Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: nFJWWFIaa46fiKZN6RTCpQSYldUp8FFS5q8UnjLi9n4=
Subject key identifier: BF:98:FE:D2:6E:F2:F2:E5:2B:8D:4F:37:05:38:76:18:71:F4:CD:32
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 0194BCE0810DC6C9E34F5728CBB0D82BB1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 08A6
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: PtQ40XyUDc7lVwmM0oPCllk5pigVyNZnppC5MCNSPis=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:81:0d:c6:c9:e3:4f:57:28:cb:b0:d8:2b:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=bf98fed26ef2f2e52b8d4f370538761871f4cd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:f3:6f:12:7f:c6:ac:97:99:d5:a2:87:19:
7f:de:98:ca:4a:b8:c0:37:a6:bc:6e:da:1f:e8:de:
60:0c:2b:2e:28:60:85:3b:9b:93:fa:d7:50:f0:26:
19:54:73:77:70:7d:69:60:48:d6:54:b2:e7:5b:46:
34:77:8e:51:2e:41:a1:44:ac:9b:ea:2d:b9:51:a9:
0a:43:90:58:10:8e:80:c1:c0:71:fd:43:7e:86:7a:
17:ce:0a:8a:e5:76:db:be:ed:55:39:11:06:51:52:
aa:fe:cc:16:ac:fb:6c:23:57:5e:d3:9f:ab:d5:c3:
fc:ba:3d:79:fb:ba:c5:66:c0:58:5c:c4:c5:70:3d:
46:ef:c1:b8:e6:47:93:36:f4:b1:74:fc:23:13:1a:
93:0e:93:15:43:4e:95:30:2c:9d:5e:5d:af:66:bc:
04:d2:cb:08:b8:c0:24:2f:68:95:d1:d0:84:76:ef:
16:d6:86:08:05:00:22:62:c3:2e:a0:26:f7:7a:de:
7f:0b:79:46:ab:fe:c5:34:f7:dd:ca:1c:94:20:c6:
42:5f:4f:5d:7a:42:6f:2a:e2:0a:80:2a:85:98:81:
7a:d9:66:3c:cf:bd:7f:27:46:4d:41:26:06:45:c6:
75:65:50:b7:d6:ee:13:0d:0c:d0:e6:4f:fa:2f:1b:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:FE:D2:6E:F2:F2:E5:2B:8D:4F:37:05:38:76:18:71:F4:CD:32
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:ed:1d:e4:20:4a:3a:40:6b:4a:ca:2e:b2:ad:d2:bd:8a:
56:47:1a:6d:66:7f:27:d2:0d:b0:7b:51:17:d4:e1:83:11:e5:
f3:7e:94:cd:21:1a:d9:9f:41:25:44:21:c4:88:48:70:e3:67:
81:e0:3a:4f:8c:35:2e:c4:87:13:f6:20:c5:6e:db:13:fe:3f:
b3:62:21:f0:02:33:a7:6b:12:f1:54:32:e0:af:c1:cc:09:e4:
bf:2d:78:28:aa:08:f2:52:ce:d0:86:49:d1:4e:17:73:31:da:
53:37:88:68:82:fd:cc:d1:b6:4d:df:b1:06:1d:fd:ad:1f:24:
e6:09:db:46:9f:88:b5:41:82:2e:f2:10:8a:61:03:fe:de:aa:
94:ca:1d:96:40:52:2c:d2:f4:7a:0b:1a:46:92:6f:49:1e:ba:
97:a5:86:86:1f:8a:de:b6:56:86:04:5f:0d:7e:5b:d1:94:7f:
77:c1:20:c7:39:36:63:4e:c6:36:73:69:59:b8:eb:1f:0e:58:
74:44:8b:30:ee:7a:9d:5e:42:5e:10:43:10:9d:eb:67:f0:95:
17:1c:80:33:45:0b:d7:1a:56:39:50:2c:a6:08:03:2a:60:2b:
8d:b9:8a:f1:af:17:33:d2:f5:6f:be:99:ee:b2:67:2c:2e:74:
55:4f:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:21:46 2025 by rpki-client