Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File: cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier: iC05l6l3nNDI215NSjKZNclQ7UHl12IFRlchjgvY/ho=
Subject key identifier: C3:54:AF:63:9F:AF:57:0F:76:46:CD:D0:8F:7C:48:2F:EA:6E:AC:59
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer: /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial: 0194BD178C8719364BA47504FBC8B4E127C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number: 10F9
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: XJmfBMQd9fUqPkyXE24uEaqPglQ.roa (hash: T9he77Kk0/CT36YLrvu4tkNMCxdL620Z9sEtBhVQQXw=)
2: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: uHUHVUU1qfFqXD96k+ZeOv9tqzgv3TIvWuBKEUp+noI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8c:87:19:36:4b:a4:75:04:fb:c8:b4:e1:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=c354af639faf570f7646cdd08f7c482fea6eac59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:73:7a:5e:9c:7b:03:79:a1:1a:4f:da:5d:
58:bc:47:87:bf:b4:32:80:ab:dd:e9:6c:af:d2:8c:
2c:38:78:58:48:67:60:e8:a9:eb:fd:49:2e:0a:5b:
61:6c:a5:c0:f2:21:7a:fc:03:de:71:f0:17:9e:c7:
b6:dd:52:7d:c8:85:bb:77:bd:81:e8:f8:5f:86:8b:
1d:6e:86:9f:5e:c5:34:9e:d6:04:2d:3b:f9:53:d6:
43:f5:99:6e:1b:dd:bd:94:5c:4d:0d:94:f1:81:dd:
2f:cf:8d:c1:88:cc:c9:14:66:42:64:db:8b:2c:35:
97:d0:30:bf:63:47:1f:99:47:be:48:ad:b6:52:2a:
16:9f:35:ce:1d:11:e7:9b:ac:87:6f:7b:50:40:c6:
25:a6:61:b2:0c:0d:17:63:d8:61:7a:e0:55:a8:e2:
e1:9c:86:88:0f:68:ec:b3:07:ee:cb:83:2c:f6:27:
a4:b2:e0:dd:5e:c6:78:af:e7:a6:4b:a0:f9:1e:4f:
c2:e5:5c:fd:b9:f5:f5:b8:fc:52:ba:7a:69:3b:cd:
fe:bc:c9:ca:69:0a:cb:a9:63:52:08:71:a8:2f:30:
24:ff:59:9b:ae:c6:e0:1f:77:3a:2a:de:c8:36:74:
45:26:a1:0b:2e:be:cc:2e:70:cf:5f:69:6b:bd:52:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:AF:63:9F:AF:57:0F:76:46:CD:D0:8F:7C:48:2F:EA:6E:AC:59
X509v3 Authority Key Identifier:
keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:da:5d:24:00:80:19:f9:89:7e:92:b0:6e:9c:0d:a0:64:b7:
97:c0:c8:9c:96:04:84:1c:f2:0d:aa:ab:c5:91:c8:b4:09:17:
ee:4a:a5:83:22:2c:4d:83:27:dc:4a:1e:8e:1e:a8:e0:de:7e:
0e:fb:16:63:9b:db:a5:6f:bd:18:05:12:59:d2:0f:eb:2b:9b:
f7:e5:b6:e5:61:01:1c:33:b3:5e:92:fc:f7:8e:77:ef:2f:cd:
87:d3:2d:8d:f5:de:89:d0:b7:a8:03:58:28:f2:ac:69:ef:d2:
0e:11:90:25:54:1d:45:3c:9e:87:fb:29:6b:43:dc:47:64:da:
fb:15:0f:12:bc:5f:cb:07:6e:d6:08:52:4e:da:71:89:72:33:
d3:3e:1a:ed:08:75:87:f3:cd:5b:a4:9f:cc:00:5f:99:92:09:
ba:2f:82:11:39:c4:e3:62:42:eb:e2:97:73:62:22:de:6c:76:
8d:11:c8:db:f2:fb:ca:bd:79:07:82:84:c3:a0:20:46:62:d1:
71:02:61:de:78:a4:29:38:ba:a9:4b:90:9c:86:47:4a:5e:64:
42:09:15:67:b7:34:f4:34:38:4b:0b:ec:49:78:20:57:fa:82:
35:89:f9:cd:0f:1b:c4:25:20:81:50:6b:9c:80:6b:c3:3b:3e:
3b:2c:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:05 2025 by rpki-client