Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
File: ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft (raw, json)
Hash identifier: ApXx/hQCJW2SxjvhRg0TWZiyvT2MpSZZNqmOFe75+EY=
Subject key identifier: B3:1D:60:0A:36:2E:38:F9:DB:5E:9E:A1:BB:01:31:C9:74:11:B6:8D
Authority key identifier: 72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
Certificate issuer: /CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Certificate serial: 0194BCA98DB71D12DDBF8A5717AAC49B50DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
Manifest number: 136B
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: VrfAH_t4lhcT9_lIIVTsmy_w5Sk.roa (hash: gtGHVjj82BsFkQYMxwbB17zwC22NGtPgagxS3d9L3fg=)
2: ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl (hash: daHNcn0ImW+Rp+A9eG1hMS+9ZUuUiFjOh3GV1bfdL/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8d:b7:1d:12:dd:bf:8a:57:17:aa:c4:9b:50:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72426c3d11c9f24acc0a1d8454cbc9604865a809
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=b31d600a362e38f9db5e9ea1bb0131c97411b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:d8:bc:45:a0:ab:d3:b5:55:5f:d7:68:e9:
79:4b:cc:69:5f:05:80:34:ff:f9:6c:01:98:d4:86:
dd:9e:64:fc:1e:f1:87:59:48:55:6a:9f:3e:58:2b:
4c:06:a8:0f:59:a6:08:66:5a:f6:5d:60:18:f6:5b:
00:6b:dc:8d:32:5b:4b:11:45:d8:96:7c:ba:ba:cc:
09:d0:e8:8a:15:70:76:ed:93:77:ff:6b:30:73:53:
68:85:4c:8e:63:c7:82:91:68:e6:d6:b0:9f:71:a9:
3e:2a:a8:71:a8:79:ef:2a:77:6e:0e:88:3e:45:b4:
a1:08:29:b2:7a:fa:97:e4:d4:53:ff:e9:1f:cb:6a:
af:0a:17:02:39:39:63:0d:24:ff:b6:8f:c8:d5:57:
de:1f:3e:46:61:ba:d1:23:f1:b8:96:28:f1:f8:95:
5c:95:0c:7a:f5:00:1a:b2:b3:c3:81:5a:63:ed:7d:
1b:6b:43:ef:f9:ed:04:b4:ce:4f:32:3e:eb:65:01:
42:57:c3:9f:64:d9:42:22:52:3a:fd:47:68:f5:6b:
8d:61:74:fc:17:86:91:b5:99:81:92:ac:27:b8:2d:
3c:c2:ff:e0:db:c9:81:54:3d:98:39:7e:6b:41:ac:
03:f5:ad:e6:30:ec:6a:24:df:39:11:69:bc:77:f7:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1D:60:0A:36:2E:38:F9:DB:5E:9E:A1:BB:01:31:C9:74:11:B6:8D
X509v3 Authority Key Identifier:
keyid:72:42:6C:3D:11:C9:F2:4A:CC:0A:1D:84:54:CB:C9:60:48:65:A8:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckJsPRHJ8krMCh2EVMvJYEhlqAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4c1b34-9c70-411f-b01f-be90b0fd1f78/1/ckJsPRHJ8krMCh2EVMvJYEhlqAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:28:1f:97:bf:a4:c6:01:fe:0b:ef:77:ff:02:7e:54:fb:76:
a6:8d:63:37:50:c1:21:4a:49:d1:e6:15:1c:65:13:3e:0a:f0:
a3:b0:04:24:f5:b3:68:e0:33:fd:e2:a0:35:25:8f:70:05:3b:
53:bb:bb:37:9c:dc:79:0f:25:a2:e5:83:01:d6:73:6c:41:c5:
75:ef:8f:ca:d8:d0:e5:49:e3:e4:9f:51:71:b1:80:d8:3f:1b:
42:e1:a7:89:86:68:9f:c6:62:b5:20:26:ad:8e:c4:c5:12:57:
93:63:58:44:de:58:12:9c:fb:6c:13:bd:b9:f9:03:3d:74:0b:
e3:71:a2:8c:bc:7c:fe:04:d9:df:61:90:1a:eb:5c:f9:bc:37:
aa:29:68:af:04:81:c3:c0:a9:aa:b2:e4:cb:9c:ea:3d:65:1e:
43:f1:02:fb:26:0e:c1:18:ce:43:d6:be:17:e3:02:84:54:52:
d0:d6:21:0d:a5:c5:d8:bb:ff:a6:49:94:2f:48:fc:62:5d:25:
88:e6:8c:05:34:b4:8f:84:d2:a4:1e:f2:73:4a:74:2f:08:29:
0f:43:7e:5b:7f:1f:28:01:f0:9b:2e:c0:9e:0b:0e:e7:b8:02:
16:2c:01:79:e0:2b:5f:ad:2e:da:3e:73:a1:b7:c6:a3:61:d3:
1d:f6:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:36 2025 by rpki-client