Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
File: CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft (raw, json)
Hash identifier: ftQfWWdXViBDrHtPqPbk1wWgV5hhreegWFzR4nj6s6A=
Subject key identifier: 98:FE:D2:F0:6C:0A:17:00:A2:BE:BE:C8:A1:79:AC:EB:C3:4F:A9:9D
Authority key identifier: 0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
Certificate issuer: /CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Certificate serial: 0194BC72A0BE17CFF6CCB3579C1C6D6062EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
Manifest number: 13E4
Signing time: Fri 31 Jan 2025 13:00:16 +0000
Manifest this update: Fri 31 Jan 2025 13:00:16 +0000
Manifest next update: Sat 01 Feb 2025 13:00:16 +0000
Files and hashes: 1: CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl (hash: yPCq8D5Dhekn7SEzG5TcGStv5MzZEKnpnbLYhKZBlZc=)
2: Wy1LhCK9kxP-C2UiE5R2K8JtffM.roa (hash: DYS7fnBaD9Os9bSnRtbqX/rsXfSVI5HQGNbOlzCHNGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a0:be:17:cf:f6:cc:b3:57:9c:1c:6d:60:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4a702f677f336d9b3e36c384ebc8c9fd8859f4
Validity
Not Before: Jan 31 13:00:16 2025 GMT
Not After : Feb 1 13:00:16 2025 GMT
Subject: CN=98fed2f06c0a1700a2bebec8a179acebc34fa99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d3:59:39:da:17:26:e1:5b:fc:52:d1:e0:97:
99:52:4e:f8:9a:97:25:eb:b5:5d:8c:23:67:20:c5:
f9:ee:6e:bb:0d:71:92:f8:17:60:e1:92:b2:f7:07:
22:e0:8d:71:72:9a:7d:70:70:03:7b:db:b8:3a:09:
39:23:15:ab:ea:21:09:e0:a1:6a:0e:d9:52:d7:b9:
23:59:ef:5c:d2:43:04:3b:79:32:ca:26:f0:05:18:
a6:6d:6f:19:d5:a9:7e:63:3d:f7:84:3e:d5:22:39:
30:23:dc:87:89:88:06:64:ab:86:3f:53:1d:8f:33:
2d:84:61:7b:0c:5a:ca:22:c1:fd:c9:de:ba:14:00:
ba:c1:30:8c:ba:b4:3a:3a:d0:60:2b:89:b0:e7:21:
dc:ca:8d:48:e4:8d:b0:41:5d:18:8b:03:b1:c3:e0:
dc:1a:bf:1e:5b:71:9d:25:9c:7e:4f:1e:74:1e:96:
3c:ea:b4:85:55:a4:2b:ca:a2:d7:ca:4d:35:96:07:
92:5b:77:f9:5d:55:30:12:9e:cd:34:a2:5c:a4:2a:
aa:e8:a5:03:c6:9c:72:a6:5b:44:d8:d3:7e:d1:96:
05:0a:3e:d5:c2:dc:e2:0f:1e:03:79:f7:4e:65:90:
d5:9f:93:0d:59:e4:70:fe:c3:bc:7c:53:dd:75:d0:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FE:D2:F0:6C:0A:17:00:A2:BE:BE:C8:A1:79:AC:EB:C3:4F:A9:9D
X509v3 Authority Key Identifier:
keyid:0A:4A:70:2F:67:7F:33:6D:9B:3E:36:C3:84:EB:C8:C9:FD:88:59:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkpwL2d_M22bPjbDhOvIyf2IWfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/da5b32-20a7-4e0a-b834-ef31715611aa/1/CkpwL2d_M22bPjbDhOvIyf2IWfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c9:21:4a:c5:59:fc:3f:b3:a8:51:aa:9c:5e:80:ed:5b:2e:
16:67:47:af:df:71:69:89:9a:37:f9:f4:85:fb:f3:2e:3e:62:
f9:c5:79:13:d8:c3:8e:cc:00:e0:95:c5:40:ed:85:17:6d:2d:
50:bb:40:6a:9a:bb:2d:9f:88:92:31:bb:b9:4a:9d:36:1e:7c:
68:83:4c:2d:ad:29:4e:c6:6f:91:21:94:6b:ed:39:f5:a2:e0:
80:ce:49:0e:76:3c:7d:0b:be:fe:c3:f1:0d:aa:65:90:60:1f:
ab:2b:84:02:54:4d:66:11:de:7d:a5:98:93:2d:02:6f:a3:2c:
4d:6a:14:4b:a5:f8:cb:89:47:c3:36:dd:3b:51:b4:55:8d:84:
08:5e:6b:54:e6:bf:4e:bc:ee:f6:39:bf:14:1f:84:cb:51:d8:
dd:7d:20:dd:ce:d9:20:9f:84:6b:6f:a7:86:41:da:09:1e:bb:
f3:a3:6d:3b:89:df:d8:f8:70:47:c1:f4:12:b4:9e:9d:c6:0e:
ff:a6:ad:a9:c7:6f:ab:ca:89:f8:55:44:c6:81:86:04:5a:fd:
18:4f:aa:68:9c:98:8f:89:6d:4e:a1:a0:32:a9:66:22:fb:84:
c2:20:18:f4:aa:7e:46:94:c0:29:6d:07:c0:3a:0a:18:33:9b:
e8:5e:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:43 2025 by rpki-client