Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
File: ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft (raw, json)
Hash identifier: dQsAJTneCHEiH0RUi4V6mXIz3pdiLqdx64TIdL6oBTU=
Subject key identifier: 10:9C:0F:A6:0D:D4:C8:89:88:47:68:6A:7B:07:5E:4C:F1:E1:05:A1
Authority key identifier: 0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
Certificate issuer: /CN=0a16747018e944e405a6d23a564701a155f43739
Certificate serial: 0194BD4E887B3B50512E8930D659C10CE394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
Manifest number: 0E60
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl (hash: LLvoC3/bot1PLxwwNYw+6zlJLpMI6Q/TCgD+mEXnXME=)
2: ExdpCTXCt8uJ4Z_M2-EkieqhjoE.roa (hash: gUhwwwHnIVltW5e0SpmF0lPF2Gg7aGGIP9a0IVe5wqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:7b:3b:50:51:2e:89:30:d6:59:c1:0c:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a16747018e944e405a6d23a564701a155f43739
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=109c0fa60dd4c8898847686a7b075e4cf1e105a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:ac:bf:62:02:89:9f:56:4d:24:5c:ac:21:
f7:7c:20:0d:35:b7:4a:60:ad:d0:7c:b1:3c:bf:7c:
26:1a:30:73:a0:36:ce:bb:32:c0:d1:4a:0e:ab:a1:
9e:bb:ce:2a:9a:95:f1:68:5d:c0:f9:17:e5:36:5e:
2e:52:6f:55:67:dd:50:c9:58:cd:af:17:40:31:ce:
96:d5:63:11:bf:62:80:35:82:10:2f:49:2d:37:5d:
1e:e2:e0:01:4a:3a:08:57:f1:94:42:83:2f:a9:0d:
49:ca:b9:00:99:d9:f5:1d:df:1d:a2:d3:b5:44:d1:
7a:d7:6d:54:9b:ed:5c:8f:85:df:9a:2d:f9:ef:ef:
48:4d:a3:9d:b9:57:bf:a0:6b:22:23:aa:4e:ed:08:
81:32:cd:cb:77:51:f0:25:f7:5f:58:58:7f:80:8b:
36:fd:14:89:e8:23:56:c6:af:60:0a:cd:30:41:5f:
bd:a9:d7:7e:40:1e:0d:fa:eb:1f:aa:23:02:7e:95:
91:a5:8d:63:f1:08:0e:e7:16:63:f7:72:59:7f:e8:
d4:ae:d2:0f:d5:68:e4:76:93:86:3b:32:7b:7a:eb:
53:d2:6a:79:0e:0f:34:fa:04:53:44:8d:d1:de:6e:
36:7c:d3:15:37:66:bf:21:f4:ca:9a:0c:37:aa:ce:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:0F:A6:0D:D4:C8:89:88:47:68:6A:7B:07:5E:4C:F1:E1:05:A1
X509v3 Authority Key Identifier:
keyid:0A:16:74:70:18:E9:44:E4:05:A6:D2:3A:56:47:01:A1:55:F4:37:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChZ0cBjpROQFptI6VkcBoVX0Nzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae0690-9637-4fc5-b41b-d9d0aa28ab2b/1/ChZ0cBjpROQFptI6VkcBoVX0Nzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ad:95:45:97:56:04:c1:51:71:05:8a:cc:95:25:57:a0:89:
9a:8a:e5:9b:8c:1f:df:18:a7:ad:23:09:b2:f4:45:b6:7e:e6:
5b:6d:cb:a3:be:95:2f:cf:88:75:0d:7f:a0:60:47:ef:ea:9c:
e0:01:9c:cd:21:c3:1d:ef:6f:bb:3f:b8:46:63:97:09:6c:4d:
ab:41:93:d9:44:c4:3b:57:e5:7f:2a:30:c1:9f:3e:b6:02:2f:
54:16:f1:5f:06:18:d9:cb:0b:80:d8:a3:d9:f7:32:98:e9:fc:
f9:8f:95:71:07:a9:73:39:5e:8a:e0:fd:c7:24:ff:8d:18:d4:
91:8e:d4:e3:06:1f:b5:da:29:b3:ac:10:5b:39:e1:34:af:4d:
6a:c9:9c:9f:aa:60:a5:7a:a0:a3:89:80:fa:aa:9a:65:5a:0c:
07:8c:46:5d:cc:62:89:60:39:ce:3c:3f:84:70:fc:15:f1:4e:
6c:30:82:ac:16:a7:0a:d0:81:f1:59:58:02:f7:65:f9:36:73:
a5:23:97:e9:73:75:c2:fd:5c:17:9f:6b:80:4f:9d:3f:a7:25:
8a:2d:8f:ab:ec:d9:7f:3d:d1:68:98:a8:90:0a:7c:a9:72:fe:
9b:49:de:ab:d1:d4:7e:25:f3:4f:50:5f:49:bc:77:c2:cd:3d:
86:ac:3e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:07 2025 by rpki-client