Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
File: CuQnEByy4r1WUITeZHH260jST5Y.mft (raw, json)
Hash identifier: SPOy8yMic+x0oASCaZFmuOFfETClMJqdg0FkDkEv46o=
Subject key identifier: 99:4D:29:0F:41:90:B3:07:45:CA:5B:65:8D:22:EA:34:83:3B:99:CE
Authority key identifier: 0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
Certificate issuer: /CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Certificate serial: 0194BC72D4EAE5CDEC42C5973B220C035D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
Manifest number: 09C8
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: CuQnEByy4r1WUITeZHH260jST5Y.crl (hash: 7x4D8RQBUnQF38yLmcJmOFGp1jp2Sz7EAMcIBShUW04=)
2: LfJ8ODju367d2avuOQm5piH-KjI.roa (hash: o3ZK8YLnbi2AKR9dzokceRf3/tnSGkPPHYTuBxrwd0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d4:ea:e5:cd:ec:42:c5:97:3b:22:0c:03:5d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae427101cb2e2bd565084de6471f6eb48d24f96
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=994d290f4190b30745ca5b658d22ea34833b99ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:01:df:ef:6a:69:d9:ab:27:ed:e3:e4:5d:
16:55:67:85:3c:c3:8f:f9:a7:de:60:7f:7f:27:dd:
f4:4c:d2:94:78:1d:03:54:74:4a:ec:c8:48:7b:d3:
c0:2f:07:f0:b5:dd:1b:ad:1f:8c:71:bd:c5:55:98:
5b:2b:90:31:7c:d0:aa:4b:ee:a2:23:8c:36:06:e6:
a5:a4:d0:8d:b8:19:25:38:1a:e6:85:05:f4:2b:fb:
83:cf:13:21:f3:ac:2d:a7:26:de:ae:e4:f0:d6:62:
95:af:7c:9a:7b:b9:3f:3e:56:05:f6:53:1d:9d:b8:
fd:c2:df:fc:f5:05:df:2f:75:44:e5:2e:e1:a6:5b:
bc:81:e0:f2:3d:f8:d4:bf:c5:63:77:e5:ff:fd:da:
fb:6d:bc:4d:3c:ee:22:e1:19:4a:c8:6a:5a:ad:bd:
c7:80:92:b7:2b:41:f7:4d:04:74:35:d4:fb:ef:2c:
63:74:97:f0:9b:1d:84:24:ca:ce:e1:f0:8b:80:70:
b3:a8:bb:8e:62:9c:10:a7:cf:b9:da:ec:e4:19:68:
46:a2:e3:3d:a2:05:69:9b:ab:95:e7:ee:fa:43:f4:
9f:3c:b5:3e:0f:84:77:2c:e5:64:e8:f1:25:42:1b:
5c:8a:56:9d:8c:43:3c:16:a2:11:1a:8b:11:f8:ad:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:29:0F:41:90:B3:07:45:CA:5B:65:8D:22:EA:34:83:3B:99:CE
X509v3 Authority Key Identifier:
keyid:0A:E4:27:10:1C:B2:E2:BD:56:50:84:DE:64:71:F6:EB:48:D2:4F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuQnEByy4r1WUITeZHH260jST5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e112fc-05ef-4f1f-85be-7c9e684ccce2/1/CuQnEByy4r1WUITeZHH260jST5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:31:93:40:a6:c9:1c:fe:3f:d9:f4:4b:0e:25:97:ac:26:
e6:dc:6a:75:88:d5:ed:9f:84:c2:c5:97:8c:86:ce:83:c6:c1:
2e:f7:15:2a:92:c1:e8:22:30:3d:c1:99:60:a6:66:13:48:7c:
83:84:8d:6e:85:ad:ef:57:7b:f8:ff:3a:45:e2:69:8c:72:8e:
19:3b:b5:18:ed:b3:11:09:6d:6e:51:2a:7c:b8:41:18:5d:eb:
cb:3b:29:45:a7:eb:a7:c1:e5:a9:16:65:0d:bf:d1:3a:c7:0a:
7a:55:b9:18:0e:37:54:97:2a:e6:9b:a1:3d:85:44:98:d6:cc:
de:81:ac:78:1c:01:d7:26:3c:71:1f:0a:6e:5a:0d:48:62:4d:
4b:03:b3:40:8e:7e:05:70:8c:20:aa:f5:9e:2c:13:65:63:bb:
4c:33:46:f7:a8:d0:9c:74:fe:22:60:33:ee:c6:1d:68:77:5b:
b2:8b:27:a6:de:5d:ac:cd:aa:42:ce:10:06:aa:c4:87:f5:63:
b0:d9:53:d6:33:90:44:97:62:63:06:cf:4b:17:44:bb:48:3c:
0b:8e:25:b6:4f:f6:e4:e7:f6:b3:7e:c3:1c:72:ca:6a:d3:ad:
6a:bc:91:9d:a8:4b:45:13:bf:b8:35:cd:38:54:b3:5e:db:85:
6b:b9:49:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:58 2025 by rpki-client