Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: miXwfKEpxjoW19OpQvN4w0Ul0rXyy2qYKqkQT59js3U=
Subject key identifier: 3F:AB:46:F5:2D:18:8A:FF:3F:16:CF:89:DB:B1:26:6F:DC:D1:A2:22
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 0194BD4E6ED3F2D35ACB0CDD561798BA6072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 06F8
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: s1s5J6xYGw10NQtK0VYtYjSI5LcBZM+l8FyY4+yB85I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6e:d3:f2:d3:5a:cb:0c:dd:56:17:98:ba:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=3fab46f52d188aff3f16cf89dbb1266fdcd1a222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:28:76:ff:99:d9:c9:73:e4:63:1e:01:2b:
87:56:5c:57:37:dd:28:fc:cf:68:39:2d:4e:0c:98:
49:31:40:50:96:39:44:a9:03:ff:78:78:a6:d1:84:
ab:35:ff:a7:79:2f:25:1d:03:03:9c:66:d8:b7:6e:
bf:25:7c:0b:18:a0:c1:c5:76:21:81:49:11:24:a6:
1e:bc:51:4d:fd:58:39:6f:ab:ad:cb:bc:1f:5b:0e:
aa:39:83:27:15:6f:9a:73:fb:f1:01:a9:e6:fa:41:
17:6c:39:2a:7b:78:55:92:96:ba:e3:d9:50:f4:87:
ef:f2:bd:b0:4b:c8:5f:48:5a:57:e8:79:db:3d:34:
ee:a7:6b:0e:02:e9:87:59:88:3b:5a:6b:14:e3:f7:
a3:1b:86:77:07:55:14:0c:78:b1:12:be:03:0e:89:
f1:a2:4f:1e:d5:c6:f5:8a:26:b8:37:dc:32:c5:c3:
64:29:0d:61:c5:e9:7c:ca:f1:60:16:b2:4a:d2:ae:
e6:0a:b8:31:95:0c:1b:60:22:fc:49:eb:a7:5b:11:
de:86:03:79:9e:cd:ad:18:af:60:9a:2a:74:94:55:
bb:98:6b:39:84:73:b4:8a:0d:74:e6:00:1d:9d:ff:
92:53:2a:db:e9:c5:84:02:fb:06:ec:60:02:e0:0d:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:46:F5:2D:18:8A:FF:3F:16:CF:89:DB:B1:26:6F:DC:D1:A2:22
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9f:50:0e:9e:21:e7:fa:a7:66:60:21:2f:22:d9:a3:03:7e:
eb:b1:a5:43:21:3e:1e:83:d1:f0:d7:1d:7d:b4:52:b9:ea:ea:
71:c7:bc:5b:2b:a8:71:f4:52:4f:48:a1:8d:66:d8:a7:3c:d7:
c1:50:5f:cf:24:7c:89:6f:3a:aa:38:08:84:14:61:43:7f:48:
73:41:3f:9c:68:df:33:a7:af:95:1a:2c:b9:09:dd:16:6a:60:
95:97:6f:2f:97:e5:67:33:56:37:76:6c:96:53:56:6e:6e:a2:
0f:db:ab:2e:77:0e:a1:1b:77:6b:67:14:fe:25:f1:e1:fb:d1:
ad:71:96:16:88:ce:c3:47:3f:69:13:3f:4b:5e:0e:af:ca:bb:
3d:75:95:17:52:3b:cb:cc:72:ba:dd:de:f0:0b:1d:f2:2a:44:
4a:54:09:d5:4a:a7:40:40:62:66:64:ef:56:4f:e5:d3:c6:d1:
99:90:46:a5:8a:34:d8:5c:47:85:8b:c8:36:2a:cc:26:5e:0c:
8f:9b:1a:7f:03:3c:97:2a:3c:58:73:06:f1:5a:f4:45:65:32:
84:47:9c:dd:ef:5b:75:44:fa:c4:29:43:58:b3:71:4a:20:ba:
41:0e:dd:77:91:fb:9b:4e:ee:cf:36:f7:dc:b4:f7:5c:2c:c5:
ad:48:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client