Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
File: CKKX-M-hzm0_4sUmkRxGippjGNA.mft (raw, json)
Hash identifier: jRWepZowv7DCcdaVwWdWJkfKHXV8HVyzguEf7b/UHCY=
Subject key identifier: BB:7B:2A:48:AB:F1:A4:0C:44:6C:FB:85:2C:B3:7C:78:CF:2A:2D:12
Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Certificate serial: 0194BC04AA6F05410B06698C249B84867E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: 5MRhSgchnAtf4S3HQR8A2P9G7a4.roa (hash: zhfGWwF8FWGDVI625aodd4CNBRsAZhPphxbbSuJ9Gk4=)
2: CKKX-M-hzm0_4sUmkRxGippjGNA.crl (hash: Qc6BGSh63ZAapXTA6MOa8EUoMVCg7ZYDl0BDutpy7AU=)
3: KBS5ODGVPgLIrn_lzCZVpLCuM_o.roa (hash: tuJiuTZZDp+7DpYOFgzygNPFPeRHjujTGVj2/4ZqQWE=)
4: lf4o5O9cdWZQhb3j1ES-63-ld0k.roa (hash: MkYv77LnNtclc+nDDwEnxwywSZw8C8g7xWpLHjYSnn8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:6f:05:41:0b:06:69:8c:24:9b:84:86:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=bb7b2a48abf1a40c446cfb852cb37c78cf2a2d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:0b:7e:eb:16:cf:34:fd:f2:d0:90:76:a4:
4c:9b:98:89:ea:e9:8d:ff:f3:54:b4:f8:67:15:53:
17:cd:d0:80:2d:dd:6b:98:61:9f:b0:ac:7f:89:4a:
73:ac:69:97:ab:5e:4a:b4:9d:1b:6d:7a:c7:84:74:
e1:ca:69:3a:1f:a1:1d:05:40:d4:6e:fb:b6:f7:04:
3e:e9:c3:f8:6d:43:de:36:1d:19:5a:ea:fa:b1:61:
a6:ae:eb:8a:03:74:e9:58:d0:be:32:f7:38:14:83:
21:3d:fe:fc:e2:2d:20:f8:1c:ee:e4:36:66:46:d3:
84:17:64:68:0c:13:8f:f0:a6:87:41:c8:68:43:fc:
a3:18:34:88:ba:69:e6:21:79:ce:3d:b1:43:48:3b:
bb:31:5c:6d:7e:a3:2a:a4:6b:a2:63:71:06:e2:88:
b2:c0:6a:dd:ad:02:4a:17:76:1c:8c:51:6e:17:b0:
cd:87:55:f4:1c:c6:fc:a3:2f:51:d9:17:97:3c:89:
b3:c8:37:7a:4c:75:2b:13:d6:be:8f:d3:11:1b:3a:
b0:6a:7b:f4:e5:71:44:68:72:63:23:cf:70:19:f7:
08:a7:5e:d8:f5:96:0b:9d:b2:8e:c0:23:46:92:09:
b6:6e:ca:60:a6:ab:af:a8:30:16:68:cc:7e:7c:90:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7B:2A:48:AB:F1:A4:0C:44:6C:FB:85:2C:B3:7C:78:CF:2A:2D:12
X509v3 Authority Key Identifier:
keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:5f:75:45:39:dd:ae:ac:94:3f:06:f0:f3:bc:f2:7b:8d:
87:92:58:e4:eb:11:0b:7c:54:64:2d:8f:cb:2e:d9:e2:3c:dc:
c7:ae:6a:49:c4:fd:25:e4:f2:86:c1:f3:30:ed:5a:01:e8:58:
aa:55:cb:21:df:46:33:07:22:9f:2f:f2:29:0d:f3:6c:85:6c:
27:3b:6d:56:c2:4d:fb:1f:54:a9:a6:6d:bc:9e:bc:e6:37:22:
f9:8c:f3:b0:68:65:d2:97:ea:7c:92:93:4a:cd:bf:7d:c9:aa:
72:3c:54:71:14:e9:87:d7:8d:df:29:67:8d:97:d3:85:4f:a6:
9e:35:8d:c0:11:49:94:88:a6:78:93:4a:b0:7e:43:1a:7b:c6:
86:0c:21:1f:37:02:9c:fd:c0:09:67:66:10:07:fd:8c:fb:91:
ae:4a:f2:83:15:ad:6d:b8:7c:ef:e6:ef:e6:1e:34:ae:a0:e0:
08:c2:8a:ec:de:30:30:e5:76:13:6f:0a:e6:c8:93:ff:42:93:
b1:29:f0:3c:11:0e:75:33:90:78:f4:73:68:4e:a5:35:10:62:
6b:ab:be:36:4c:c8:1f:70:5c:3c:bb:a5:14:9d:4a:80:7c:39:
ea:b7:5c:1d:99:94:84:9a:9e:c8:da:27:0b:4b:66:e0:99:ec:
18:5f:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:47 2025 by rpki-client