Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
File: ChCKKMcHsOXCwubCE31Fh5EUu5I.mft (raw, json)
Hash identifier: /g4zpwkUJweaT6H0UbU6SX0P/WWcH9tdP3doQXRkKSg=
Subject key identifier: 74:62:EA:A1:4A:8A:43:56:A7:CF:E4:59:14:E1:42:DD:C7:10:A3:22
Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Certificate serial: 0194BCE0BB4E20AFD23C60B7163ABC5E5E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
Manifest number: 0624
Signing time: Fri 31 Jan 2025 15:00:32 +0000
Manifest this update: Fri 31 Jan 2025 15:00:32 +0000
Manifest next update: Sat 01 Feb 2025 15:00:32 +0000
Files and hashes: 1: ChCKKMcHsOXCwubCE31Fh5EUu5I.crl (hash: 494ywPsWAmXvYU0OdhCU4idAroMuxpdaGZy33Hl4m2M=)
2: eO8gPZF0Xg3a6oErz3xsis78_yg.roa (hash: ARYdnlTRJg0XCA/7uUE4AwiYMl9F7vHnb8qFPrerwpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:bb:4e:20:af:d2:3c:60:b7:16:3a:bc:5e:5e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92
Validity
Not Before: Jan 31 15:00:32 2025 GMT
Not After : Feb 1 15:00:32 2025 GMT
Subject: CN=7462eaa14a8a4356a7cfe45914e142ddc710a322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:87:1a:76:98:bd:41:5f:27:c3:ba:99:a3:
24:ec:47:be:98:41:0c:58:00:7e:93:db:af:f4:14:
39:66:7f:1d:93:d4:ad:67:cb:b9:52:a0:a9:cf:cd:
e5:1f:c5:78:fb:2c:ee:f1:64:40:5f:94:a4:03:7f:
34:20:35:0e:60:d9:4a:9e:64:a2:d6:58:0f:26:ce:
c0:49:61:bb:7b:24:0b:ba:4f:7f:8e:a2:77:14:39:
34:e6:c7:78:3c:c6:32:6c:5f:d5:bf:b9:f3:10:61:
46:10:f7:39:e1:89:06:6b:f4:21:df:1b:e6:bf:f3:
cb:a9:24:f1:42:e0:3d:5f:a0:75:e4:fb:5e:b6:ce:
eb:30:62:97:a6:a4:85:d0:fd:06:50:af:41:43:f1:
52:56:fd:98:7b:aa:dd:df:d6:ca:15:8d:56:b6:3f:
c6:2b:d8:dd:b1:52:cc:b4:b2:12:1c:e6:80:4e:f2:
90:34:f5:53:c8:42:f3:e4:0f:90:07:19:c5:55:57:
87:57:fe:67:82:db:41:5a:b8:dd:19:45:16:b0:c0:
5a:46:41:90:05:dc:cd:66:e1:c4:7e:93:2a:28:61:
67:64:a7:08:4f:d6:38:47:50:03:c1:97:88:c8:d6:
cf:18:de:66:43:97:30:e4:55:56:16:c2:14:d3:7b:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:EA:A1:4A:8A:43:56:A7:CF:E4:59:14:E1:42:DD:C7:10:A3:22
X509v3 Authority Key Identifier:
keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:3c:02:3e:fc:2f:07:29:e3:df:64:22:b2:2b:f3:96:7e:
80:a4:6e:d3:85:77:e1:3f:62:21:9a:41:bc:17:d5:0e:93:3f:
6e:65:45:f0:d9:2c:14:ac:f7:12:f2:f6:d2:4a:08:a7:6b:d4:
0a:7f:79:d4:64:9e:15:9b:ef:fb:4a:4b:ae:21:09:3f:e1:51:
0d:42:7c:40:7d:75:be:49:2b:9c:fb:8c:a7:2a:96:af:69:6c:
98:a6:a5:ee:4a:46:73:92:41:bf:91:fe:cc:61:05:64:9a:ff:
3b:42:63:48:35:c5:75:3d:35:bc:9b:2f:b4:6e:3e:68:e9:f6:
2b:2d:c2:81:8b:68:b6:64:3d:4c:49:6b:b8:85:d3:34:cf:2a:
be:82:04:d2:93:e9:11:35:8a:ae:39:15:54:16:95:f9:54:9a:
09:19:13:00:7d:15:29:62:36:ba:8a:96:62:f9:c4:b8:5d:18:
84:69:3b:83:1e:15:89:32:e6:61:6f:56:e1:72:a7:70:09:18:
03:6a:74:fe:40:f2:d9:23:50:ec:bd:e3:9d:f6:ce:7e:9a:2d:
63:05:b2:a2:2a:81:4d:57:1c:56:45:2b:15:15:b9:76:17:7a:
2c:f4:47:56:d6:f8:76:5e:52:1c:c7:a9:99:a7:7b:46:20:ed:
1e:d0:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:23 2025 by rpki-client