Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File: CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier: AVQaK1l93/diriZaikpZtLe7CtIpN9LDzQ3EJNl/JII=
Subject key identifier: 51:82:35:AD:7C:24:E0:08:2C:A9:F8:D3:B6:56:EC:CA:18:55:FB:62
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 0194BCE0DDE62DC30FA921CF2724A66D6A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number: 03C4
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: qCL4d1JuCrOIljXhfuphyqpRTLQGvIZ/lx5PLmCVMRw=)
4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
5: qCfNSjbitI7Et5lSX1rtmaive_0.roa (hash: 1fS+iseUgmiw070ru2CUkkEKwBoPzkT1Bp7jleLafaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dd:e6:2d:c3:0f:a9:21:cf:27:24:a6:6d:6a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=518235ad7c24e0082ca9f8d3b656ecca1855fb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:20:d3:00:43:45:af:77:4d:50:48:3a:47:
a6:13:e4:cc:e9:6f:86:9f:aa:93:c2:5d:49:8c:bf:
d1:44:cd:b5:a8:d9:38:ba:dc:ad:8c:e1:ee:4a:5d:
5f:a2:0c:0d:e3:56:e5:8b:c8:18:8a:65:f8:a8:a4:
f0:fc:4e:b0:eb:f8:62:56:5b:bf:01:cc:d6:ec:d3:
c1:e1:6d:be:80:61:54:16:9e:6f:37:54:c9:fb:0a:
66:58:f8:cc:f4:15:3b:39:66:cc:a2:2a:6a:6f:c1:
fc:b8:ab:4e:4a:66:b8:45:0e:d6:99:28:d6:ce:6e:
78:5f:ef:ae:1a:e3:06:64:9f:22:f1:b1:78:61:50:
6c:82:54:c6:07:44:cb:dd:7d:7e:2d:dc:b9:9a:b7:
3b:38:ea:bb:51:a6:dd:95:82:91:73:a1:5c:6f:74:
fb:8b:13:2a:ee:0e:d4:ff:2f:f6:02:94:87:2b:68:
f1:e2:f1:9b:38:e2:d9:41:bb:6c:50:4b:12:72:36:
2d:a5:15:4f:f3:e0:f5:dc:9f:1f:5a:fc:73:aa:86:
24:11:d7:fd:23:09:eb:f1:15:43:d4:bf:bf:4f:eb:
bd:88:ca:52:c4:35:c1:5f:6d:fa:43:2c:cd:2a:ce:
96:12:26:b9:4d:85:e6:55:6f:61:77:b1:b8:77:b8:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:82:35:AD:7C:24:E0:08:2C:A9:F8:D3:B6:56:EC:CA:18:55:FB:62
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:72:3a:08:b1:13:02:2f:a7:3a:9e:05:1e:aa:c3:33:d0:e3:
31:8d:9b:cd:6e:df:5a:cf:0d:01:82:26:c2:2d:d4:b4:bd:f6:
98:c3:48:3b:e0:5e:97:d0:03:3d:a4:06:64:f8:a0:92:18:6e:
29:df:61:37:1a:da:e4:81:a6:bc:a5:f3:7d:ca:b3:46:21:12:
a8:b9:73:9f:2f:f6:04:5a:ad:67:e6:6c:0c:c8:f5:b0:56:49:
09:a9:d8:aa:6e:a0:31:77:e9:02:fd:6b:dc:08:bf:83:c0:bb:
1f:39:8a:a6:9e:da:ba:45:f9:d4:54:a3:24:c8:e2:a1:8c:9a:
73:61:76:03:82:1c:1b:29:59:9b:b2:25:3a:76:69:a6:9f:ed:
32:91:37:e4:0c:a6:e4:d1:62:71:da:5d:86:64:10:c9:70:fa:
c0:c4:1a:a4:37:d0:97:e6:98:b3:f4:58:c6:04:62:7c:a0:cd:
8a:2c:8a:61:84:3c:b1:72:a9:22:d0:9d:4f:a0:52:1a:52:6b:
47:10:9d:2a:89:5b:ba:85:9a:59:f5:99:f4:13:12:ed:e7:23:
fb:af:72:6b:91:1f:c9:8c:f7:1c:23:6e:76:3f:3b:5e:38:65:
0c:32:1d:f5:4a:61:0b:c4:4a:82:49:ae:88:18:08:d4:b8:ab:
be:a5:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client