Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
File: chUamhjIqStLdnjclgzCobuQgFE.mft (raw, json)
Hash identifier: eT+VjVqVYWfmgbBje2M9sObWrrtzNgOJHujFIjtU384=
Subject key identifier: 42:0C:DB:8D:68:25:39:E8:A2:8A:EC:5D:45:5D:7A:EA:0A:2C:7F:4E
Authority key identifier: 72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
Certificate issuer: /CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Certificate serial: 0194BC730DFD01D4F6C44A44F28737BDE7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: WxZu6Qfwxi79xA37VkSZ-J20u_M.roa (hash: t05e1g7o4f15v8U4VEm5TS16SzXU8/BEPelzVJneFBk=)
2: chUamhjIqStLdnjclgzCobuQgFE.crl (hash: XZGg2bQiSqdrjKoqqgpttvLuftSSNFOAo/s+1uprAMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0d:fd:01:d4:f6:c4:4a:44:f2:87:37:bd:e7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72151a9a18c8a92b4b7678dc960cc2a1bb908051
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=420cdb8d682539e8a28aec5d455d7aea0a2c7f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:7d:47:b0:da:ff:64:f4:51:05:c7:3c:31:
cc:55:65:68:42:21:13:e2:6f:89:30:2d:f3:82:77:
97:c6:26:f2:fd:ec:11:b2:20:e1:4e:50:c2:d1:92:
e5:7f:d7:de:99:d2:52:f9:d5:f1:f6:c1:5e:2d:59:
5c:5b:8f:f0:e7:cc:cf:dc:58:00:b5:55:7d:20:cf:
a8:89:37:22:62:b3:8d:99:80:fa:67:70:ed:16:70:
eb:5f:7d:4b:29:46:f8:06:4d:55:0f:78:47:d0:47:
15:b3:7e:be:ca:b1:c7:8f:db:4f:0f:1c:15:a6:3a:
e2:04:86:b1:b6:c0:d3:d5:07:86:42:9a:82:82:bf:
f9:74:29:46:6f:d4:2b:24:9d:39:d4:2a:db:3c:58:
27:2f:97:e2:df:29:f0:1e:b2:7b:e9:5d:53:6e:75:
44:be:79:5e:ea:bc:a0:98:a8:21:70:d2:04:18:3a:
67:69:e9:7c:1d:c5:70:4a:a0:20:80:fb:0a:93:3c:
6c:43:2f:98:cf:1f:62:e7:99:45:8d:31:e2:5c:85:
0b:5c:49:c0:c2:ce:63:b6:5c:21:99:c1:aa:a0:d7:
85:65:85:28:d5:76:1b:f0:9e:4a:d0:36:42:c0:e7:
17:bb:71:53:dd:47:e7:a7:62:89:59:64:66:4c:4d:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0C:DB:8D:68:25:39:E8:A2:8A:EC:5D:45:5D:7A:EA:0A:2C:7F:4E
X509v3 Authority Key Identifier:
keyid:72:15:1A:9A:18:C8:A9:2B:4B:76:78:DC:96:0C:C2:A1:BB:90:80:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chUamhjIqStLdnjclgzCobuQgFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c4fdbc-3c88-40b5-8d75-cbf94a00cc83/1/chUamhjIqStLdnjclgzCobuQgFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:10:95:04:64:38:c3:1d:ba:a5:77:7b:d5:be:28:e6:ec:6b:
9a:8d:5e:01:24:b0:db:36:1c:10:ad:51:10:2c:dd:34:7c:d0:
55:c2:ec:ee:45:a6:2a:0e:85:2e:42:e8:e7:c0:27:85:01:e9:
96:37:39:1e:9b:57:4e:c9:96:4b:43:f8:26:38:2f:6a:1a:5b:
83:e0:68:48:a1:51:5a:96:cd:22:9b:2a:ec:05:33:4f:53:f9:
0e:b7:5e:fa:94:5d:11:11:59:6f:c2:05:fa:ad:f5:25:e3:7c:
6a:d0:c8:bf:4f:3d:6f:c9:ef:a6:1d:ae:13:19:3b:92:12:03:
05:41:c2:a6:f1:53:ae:96:e3:38:30:45:73:fd:9a:19:66:6a:
3b:69:84:bb:d7:a9:af:72:e1:89:c3:fe:6a:91:d7:0f:aa:0e:
b4:25:a2:a6:76:09:c5:a2:2b:a3:61:6e:3c:36:81:e3:08:53:
ba:20:21:ed:87:7e:90:74:db:f8:b0:8f:5a:bf:d9:3d:a7:60:
ce:51:f5:9e:ac:1c:c1:33:40:5b:12:03:8e:17:43:27:4f:3d:
db:45:81:91:b4:f0:8a:6e:e4:eb:cb:58:81:33:a6:a9:e6:42:
f4:34:4f:2b:31:3f:89:68:68:a7:cd:f2:2f:ad:02:ff:99:6e:
a1:e9:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:48 2025 by rpki-client