Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: zENZLbGzty/UxEHoSgAQPQ+S+vyl7LTxQYxvRknOwJI=
Subject key identifier: 2D:6A:59:4A:9D:8C:0B:43:E1:11:42:9D:1A:02:7B:0B:6A:1B:F7:BB
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 0194BCAA117C4B5EFEBF544C40E55BF4F6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: Hp9CBHwyKVxdyYLIGP28oatVUXBjiYndNWCmVfNj1hM=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:7c:4b:5e:fe:bf:54:4c:40:e5:5b:f4:f6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=2d6a594a9d8c0b43e111429d1a027b0b6a1bf7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c3:54:4c:ea:fa:b3:b4:24:57:ec:ef:22:16:
32:e0:c8:67:f1:17:a0:c9:27:e2:fd:cc:23:6d:92:
1d:20:25:07:12:a0:aa:5b:bf:23:cd:ba:ca:c7:d7:
1c:21:46:8d:dc:b1:57:80:97:58:fc:13:e1:f6:2e:
8b:52:07:ed:ba:2f:c4:af:6f:52:e5:a0:5b:f4:d6:
e7:2a:5b:7d:4b:25:a1:ac:17:ff:d1:21:88:a8:68:
2b:ca:cc:19:d8:25:26:c1:74:d3:14:d7:60:59:2d:
7c:e9:28:64:ff:5a:35:21:32:a0:b4:5d:05:bd:11:
3d:88:2d:97:7a:55:70:f3:20:46:b2:06:af:b7:6f:
06:ab:44:76:93:bd:0e:c1:95:73:a5:4a:3c:b6:34:
bc:02:8b:00:bc:e4:23:a9:c4:c1:82:7d:a5:98:f1:
5c:66:e2:76:82:15:19:e6:04:60:a3:9e:68:93:46:
c0:b1:60:ad:b6:f4:01:5e:2e:3c:12:a6:c2:7f:5f:
be:db:af:52:40:88:1e:cf:53:a1:80:ca:5d:48:3d:
77:17:15:3a:1f:24:59:a1:08:2c:9e:27:d8:81:69:
c5:4d:57:18:45:68:7b:90:3f:f9:10:a0:c6:45:72:
d5:be:0d:da:42:88:37:78:0e:12:6e:6c:b6:f3:7d:
e9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6A:59:4A:9D:8C:0B:43:E1:11:42:9D:1A:02:7B:0B:6A:1B:F7:BB
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:61:f7:a3:2f:e1:6e:eb:a2:d8:35:9f:bb:38:a8:e6:fb:48:
b3:2e:b7:36:6b:95:ba:8a:38:9b:b6:8a:18:d5:39:94:d0:65:
24:33:0c:07:cf:b8:56:9f:ac:d0:05:9e:8b:5d:68:fe:59:4c:
d5:89:81:be:9f:85:52:9a:9d:64:9d:62:ba:9f:2a:f8:ec:0a:
34:31:3a:72:29:ae:c3:1c:6e:9f:90:e3:a8:24:5c:a5:a4:9e:
1c:76:28:20:01:81:7e:37:bb:52:e2:fd:01:b3:8e:28:7f:67:
61:14:fd:96:3b:64:55:f5:df:eb:13:02:a6:bc:05:a3:82:7a:
c2:8f:de:32:e3:80:4c:a5:48:b0:23:46:22:a3:78:3d:33:3c:
ff:18:1c:de:c3:28:e8:6b:ff:f0:09:a2:bc:8f:cf:59:40:99:
d7:98:a5:45:c4:63:8e:36:d7:8b:38:e9:2c:83:a9:48:cd:0b:
6f:e5:31:4c:6f:fc:78:98:e3:a7:bc:00:92:0a:50:f9:58:c5:
32:a5:23:66:9a:c9:77:06:6a:b1:77:aa:30:b0:5d:22:49:aa:
74:2f:31:6f:8a:8c:f9:70:f9:e9:18:b3:51:21:8f:01:8e:e2:
75:43:28:00:88:72:fc:c4:87:17:a4:c7:65:1c:45:1d:e4:7d:
f8:c2:7b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:24 2025 by rpki-client