Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
File: C2HQodeVPPO4YIrcECCyahttauc.mft (raw, json)
Hash identifier: Rb5Ds6EZGlO46HSzpMHWTfk5qKOinoFp4VRyheAcV5M=
Subject key identifier: BF:9C:D7:D2:4F:49:86:04:B7:76:7A:FD:15:EC:F5:32:39:D9:53:E0
Authority key identifier: 0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
Certificate issuer: /CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Certificate serial: 0194BD853693A3325E0CD94D10816C6F1257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
Manifest number: 0E1E
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: C2HQodeVPPO4YIrcECCyahttauc.crl (hash: P03uEJLOYEO1LETWFgaR3aoH5ZhXOEjssS4hd0FRpJ4=)
2: M-x2G8Au-BEiFMNxevYsVKYF8I4.roa (hash: j7AgynVh3GwRhlqpHTTZ3ADKHhLkgrB0EPxSDXlRk0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:93:a3:32:5e:0c:d9:4d:10:81:6c:6f:12:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b61d0a1d7953cf3b8608adc1020b26a1b6d6ae7
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=bf9cd7d24f498604b7767afd15ecf53239d953e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:3f:d2:a4:dc:7b:fe:e6:75:24:6a:89:c2:
b2:60:e2:b4:b3:d0:07:a5:0f:1c:6a:73:d8:1d:8c:
67:cf:d6:ba:c4:61:5e:07:62:d1:3f:f9:d8:f2:95:
9c:dc:a8:b7:38:84:66:40:f2:02:94:6a:1c:ac:94:
e0:f5:0c:25:cf:58:cf:da:18:36:95:b9:26:60:93:
ff:be:80:8d:21:4d:37:36:6e:23:1d:fa:c0:d8:82:
46:46:f1:b6:e0:55:58:1d:e0:35:34:bb:c2:bc:00:
dc:4c:97:dd:1d:dc:48:a6:4a:69:79:c0:49:6e:e5:
2c:e4:5e:93:26:09:d3:76:36:90:e3:1f:41:4d:29:
32:fa:65:3d:69:1d:af:bb:67:68:22:bf:a9:c6:5a:
6e:e0:c8:49:32:c1:52:94:f3:1a:b6:a1:b2:4c:2c:
6f:52:72:e6:bb:f7:a9:a7:4d:e0:19:bc:06:12:3f:
53:ad:6a:53:e5:1f:88:29:cb:fd:0e:ae:a9:6f:0f:
87:3f:6b:67:cb:e0:f9:83:a0:b2:4d:b4:5f:2e:53:
21:70:81:0e:36:7d:44:19:5c:74:25:11:49:3a:8b:
68:6f:4e:91:96:ed:58:68:b1:79:58:74:59:e8:7f:
85:a4:3e:5d:82:b9:63:26:b8:2f:66:fa:b3:f5:94:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:D7:D2:4F:49:86:04:B7:76:7A:FD:15:EC:F5:32:39:D9:53:E0
X509v3 Authority Key Identifier:
keyid:0B:61:D0:A1:D7:95:3C:F3:B8:60:8A:DC:10:20:B2:6A:1B:6D:6A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2HQodeVPPO4YIrcECCyahttauc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c2c271-171a-4190-bfd5-47220d318b4c/1/C2HQodeVPPO4YIrcECCyahttauc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ab:5b:bc:74:5b:13:fb:76:1e:b9:2e:9d:06:21:db:b5:f5:
98:a9:91:d5:89:fc:a9:fb:30:fd:3f:ef:54:2a:3c:c3:15:b2:
5d:7d:3c:7d:70:26:12:b4:7d:b6:99:f7:9b:2e:8b:dc:34:83:
cc:95:49:a0:a7:a6:36:18:1c:1c:ce:0e:de:ff:e6:9d:41:f0:
46:07:0f:9a:2f:bb:5a:9b:d2:d1:90:be:1c:9d:21:29:94:0a:
fa:04:13:c9:b0:c5:4f:28:af:76:84:0e:d4:5d:08:d1:ec:e6:
25:2d:89:19:f1:06:6a:09:5e:4b:c0:04:26:d8:f4:04:72:64:
57:a9:29:59:36:6e:68:f4:3e:00:bf:12:35:23:25:b9:39:99:
de:e2:62:50:04:d3:71:fc:40:43:71:f9:b8:58:17:b6:ac:cc:
9f:ab:89:0b:f3:b3:ce:2a:58:f1:72:ce:11:cc:1e:dc:66:12:
1a:c1:52:83:57:2a:b7:23:2e:dd:d8:3a:09:50:16:50:8c:f9:
d7:c6:0f:30:44:6b:b3:8f:3c:86:4d:bc:c3:65:d1:82:d3:73:
fb:8c:1a:30:ce:1e:60:20:e4:66:65:d7:06:d0:e1:19:e9:e7:
a5:76:24:d6:1a:47:85:4d:65:07:09:93:37:83:14:e0:4a:87:
41:ec:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:58 2025 by rpki-client