Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File: cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier: F1yl+vw4DEL2rDTYXXf13RaxcsrX2Abfhd0o+G7QV/c=
Subject key identifier: 95:60:C3:AB:1D:A3:8C:80:8B:70:F2:79:41:8A:3C:AC:BA:85:B6:96
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer: /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial: 0194BCA9D7FFD4B3B7508086B5F923733233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: S+N9Pub2wL94v69IFKLGZ5hydyPnAjFr7lNpOxjWyKk=)
2: vCqdKv7R0SPqg2beE-raqVkN9dk.roa (hash: qav8+RSTbcmeaTuiZ2SE6ePjqRAE/0kbvGatcxDfqj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:ff:d4:b3:b7:50:80:86:b5:f9:23:73:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=9560c3ab1da38c808b70f279418a3cacba85b696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:2c:9c:f8:06:06:76:2a:12:7e:1e:86:9b:
c8:c4:50:0a:cb:4b:78:eb:bc:aa:8b:82:95:7a:7e:
2e:08:65:06:6c:c1:d7:89:f3:8f:a3:4d:c7:52:60:
5d:92:04:f1:2f:8e:8e:d8:ec:d7:8e:02:c2:18:e0:
6d:0b:8e:ab:7d:d6:37:ca:05:e4:58:c9:9f:1e:61:
99:24:d8:68:9c:21:6a:30:9a:9a:f6:fa:5f:03:e0:
57:ed:14:a1:fe:0d:3e:31:fc:52:80:fd:e9:d1:4c:
52:1d:3c:e3:fd:af:5e:e8:f3:c7:4d:d7:71:b2:8c:
5f:e8:f9:61:1a:55:1e:29:ab:0f:0a:f3:ad:b0:c8:
a0:e6:bf:46:18:8e:25:95:6c:fa:4d:76:ae:26:a8:
f8:90:8e:ed:aa:57:18:19:a6:28:f1:1e:92:ab:29:
aa:2f:b7:b3:37:75:fc:94:04:36:39:4a:13:e1:69:
c1:5b:a3:a2:d8:89:67:d4:59:d2:97:c8:80:98:74:
cc:ae:55:82:43:df:97:b9:58:61:2d:9d:dc:42:2a:
8f:cd:12:c4:ce:f1:3e:12:f2:72:34:92:0a:76:79:
d9:73:2a:b6:41:a9:80:c7:d8:11:de:20:f2:a3:c5:
75:81:12:f5:08:32:fb:2a:7f:43:a4:d6:7d:c4:14:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:C3:AB:1D:A3:8C:80:8B:70:F2:79:41:8A:3C:AC:BA:85:B6:96
X509v3 Authority Key Identifier:
keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:f0:b0:a3:75:08:27:a9:68:51:56:f5:0f:30:6d:45:62:77:
39:e3:96:c1:5b:3b:1f:97:99:60:30:77:af:47:a4:56:cc:90:
eb:60:61:c1:51:8b:d2:1c:3a:77:99:dd:d6:ba:2c:83:96:5f:
ff:47:d0:51:a4:50:3c:3a:3d:6f:5b:34:1b:86:82:87:e2:ce:
19:72:ef:96:7a:06:01:4a:59:cf:b8:35:5a:59:20:6a:61:2f:
f7:8f:4f:4f:9f:85:3f:69:c4:3b:97:01:95:1d:f5:57:8c:98:
7a:51:a3:b0:dd:12:85:0a:6f:7c:68:e5:4d:73:d9:7f:ad:be:
43:e5:c2:ed:a2:eb:04:2c:d6:94:5a:bf:6b:3e:2b:87:75:50:
c9:cd:dd:25:29:a9:af:bd:6d:83:13:55:19:66:30:d8:6e:bf:
2a:e3:61:a0:12:77:68:bc:f5:3a:e7:42:a2:7d:5d:24:7d:dd:
ac:e3:8a:cd:60:e9:4f:e8:04:de:63:73:93:5a:30:ee:14:f2:
b0:ec:87:5f:04:7d:39:a1:70:8b:36:ed:7d:aa:ee:13:a2:7b:
5a:91:5e:e8:03:ee:8c:a1:45:58:99:0e:c2:03:a9:e7:5e:cc:
72:60:1e:83:4a:85:31:eb:f6:ef:81:91:b8:54:a2:7f:2b:19:
1a:cc:60:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:05:34 2025 by rpki-client