Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: 3JyyUFgCEhb+kKEkgOdR7kRRMaw4ghM1QxPH1/PGyLk=
Subject key identifier: 7B:D8:D8:86:CB:BA:3F:92:A9:7B:38:FD:4E:31:11:10:3A:87:D5:48
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 0194BCAA1C2A914D0836E1A335598D785FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 12C9
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: T5PC2PeRzsaYtHTTbM4tXPVu34etopWV4iPluOi37pU=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1c:2a:91:4d:08:36:e1:a3:35:59:8d:78:5f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=7bd8d886cbba3f92a97b38fd4e3111103a87d548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:f2:62:51:f1:f6:9f:09:76:c3:98:cf:0d:
be:70:b0:fd:8c:26:b9:5b:02:ac:5b:72:b7:c9:d8:
3f:e2:50:44:56:e5:0f:3a:47:00:f6:5b:5b:e5:dd:
3b:5c:9e:62:0a:3d:02:a1:26:84:92:ac:87:5d:24:
f5:e8:0c:0a:cc:e5:a1:bb:00:d4:02:96:96:44:17:
9f:e5:84:58:e7:88:ed:f6:8b:74:4d:b1:a0:4d:22:
fc:87:81:3e:ed:5d:91:5f:bf:bf:2a:04:81:b4:a5:
f3:36:af:b2:3b:42:fb:c7:f6:03:78:a5:1a:22:04:
8f:23:51:19:83:a3:28:d1:94:23:e6:bd:da:be:be:
8e:f6:40:86:18:ee:ad:0e:c2:b1:a6:16:5e:03:a1:
36:98:9b:d3:b6:07:f1:f2:18:99:75:8e:c6:37:5c:
ec:e9:17:20:b7:4c:9e:41:45:7f:10:5b:74:d9:36:
33:4a:c2:9a:47:c1:e3:07:88:57:97:5c:54:66:42:
e9:52:73:94:06:38:fe:8b:5b:df:63:90:79:6d:a3:
dc:71:2b:fb:c6:db:04:05:b1:11:3f:98:62:ae:f6:
bc:fd:f1:4a:d9:0a:6f:6e:23:e9:d6:db:c7:35:48:
f8:8e:ab:a8:16:58:4c:e6:8a:6a:de:f0:43:14:79:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D8:D8:86:CB:BA:3F:92:A9:7B:38:FD:4E:31:11:10:3A:87:D5:48
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:65:a3:98:8b:b7:2e:b4:ff:15:91:78:d0:16:56:6f:67:24:
04:92:51:91:5e:6a:3d:84:1a:1b:3d:7e:2f:63:e8:40:c2:73:
90:5a:82:30:d8:cd:0d:11:1c:00:cc:14:92:37:f7:e9:2d:4d:
90:d7:ce:f2:d3:af:af:60:83:e1:19:84:53:3b:da:57:e0:42:
82:15:39:0b:e2:bf:5a:4b:78:66:45:55:0e:82:ed:16:e6:a8:
a9:39:10:94:15:9b:ea:3a:08:73:33:0e:c5:6f:1c:73:28:d2:
ac:58:88:ce:b3:eb:25:a0:1f:10:08:72:8b:b0:19:60:a3:d1:
8b:86:16:69:e7:48:ce:4d:18:b3:86:fc:42:06:84:a5:17:d1:
f3:e1:38:3a:aa:1b:fb:2a:bd:ce:54:0b:ff:cd:6f:f9:06:dc:
8a:82:82:be:f0:8a:f9:53:6b:f7:02:ec:be:ac:93:39:16:31:
5a:cf:ab:96:56:64:a8:54:a7:36:41:92:ac:f9:cb:a9:9c:17:
eb:94:41:67:50:6d:b8:f4:79:8b:36:e1:9a:50:0e:4b:d1:d0:
ca:fe:e9:33:b0:f1:35:43:88:43:8b:0a:40:16:36:a6:a9:39:
68:2a:e2:44:57:e8:1a:0c:2e:f5:9a:d2:7c:0a:b3:0e:0e:5b:
98:0d:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:33 2025 by rpki-client