Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
File: CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft (raw, json)
Hash identifier: K0/hCH1TXFUbVrJqqIpDJZFNaTBxbWw2kO+RYuOH8To=
Subject key identifier: E7:35:8E:AF:5B:99:AB:D2:EC:CE:9E:A7:B9:57:A2:A9:E5:11:2B:48
Authority key identifier: 08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
Certificate issuer: /CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Certificate serial: 0195E00F9896F314E6EB4A4C195C2FBB6FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 04:01:13 +0000
Manifest this update: Sat 29 Mar 2025 04:01:13 +0000
Manifest next update: Sun 30 Mar 2025 04:01:13 +0000
Files and hashes: 1: CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl (hash: vj14Er1oEximOELEAfCxx25MA1CSlL4/OJN3YDCd8N4=)
2: xXBeI29eya94rPehpseNSugXOrU.roa (hash: xdHRa/hprzQEAOlWU9drCOQodom24Wp/yVhCxd9qLIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:98:96:f3:14:e6:eb:4a:4c:19:5c:2f:bb:6f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08ba02f6995cece6a9fd3475bd0b1cf0dd85826e
Validity
Not Before: Mar 29 04:01:13 2025 GMT
Not After : Mar 30 04:01:13 2025 GMT
Subject: CN=e7358eaf5b99abd2ecce9ea7b957a2a9e5112b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:1a:11:0f:57:39:75:49:e1:68:08:0c:a7:
25:b2:87:71:4f:e8:cf:33:48:26:52:17:bb:bb:11:
23:6d:0c:e7:60:b0:97:c5:4b:49:15:19:cc:31:c6:
b2:2c:ad:a2:6c:5f:67:70:57:4f:d4:8d:ab:93:82:
ae:01:53:e2:bf:27:4d:e2:ff:b4:92:fc:a3:47:df:
a5:59:d3:79:3a:52:2d:20:4a:25:2e:e9:72:b1:02:
9f:40:a3:e6:cd:e7:7d:b6:48:ce:e7:4d:4e:ef:d5:
a1:e8:9d:3a:d8:44:9b:44:5e:87:c7:cb:3c:f7:51:
16:1a:b0:87:6f:1c:99:4c:10:d2:ca:44:74:a0:d8:
13:a1:08:c3:31:55:58:81:8f:ec:b6:4d:36:fa:75:
a3:1b:bf:f2:63:7c:0a:06:71:08:09:db:dc:f4:52:
65:8e:44:26:a9:2f:07:b7:df:ed:44:25:f1:b8:50:
a9:21:42:17:fc:f0:21:eb:6f:17:da:09:25:79:42:
aa:50:33:0c:8a:34:df:d0:fc:00:83:e5:6a:24:73:
50:e5:0a:77:39:df:c9:48:f7:d4:a1:24:c0:5f:b9:
98:f1:bb:05:38:0e:aa:d2:8b:af:ef:97:f3:19:64:
06:10:80:f7:a3:ea:d0:c5:30:62:67:31:32:48:de:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:35:8E:AF:5B:99:AB:D2:EC:CE:9E:A7:B9:57:A2:A9:E5:11:2B:48
X509v3 Authority Key Identifier:
keyid:08:BA:02:F6:99:5C:EC:E6:A9:FD:34:75:BD:0B:1C:F0:DD:85:82:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLoC9plc7Oap_TR1vQsc8N2Fgm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/be2083-ea7b-4454-873e-965fac977721/1/CLoC9plc7Oap_TR1vQsc8N2Fgm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f6:14:f6:30:52:cd:19:f3:dc:92:39:63:e8:7d:4f:b7:cc:
57:89:d2:17:39:23:fa:55:63:66:21:90:7f:e7:38:68:28:64:
c0:9f:64:c8:97:9a:71:da:f4:aa:6a:6d:21:8a:a7:f2:84:10:
60:b7:23:95:58:39:cc:b7:42:6d:0b:45:cb:e5:96:a9:d7:3b:
3c:7e:3f:23:46:68:44:35:6f:bb:47:42:77:f0:4f:fe:01:d1:
37:8e:2e:d1:21:64:66:65:dd:4a:80:ea:6b:ea:d9:a7:98:30:
d5:32:67:2f:77:14:7a:41:5c:5e:6a:55:60:b7:ba:45:19:7b:
91:56:d7:1d:05:ed:94:6a:df:cd:c8:f5:03:d4:e6:dd:b4:54:
8d:08:f9:a8:ca:f3:12:d9:bb:61:db:ce:b8:96:f3:81:c4:ff:
e8:05:02:b8:41:92:ed:d8:ed:b3:42:0c:7d:1e:2d:72:25:37:
59:08:ae:05:60:12:a6:b5:e4:81:3a:fc:a6:e5:c9:2e:cf:61:
4c:4d:d5:8a:be:15:53:90:3b:5e:d4:46:52:cc:10:97:7d:ee:
04:8b:b9:bf:d0:87:08:2a:ae:2c:4a:a4:3e:87:b2:70:76:34:
1a:31:cb:d1:3d:87:42:88:30:7c:17:11:0e:78:94:cf:a9:b8:
27:09:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:45:33 2025 by rpki-client