaNvxURuHnJ69hcdfEG/8Akl8=)
2: c-vxK1fHzGubu9Fh7TG-FknErBw.crl (hash: R4WkEGbeQolOUyKVkOGmAhZFJXuLR3T2i4BeDLdn8fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:68:bd:d1:d2:5c:c7:a8:08:47:91:04:e8:a3:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ebf12b57c7cc6b9bbbd161ed31be1649c4ac1c
Validity
Not Before: Nov 15 06:00:36 2024 GMT
Not After : Nov 16 06:00:36 2024 GMT
Subject: CN=cc70f09da31ea87dc13cccc2297fc2d5631706f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:0b:31:50:2f:ac:c8:43:c6:85:8c:ca:d8:
6f:ac:cb:6f:d9:ed:1d:4a:00:55:76:b6:61:38:0a:
65:75:c1:fb:b9:7f:c1:cd:81:a6:b2:4d:5f:e0:46:
ac:f8:1d:cb:38:77:ad:eb:d1:cd:96:2e:d7:64:62:
13:59:32:9a:fc:53:00:24:0a:01:6b:18:2a:a9:1a:
5b:45:05:4b:66:28:f3:e0:e9:14:fa:ef:e0:a4:3c:
6b:31:22:37:29:8f:c0:b3:57:b8:8f:18:7e:2f:ab:
5d:b7:35:33:5a:e9:02:d3:2a:1b:d9:33:a8:6a:5c:
a3:9b:f5:2c:ec:33:f7:fa:91:f3:99:ef:38:62:af:
ff:4b:4b:4b:cf:87:70:41:3e:de:7a:19:e8:19:0c:
c2:e4:58:f3:87:96:b8:72:13:47:8a:66:27:cd:42:
5b:69:46:ff:f6:ce:e2:11:9d:50:3b:33:73:95:94:
dd:7d:a7:7f:a6:72:d8:10:a2:16:0b:69:1a:60:a9:
7e:05:41:db:f9:55:cb:a5:8a:85:48:32:14:3c:5d:
b6:55:b3:9a:f5:a9:d6:0d:33:3f:51:ba:09:1b:79:
78:56:08:b9:42:73:c8:de:0e:0b:f7:9f:5f:18:1d:
0c:6f:95:26:db:77:32:d3:8f:7b:8b:a3:0c:10:11:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:70:F0:9D:A3:1E:A8:7D:C1:3C:CC:C2:29:7F:C2:D5:63:17:06:F1
X509v3 Authority Key Identifier:
keyid:73:EB:F1:2B:57:C7:CC:6B:9B:BB:D1:61:ED:31:BE:16:49:C4:AC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-vxK1fHzGubu9Fh7TG-FknErBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7f307-2a48-41e3-9407-d4cf809f7ffd/1/c-vxK1fHzGubu9Fh7TG-FknErBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:68:1b:43:01:bd:7b:57:ff:88:cb:ad:01:47:6b:61:db:c2:
52:6e:ca:c5:e8:1e:44:0c:59:f9:82:f8:e2:05:61:bf:27:81:
d0:79:68:4a:4e:10:82:80:70:72:98:0c:e4:15:3d:ca:1f:47:
62:e7:22:68:a6:54:b4:21:6c:9c:ff:66:4b:fd:5b:6a:1c:65:
1e:34:15:7e:61:f1:bb:11:f8:b0:33:a9:33:bb:ef:e7:91:dc:
ce:fa:34:26:f7:b4:f7:d6:34:f2:9a:5a:65:1f:7b:0a:8f:65:
af:d2:a4:ec:ae:1a:31:68:0a:e5:7c:5a:43:99:57:c2:59:fe:
4e:78:ba:64:21:22:9d:9b:1c:5f:b9:93:a8:2d:a8:d2:f8:b3:
9c:bb:90:f0:2d:05:62:39:ce:4c:c3:14:7b:0b:36:ed:25:a9:
c0:6f:13:87:37:95:63:59:89:37:21:af:8a:8a:01:d3:c6:07:
21:95:7e:bf:d2:3d:a0:0e:37:f7:23:8b:4a:94:59:e2:94:76:
3d:ad:3d:7d:37:eb:fe:43:69:de:d3:6e:e9:e3:71:06:5e:1d:
d4:68:41:b2:e7:72:15:fa:16:37:2b:46:16:50:55:09:83:ba:
9f:a9:d0:a3:fb:72:0c:7b:43:07:92:48:04:bb:84:31:f8:67:
ca:e0:e6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:59 2025 by rpki-client