Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
File: CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft (raw, json)
Hash identifier: Q2Kd2vQHkNkF+OMFoR6Sm1mKJeHxu25pD5W1apqWRQc=
Subject key identifier: B1:87:B1:3C:1F:19:75:9C:25:A0:E0:AA:95:A2:60:02:70:3C:91:BC
Authority key identifier: 08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
Certificate issuer: /CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Certificate serial: 0194BD1780B5945978C817743B149BEFBC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl (hash: /qSTisZOb+ChFA9c5WHN3Q9jH27rRQwIFdRDyXjKaOA=)
2: yW1cS9Mx29vTOamtTRsFT6bLIXw.roa (hash: PZBuxnii3Pq+stD6k3qQUstIcPbrvHDexZJKpw32ONQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:b5:94:59:78:c8:17:74:3b:14:9b:ef:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a5c3aba421b78a7d5d09b75b4ce3be5273caac
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=b187b13c1f19759c25a0e0aa95a26002703c91bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:9b:10:10:e5:40:2a:8a:ce:76:83:42:05:
63:5f:33:7f:e8:6f:e8:3e:09:54:d6:46:93:3f:50:
a8:0f:1b:f8:0a:66:90:b4:39:2b:b5:b1:93:99:05:
42:e2:18:35:84:10:3d:b6:8a:5a:69:a4:f0:2e:30:
51:b2:d9:f0:24:32:6d:bd:13:b9:c2:dd:5f:73:a0:
e8:bf:a0:fb:7a:02:97:6d:e0:94:a3:7d:88:b1:ad:
05:e4:0c:d3:83:55:dc:41:0e:8c:03:cd:2a:6b:15:
2b:45:7a:f7:1c:f1:26:1b:54:43:ed:2b:68:78:d9:
15:e0:21:e8:84:1a:95:78:2e:35:2e:44:32:2e:c2:
0e:1b:c2:a6:11:38:1f:80:84:fc:2f:78:be:d5:bc:
30:ca:96:1f:8b:12:69:69:b3:20:27:1f:63:37:ec:
a3:96:88:bd:a4:68:1f:94:88:48:fa:48:7a:10:08:
5e:9d:47:95:7e:ba:53:0f:5f:74:88:21:38:f6:58:
16:6e:4e:08:2c:b7:21:d9:09:e2:ee:48:45:e5:91:
39:ed:fb:ab:d1:eb:8f:ba:3b:6a:b6:76:1f:d0:28:
08:cd:92:18:7d:28:6f:d4:e0:91:18:83:2a:2b:53:
c2:43:31:b7:94:08:0f:27:bd:17:bd:4d:c6:9a:d0:
42:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:B1:3C:1F:19:75:9C:25:A0:E0:AA:95:A2:60:02:70:3C:91:BC
X509v3 Authority Key Identifier:
keyid:08:A5:C3:AB:A4:21:B7:8A:7D:5D:09:B7:5B:4C:E3:BE:52:73:CA:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKXDq6Qht4p9XQm3W0zjvlJzyqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7bd8cf-2a61-4b74-860d-364fae7c72c4/1/CKXDq6Qht4p9XQm3W0zjvlJzyqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:03:fa:d3:01:88:f2:bb:f9:59:8a:92:81:ba:4c:8c:78:
9b:71:f4:f2:83:04:c7:28:04:dc:e7:68:63:1d:78:a3:3c:7c:
dc:cb:e7:0e:dc:1b:70:44:ea:3e:98:cb:1a:fe:5f:e1:46:7a:
e6:bc:dc:89:9c:be:a8:2d:7c:2a:d6:d7:e6:c6:9e:50:e4:04:
45:f1:7e:4a:53:eb:9a:d0:9b:81:e7:45:d7:02:1b:28:30:8f:
2b:a1:1a:33:54:d6:ea:60:e7:d2:14:3e:03:9e:4c:ad:74:20:
03:f8:75:67:0c:5f:3f:a2:12:43:52:97:76:32:78:d6:ce:3c:
7d:eb:33:a8:0c:58:39:1f:d9:e2:c3:35:94:b6:c9:3b:49:5a:
d5:38:d7:b3:c6:1a:51:39:3e:96:dd:30:2e:e1:d7:b4:94:62:
68:07:09:0d:ab:70:65:e1:76:11:92:5c:48:61:7b:64:1f:b1:
98:d3:3c:7a:02:73:b6:7f:b2:78:1b:52:e1:25:80:65:2e:79:
39:f8:87:9c:4f:72:35:d4:82:91:2f:6b:e8:67:38:c9:ad:75:
35:a0:b0:0b:89:6a:b9:ab:ab:75:07:82:51:f0:4c:99:bc:60:
ca:ba:e6:4a:18:94:60:26:3a:16:44:d1:55:98:a7:c4:73:3b:
9b:09:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:20 2025 by rpki-client