Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
File: CTKC_j89fUa9Gxy3ey_sN97gBmM.mft (raw, json)
Hash identifier: ogyH+60EPuxKvTe/SSuMPd/PTwHg5muuJsgRkuuSPXo=
Subject key identifier: 61:9C:31:96:72:E0:BB:38:F3:A5:84:9B:3B:57:F5:B4:F8:2D:65:5C
Authority key identifier: 09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
Certificate issuer: /CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Certificate serial: 0194BD4EAC6B240B716222F5BE264F17D4CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: CTKC_j89fUa9Gxy3ey_sN97gBmM.crl (hash: xQ1IJmcuRgYVOoMuRCVYg7N3lBy55/uWqH3wuqxFxyE=)
2: p9dm9G2iCzsw8k2RDOLA-aoAnro.roa (hash: RaSFGXIJc/dpz2m+EsrfJ2ccZ5vMg1R8ZkPmnS2txJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ac:6b:24:0b:71:62:22:f5:be:26:4f:17:d4:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093282fe3f3d7d46bd1b1cb77b2fec37dee00663
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=619c319672e0bb38f3a5849b3b57f5b4f82d655c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:58:eb:bb:d3:18:1c:50:8f:17:ac:58:ec:
d9:f4:47:5e:77:a6:b0:ff:2b:5b:ba:75:d1:af:5b:
79:59:66:57:47:d8:14:e1:1e:35:9a:ad:4c:75:13:
2f:fa:1f:97:48:f0:70:c2:1f:94:9b:0b:63:28:7f:
64:84:c9:6c:fb:16:22:11:ac:57:2f:93:d9:bb:d4:
6c:ed:e2:5b:da:25:66:60:10:15:89:1a:ec:b4:7b:
1d:cb:0a:1e:37:0d:8f:1b:54:de:73:53:9d:2d:3e:
4b:29:47:76:67:fe:a6:cb:a3:30:b1:a4:99:8d:79:
7a:52:30:64:99:a2:a4:b1:f5:6a:29:88:c6:02:fe:
68:41:0f:c4:be:d3:06:e4:3b:84:b7:bb:7a:87:37:
f9:3a:cd:d7:d6:68:ce:8c:a4:9e:e7:c2:d5:76:af:
40:02:9a:1a:15:52:0e:b4:6e:85:29:c6:4d:93:c9:
b7:9d:7c:5c:4c:a5:26:87:0f:97:a5:9f:d0:58:30:
d3:7c:0a:f8:6c:37:aa:7e:eb:0f:32:3b:43:e2:3a:
77:0c:0f:3a:9c:32:ba:b0:76:10:4c:78:22:4e:1c:
82:b0:92:5e:fd:30:61:c9:af:18:3e:e8:ff:b0:fa:
e6:ea:e1:93:e2:57:b2:68:0b:a0:9d:ef:35:f1:7d:
ad:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9C:31:96:72:E0:BB:38:F3:A5:84:9B:3B:57:F5:B4:F8:2D:65:5C
X509v3 Authority Key Identifier:
keyid:09:32:82:FE:3F:3D:7D:46:BD:1B:1C:B7:7B:2F:EC:37:DE:E0:06:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTKC_j89fUa9Gxy3ey_sN97gBmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fa7195-a0fe-4f84-813c-2a776f787a1c/1/CTKC_j89fUa9Gxy3ey_sN97gBmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:74:64:7e:e1:da:03:93:56:5a:1e:7d:83:6c:1b:18:1a:a4:
3d:ae:a5:b2:98:76:62:78:1e:17:b8:d5:66:f9:59:49:dd:ef:
bd:48:06:51:44:6b:ba:a9:3f:d5:76:cd:10:fb:80:99:3e:66:
75:d1:73:1b:82:58:a4:67:bd:f3:5b:d5:f3:2d:39:dd:4a:df:
28:02:0a:6d:97:cd:80:ea:4b:fe:5a:08:67:ca:8a:f1:4e:3d:
42:3d:45:a6:ab:b6:49:7c:36:98:8c:e7:68:e8:f0:4b:32:55:
47:a6:e3:64:50:d8:2d:91:aa:bc:00:db:c0:8a:c6:b7:30:1a:
b3:5f:ef:50:2d:72:00:20:6c:08:a4:1d:92:81:f5:0d:58:2c:
46:83:4f:0d:dd:cd:96:e3:1f:91:8b:fc:66:58:c1:d2:ff:f8:
2c:a3:e1:d8:49:a5:bb:0a:9e:60:e3:14:b5:70:ac:df:61:10:
f1:36:a6:4a:d5:e2:f2:34:4e:58:58:17:7f:68:b8:8e:bf:d7:
c5:0d:32:fe:e3:da:0f:01:4e:89:b1:9c:f7:b3:ac:7f:16:d8:
65:52:54:70:1d:19:56:77:d4:9d:d0:ed:1c:cc:29:6c:9a:14:
e1:46:67:2a:9b:c9:cc:af:1d:3b:59:d3:e4:15:28:a0:df:9f:
d9:09:c1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:40 2025 by rpki-client