Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
File: rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft (raw, json)
Hash identifier: uP1VoAlyFpqdiQtkuW4qRt2G0nXXYr4N6UFvthqhQ58=
Subject key identifier: 97:F0:DC:58:08:9F:3E:B8:8C:68:4C:90:33:A7:35:BB:64:F2:EE:9A
Authority key identifier: AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
Certificate issuer: /CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Certificate serial: 0194BBCE74933D1C9518761F8FEB7DFF9D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
Manifest number: 0A69
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl (hash: t9wALucSsTP0sub0TkQCEpwtemwx/FLnON6AA9uJYKc=)
2: xdJCZN2-B2T_CDkACtSXidGS3do.roa (hash: s0jqLGTlnozuwukxMNuj9trb2i8A2O+cFtDeELQzX9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:74:93:3d:1c:95:18:76:1f:8f:eb:7d:ff:9d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acabba0b0052ae7bd349235647a2ed731506ccaa
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=97f0dc58089f3eb88c684c9033a735bb64f2ee9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:60:4d:ca:b3:c1:b0:2c:4b:70:04:1c:26:
9b:6b:cc:e9:1a:c9:2e:d4:68:21:07:95:3d:a1:77:
ea:1a:f4:29:8e:79:b2:cb:08:bf:73:94:ff:50:44:
18:5b:e3:6c:65:3a:08:96:06:94:2b:2e:04:a5:37:
97:f0:c3:88:05:1f:73:d9:b6:40:39:0f:32:19:92:
33:de:d4:a4:82:2a:70:65:18:d2:1d:81:b0:4f:50:
50:13:14:57:34:37:9c:33:06:59:7b:e5:dc:16:f2:
b6:67:de:20:78:fc:aa:b3:fa:d5:ab:d1:23:e4:a1:
ed:ec:95:26:d5:17:6f:95:16:b7:2c:5e:0f:fe:0c:
53:bb:aa:61:1f:7a:bb:76:48:a5:3e:61:f2:5c:6f:
4e:d3:8b:b9:f4:9b:ba:16:1e:1c:69:71:57:85:d3:
e5:9d:88:24:83:0d:d4:25:dc:73:77:36:86:09:34:
60:4b:9b:d8:a1:1c:bc:db:c9:c8:ed:a6:ac:8b:30:
f0:3b:88:b8:50:57:28:45:c3:70:05:31:15:a5:47:
75:6c:c4:18:e9:9e:61:a8:23:5b:a5:8f:50:10:6a:
6e:2c:c2:e0:cf:dc:57:54:3e:33:6a:9c:5b:03:58:
2c:88:9d:70:44:38:ec:c0:7e:73:49:16:40:91:a4:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F0:DC:58:08:9F:3E:B8:8C:68:4C:90:33:A7:35:BB:64:F2:EE:9A
X509v3 Authority Key Identifier:
keyid:AC:AB:BA:0B:00:52:AE:7B:D3:49:23:56:47:A2:ED:73:15:06:CC:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKu6CwBSrnvTSSNWR6LtcxUGzKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/93dbe7-db2f-4c35-b0a7-e5b49947ed07/1/rKu6CwBSrnvTSSNWR6LtcxUGzKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a8:79:8e:b2:d5:e5:f0:16:6e:4e:15:7a:4d:d4:59:23:0d:
3c:04:03:4e:42:04:f3:0e:c5:73:55:a6:33:97:94:50:20:8a:
b4:86:d1:13:31:b0:e2:60:f8:d9:65:aa:50:c0:46:83:69:89:
d6:80:b0:d7:77:9c:d4:aa:9f:91:84:b5:63:b0:70:59:88:f1:
c3:f1:8f:7a:6b:ff:e2:92:51:05:46:d9:61:c4:b7:88:7e:67:
bf:49:71:dd:5f:f5:d2:17:e7:ba:07:20:57:ce:ea:6c:ff:6f:
8e:e5:fe:69:a1:4d:b3:9c:60:2f:e0:53:d1:b6:8e:07:28:5e:
fa:95:25:0d:30:7c:be:48:c3:0b:70:2a:ca:3d:cc:8c:b4:58:
59:f8:9c:b4:b7:e0:51:39:da:94:30:ad:8b:23:30:fb:c5:d2:
6c:c9:7d:48:f9:9c:6a:13:f4:e8:b0:8f:67:4e:5c:fe:d5:cf:
2e:16:d5:37:41:d2:c5:9f:61:4a:02:0e:24:91:b7:b1:7c:70:
87:50:bf:5d:ff:53:e2:25:b9:44:ce:74:dc:31:6e:09:a0:3a:
30:f6:c9:78:c0:21:e1:b5:27:17:02:42:f9:2a:d8:22:d3:bc:
62:0e:58:b0:a1:4b:4d:af:56:13:56:6c:f6:e4:93:4a:c3:a7:
94:b6:89:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:23:11 2025 by rpki-client