Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier: pu3mj3yj36SrBYBT8dToMbgp7RKBJQJo684ErAzO0E4=
Subject key identifier: C6:48:AB:50:CF:E3:7E:32:3D:71:44:AB:8A:EC:9A:50:FC:34:BD:CC
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 0194BD17B150FD2CBEF2CB47F14F25F19058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number: 1083
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: x35ZxbDt5vVerIrdmaNS9RO6FOHi/PMzg8FQjE6xSM8=)
2: h2Obz04tWVoFV1IV3uDXz1vL6Zs.roa (hash: h0MwBLTN+JJQsx/mfZTZMMTWn2GxCEc+/y4Gt6r0rFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:50:fd:2c:be:f2:cb:47:f1:4f:25:f1:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=c648ab50cfe37e323d7144ab8aec9a50fc34bdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:48:7a:82:19:76:2f:d9:74:df:33:9f:74:
c5:2b:9e:fc:0d:c3:a1:74:6b:76:cf:ac:bd:88:0d:
f7:c3:de:cf:5f:83:48:72:00:d4:b0:f6:ba:19:19:
c3:8d:2a:11:45:86:4d:54:38:b3:ec:ac:85:dc:78:
f6:d8:4e:03:f8:14:af:e2:eb:94:38:61:d4:73:b6:
ba:44:e7:b4:ce:98:5e:54:56:98:be:2f:f7:0d:dc:
27:f5:a4:bd:68:dd:dd:42:32:9b:54:95:e3:1c:0e:
e8:f7:17:b5:f1:eb:ca:4b:d2:60:11:bc:af:69:24:
8b:95:73:e8:90:d9:78:4e:16:d3:98:1c:a3:c6:e4:
eb:80:7a:7e:91:83:66:b2:97:a5:2d:53:5f:18:3c:
8c:9b:e8:cc:aa:ba:2f:36:66:4a:6f:02:91:f0:22:
9c:b2:37:87:04:ed:78:2c:d0:ce:77:9d:e1:ca:26:
11:58:cd:18:c2:d6:3d:61:ec:1a:c8:b4:cb:43:f9:
18:ec:3a:91:21:12:47:6d:06:da:fa:55:23:de:1c:
6e:95:04:ac:b0:10:3b:6b:42:37:4b:fd:6b:62:fa:
2f:2e:fb:e0:e5:e8:b8:e2:97:d3:8d:87:c9:1a:da:
0a:b5:fe:7e:d5:b1:6d:42:a3:6e:e1:96:0b:81:ea:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:AB:50:CF:E3:7E:32:3D:71:44:AB:8A:EC:9A:50:FC:34:BD:CC
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:58:92:16:bf:d2:85:b0:22:3a:0d:c7:50:8f:c7:d7:89:80:
a7:35:b7:7d:ac:40:5a:b2:c0:e8:6d:99:51:55:51:50:04:12:
e3:ae:41:eb:dd:ff:56:3f:72:a2:cb:49:26:ec:af:bb:a3:d1:
09:f9:c8:16:37:1f:11:ad:63:f5:b8:f0:5e:21:74:7e:dd:43:
36:57:28:9b:c5:c5:59:5c:13:ee:b8:23:a9:0a:dd:26:e6:d7:
08:f1:95:6f:c2:7c:33:3b:c8:5f:e2:d9:94:b0:1b:58:06:f4:
f1:52:5a:d3:7f:77:25:97:d4:02:4c:c2:59:8f:57:b5:97:c4:
75:74:aa:11:e4:cf:92:a9:a3:57:b9:0f:60:e1:e6:4c:18:20:
2d:25:c2:92:29:9c:c1:9b:68:74:fa:76:f4:8f:1b:fb:ed:ef:
ca:51:b8:c8:50:47:f7:e5:5e:3e:da:8b:85:b7:7c:ee:93:4f:
8a:cf:9c:19:ab:03:fb:3c:6f:31:94:aa:8c:3e:a6:81:a2:92:
80:c6:1b:a4:9e:05:7f:2d:96:1e:c5:30:fb:15:00:35:3f:35:
fe:d5:ab:d2:37:ea:0b:7d:ff:cc:4e:74:9f:93:d7:2c:97:b3:
f5:85:70:e5:44:3f:22:e7:a5:a6:80:1d:cf:90:94:41:09:62:
a8:9b:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:23 2025 by rpki-client