Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json)
Hash identifier: bqdAWBqoqwpDCNJVaB95zxtnvEQJD7siVIhMnT+ad5U=
Subject key identifier: 7E:E0:4B:EA:61:00:B5:B5:F6:7C:BA:4F:29:D2:A8:6B:48:87:A1:68
Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Certificate serial: 0194BC3C64BB8AC8D21F938E2F79E874746C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
Manifest number: 04AF
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: Ib/7tl+v3D593LFh1AoYMOmmHSw7us1s0dNjwGh2dtc=)
2: m3oyez4opl0YbbQ1CR2fl2aO7F8.roa (hash: FqYvVOjK/elvRD3q2xJweF4ZvocMCS6cmWVMXbFh3Mg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:bb:8a:c8:d2:1f:93:8e:2f:79:e8:74:74:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=7ee04bea6100b5b5f67cba4f29d2a86b4887a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:9f:78:00:cc:4e:e2:ca:7a:fb:29:32:c0:
17:5c:d9:6b:85:fd:3b:ea:87:f4:ef:54:e0:e5:bb:
b0:26:3a:64:00:51:02:89:1b:a1:9a:da:bb:f9:4d:
35:86:a4:0b:4f:ad:d4:cd:d7:57:5b:d4:5b:58:db:
39:ab:49:07:ad:ed:c2:25:6e:6c:2d:7c:29:a4:75:
d5:23:59:4a:c6:e9:05:9b:43:4e:8d:c3:7c:4b:9b:
ad:02:d1:75:e0:ba:4f:37:81:61:51:3d:64:7f:26:
6a:f1:d3:c4:db:99:e4:4b:fa:f0:38:b1:ac:e9:e1:
23:0a:5d:df:06:65:ad:ca:70:76:33:6f:db:8f:6c:
45:34:77:54:41:78:31:77:2a:a6:16:db:a7:8d:b3:
f8:9f:a2:79:ea:be:ab:27:e2:ec:de:5f:d5:54:b2:
b9:cb:8b:3e:39:cd:2c:07:97:fd:a3:59:0f:02:d2:
82:a5:90:fb:4b:7a:4b:5c:f1:75:a9:f9:b7:cf:ee:
8a:ee:70:01:a2:a9:50:c0:e4:a7:0a:69:7d:91:5c:
9c:85:f6:d8:e7:c2:35:2f:a6:48:50:ea:5a:94:1d:
c8:b3:69:96:ca:dd:f7:2c:67:28:fe:17:e8:6a:44:
90:eb:3d:ba:93:6e:2f:5f:bc:ab:06:9c:6d:99:23:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E0:4B:EA:61:00:B5:B5:F6:7C:BA:4F:29:D2:A8:6B:48:87:A1:68
X509v3 Authority Key Identifier:
keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:dc:c8:f2:93:5a:fc:0d:35:da:c5:b4:89:c2:04:9a:76:a9:
f5:f4:f6:8a:36:ba:f4:6f:38:e1:00:ab:eb:eb:db:b8:18:fa:
83:df:27:fe:c6:6e:b7:e1:8d:0d:75:c1:6c:6a:2c:85:0c:fe:
c6:41:8d:d4:ac:0d:0d:f9:1b:f5:f8:78:89:88:ad:ad:2f:b2:
e4:e3:d7:66:ce:3a:16:28:18:45:59:58:39:0d:78:be:aa:0d:
5c:c5:80:78:c4:8f:fb:39:08:a2:b6:e7:f1:43:48:73:7f:52:
ad:54:e2:12:9c:9d:cc:0e:e8:22:29:fb:5f:68:c1:6c:5b:f5:
cb:08:01:ce:cb:85:83:02:25:11:9c:38:54:63:96:1a:aa:7e:
ee:9a:5a:2c:36:b3:bb:8d:80:cd:b5:82:5a:0d:4a:a8:69:8f:
36:14:59:86:a8:3a:92:5b:9c:e2:0a:70:71:89:2e:36:09:f2:
c2:bd:21:31:e6:ba:5d:6a:fe:e4:95:d0:e5:70:1c:cf:a6:1a:
59:03:d1:22:b4:b9:ce:f8:09:bd:6e:1a:85:8f:42:1a:7e:2d:
63:cf:51:0e:62:72:53:62:10:10:d4:e7:1c:be:eb:2e:d1:c3:
32:6b:8d:ba:bf:7a:53:48:7d:2e:d6:d1:b3:06:bb:7e:92:4d:
e6:ff:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:11:06 2025 by rpki-client