Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File: CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier: 9Qts3p1E3DMJhPbKczwfSE34cJKuifGPl/YxQZtK+uk=
Subject key identifier: 1F:3B:D1:B9:49:78:50:1A:D0:2F:DD:EA:AC:90:15:C5:81:62:48:04
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer: /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial: 0194BD1752B345FC6E025DC57F223EB8604E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 61-G3WXkR-SwbN4v7xZM_7MiENo.roa (hash: dPwb3l0zAU2N1RIH5n+vuaC+VR/dScikzlcMxqnd6Lg=)
2: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: 4ocm+EeXPo7zGnexdWIhnH51mir+J3rqJBwALz5l5Z0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:b3:45:fc:6e:02:5d:c5:7f:22:3e:b8:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=1f3bd1b94978501ad02fddeaac9015c581624804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:eb:05:83:bb:24:e5:de:84:1e:26:ea:33:be:
e2:46:c8:f2:02:0e:1d:bb:aa:ec:b7:ab:6a:dc:ed:
ad:58:e6:8d:d5:03:ef:0c:ef:1e:b5:50:ef:2c:99:
a6:3c:80:b1:60:1e:d0:16:a8:d8:5d:7f:15:d1:0b:
25:23:a3:cf:c2:04:19:c9:a8:46:85:5c:8b:c1:65:
ec:c8:44:4c:fb:cb:fd:d6:4b:c7:4b:5c:f8:02:01:
fc:7d:bc:b2:ee:d7:9c:1f:da:d1:7c:3a:a1:0f:a9:
cb:71:57:d1:29:4c:88:a1:d1:35:69:30:b2:4b:d0:
55:9f:e9:9f:fe:aa:55:77:2b:36:99:ef:77:a4:af:
be:26:00:a2:a4:1e:e1:65:34:e3:85:3d:77:a2:dd:
d6:f4:3d:b2:a8:7c:7b:80:c7:4e:78:91:6d:28:fe:
e8:ac:ba:5e:c7:46:12:fe:ce:8b:9a:29:36:aa:7c:
33:4a:82:61:f3:30:f6:aa:de:e4:af:63:ec:59:5f:
63:d7:31:b9:f5:d6:70:76:f8:e4:a4:b6:80:8c:04:
51:23:57:ef:26:45:19:91:3d:bb:7a:9f:d2:0e:28:
9f:48:b9:28:73:72:ae:1a:d8:5b:8d:ba:99:ae:21:
d6:0e:f2:92:2e:b8:b3:08:89:c2:c5:20:54:dd:88:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3B:D1:B9:49:78:50:1A:D0:2F:DD:EA:AC:90:15:C5:81:62:48:04
X509v3 Authority Key Identifier:
keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:65:03:10:8c:31:2d:b5:ce:1e:87:c1:87:04:3d:2d:da:6e:
d4:b3:74:5e:e0:03:a4:42:20:dd:bf:21:c9:4c:ef:da:35:5d:
69:0a:d4:cb:6f:cb:45:f3:88:6e:ad:35:bc:05:17:45:2d:5b:
97:0f:81:13:12:d1:96:2b:ca:58:73:ca:16:8d:36:db:d5:f1:
4c:7d:94:7e:56:2a:32:9d:86:43:db:e6:05:ea:a9:66:64:2a:
0c:b9:3b:27:be:f1:62:02:a9:17:3d:6b:89:ff:43:9d:64:eb:
e6:f0:2c:a4:92:c8:b6:91:66:94:c3:0e:34:ad:9d:10:02:fa:
1e:fe:fc:5b:b1:f1:44:5b:a7:fa:03:f1:cd:a2:39:4c:3c:cd:
6e:62:74:52:07:ea:a0:42:44:15:18:59:8b:b0:69:b4:c1:21:
54:03:3a:7b:e3:20:c5:90:ab:28:53:ec:a4:e3:2a:40:9d:48:
6a:8c:74:8a:b1:72:d8:ee:93:9e:06:94:bd:7a:1b:83:0b:74:
15:51:be:39:bc:e8:97:6d:69:b8:5b:1a:be:b7:0d:6f:38:3e:
f8:41:81:9f:31:d0:07:3e:74:d6:9b:05:be:a5:90:d7:b2:94:
99:69:58:a9:d1:90:48:e4:fb:d2:27:91:58:65:97:1e:8a:c6:
4e:90:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:36 2025 by rpki-client