Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json)
Hash identifier: XRJWAH2vrZ8qsP9oGpZtoq5TmeUUhzQPtoEV5ke9KUQ=
Subject key identifier: A4:F1:30:63:F4:D0:41:DC:24:20:C6:18:8D:B5:0A:68:F9:FD:49:9B
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 0194BBCDDC8CFAE8E7699B0F4A2011CFAAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
Manifest number: 083E
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: DjLNcCn1Xtr/i+1Vy/s3QWQP4PbOtTacJNbQKH46G8M=)
2: RymBY7lnNBMXp_yUGm6cXmk9pIY.roa (hash: NXhw0vi4/QtrtywYV0kwabkAShMb2W3sLGUUgAEfvq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dc:8c:fa:e8:e7:69:9b:0f:4a:20:11:cf:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=a4f13063f4d041dc2420c6188db50a68f9fd499b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ed:c2:59:f8:66:89:61:af:8b:b5:76:97:5e:
35:17:fe:3a:3a:97:68:45:d3:5b:9e:fd:81:f2:a7:
06:2a:7a:6c:50:e4:8b:dc:24:3a:b6:cc:78:f0:73:
93:87:99:e6:1c:12:0d:13:a9:dc:62:de:e6:b1:3c:
15:b9:c5:2a:f1:db:06:f7:43:7b:39:ef:6f:e4:5e:
0e:6b:f2:7c:ee:0d:e3:d2:5f:dd:8c:70:ac:04:54:
43:89:19:c2:3b:b7:57:b7:1e:fd:c4:76:32:d6:a6:
ba:8f:f6:d8:95:e6:2c:ab:12:e0:05:d9:b9:b5:c2:
9b:a9:5e:ad:5c:b5:3c:63:07:21:19:0d:88:42:17:
e2:3b:d7:3f:21:c0:c6:53:2f:81:18:83:7a:7d:3d:
2d:bb:cc:98:26:e4:b4:3a:1e:90:d5:16:d8:c7:f2:
c2:16:02:4e:a7:38:66:34:78:60:35:5d:6a:28:bd:
ab:fc:40:76:4b:9f:4c:9c:0c:37:67:ca:0f:a8:4d:
cf:28:9e:b1:47:af:6a:c0:2f:b8:ae:93:be:83:0d:
7e:d2:19:1d:d2:83:0b:4c:7f:2a:21:06:4c:f4:f2:
43:ff:10:34:94:2e:cc:3c:df:76:5c:49:09:cf:1c:
62:66:9e:21:f1:eb:be:81:3c:1d:ab:88:be:21:77:
9d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:30:63:F4:D0:41:DC:24:20:C6:18:8D:B5:0A:68:F9:FD:49:9B
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:01:68:f8:ef:0d:7e:e6:83:8b:41:d4:47:49:87:a6:a8:
54:2f:8a:73:cd:8d:bf:cf:f8:7d:fc:53:7b:23:46:f1:d7:34:
4d:58:79:3c:43:e4:93:b7:75:2c:e0:5b:34:6b:49:4c:a6:a2:
25:6b:40:50:4f:cd:e6:a5:a9:00:ad:ee:75:9a:ab:ca:0d:a6:
56:8b:a8:db:bd:a5:89:25:d6:3f:52:d0:63:75:ac:b4:64:24:
35:28:a3:64:31:aa:a9:9e:0c:0f:c9:e0:00:cf:5d:3d:fd:34:
2f:68:39:0c:8a:37:ab:02:48:1e:54:7f:fc:17:ba:29:19:06:
88:55:7f:f5:c0:af:ad:7e:f3:1b:c4:67:7a:d9:ee:c5:7f:29:
b5:b1:be:ae:39:89:7b:c8:91:02:a1:ec:f5:5f:e7:49:32:e2:
de:b2:82:61:1a:fc:40:2c:86:9b:31:57:91:bc:65:07:e6:44:
ec:20:0b:5d:1b:50:f4:0b:bf:9d:68:9b:06:2a:de:d2:a7:29:
d2:a6:97:6c:52:ac:fa:34:73:24:a7:4e:66:b7:d6:ba:c6:c3:
50:3a:c1:55:2a:3e:81:11:50:71:ae:47:c3:26:29:0e:3b:84:
bd:df:d0:80:9d:59:27:c2:6c:9f:53:e3:29:d1:ee:be:8c:0c:
d5:64:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:53 2025 by rpki-client