Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File: ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier: bM+pqnM5dzZgT1XzazRl1UuRA+o6dhZihuywBDy0eB8=
Subject key identifier: A1:27:F2:C5:EB:CD:8A:EA:E2:06:69:0B:7A:F6:0D:84:74:A5:AB:52
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer: /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial: 0194BC04E30E12CD6D825A6C4A1120B21CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number: 068E
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: wGbru5vlcW3XK0xo0SI+KKGZoti48jswDEwFT8HxUrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:0e:12:cd:6d:82:5a:6c:4a:11:20:b2:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=a127f2c5ebcd8aeae206690b7af60d8474a5ab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d3:c9:ba:60:97:2d:07:0d:41:88:ea:12:f0:
14:5d:89:81:f0:a0:bb:f3:08:b6:a4:1e:34:6a:e2:
21:fd:5f:ba:2c:3e:95:c5:23:95:7a:3a:61:67:15:
5b:c6:96:34:b5:9c:b7:3c:21:1c:1d:df:bb:be:ca:
f1:4e:84:87:74:b9:bc:30:5f:0f:86:d2:66:b5:0f:
a5:1d:85:55:4b:db:97:ac:9e:35:fb:83:6c:c2:cd:
f7:05:1f:3b:8f:ed:87:18:c7:4c:01:23:6a:98:fa:
25:b9:aa:f1:2d:2b:29:2b:06:b3:5b:f7:09:4a:1f:
bd:26:11:87:95:4c:fe:79:81:bf:4e:7d:d8:5e:80:
8a:78:8a:ad:b9:00:f0:c7:b9:a3:c8:ad:cf:28:6b:
93:4d:ba:4f:4b:68:d6:95:26:44:5e:9d:24:d5:ba:
2d:62:cf:37:15:dd:ac:86:43:70:3a:f7:f0:01:2a:
f2:d0:b5:a5:cd:a1:b7:4f:1d:af:42:89:69:5c:74:
c1:1d:06:c5:30:c5:13:c3:69:19:01:83:83:a5:20:
74:d9:56:c5:0d:ab:fc:c3:50:80:45:a9:b7:ba:83:
61:9c:e7:ec:28:08:1a:bb:73:f4:7d:2f:a2:fe:5a:
49:3a:f9:7a:55:3a:d2:6c:92:e6:48:a2:24:f4:12:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:F2:C5:EB:CD:8A:EA:E2:06:69:0B:7A:F6:0D:84:74:A5:AB:52
X509v3 Authority Key Identifier:
keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2f:bf:34:e3:75:02:99:4c:48:fb:02:1f:5c:81:29:b0:a8:
cf:be:b3:a2:72:53:c8:29:a4:8d:99:66:1d:4d:08:b7:8a:14:
95:13:95:7c:13:49:a4:00:2a:bf:a9:20:29:01:63:6d:9b:92:
ad:ee:fb:02:ac:a6:bc:50:e3:a5:18:79:18:ab:e0:39:eb:13:
2c:41:54:23:b4:b3:c3:c8:a9:1e:01:4a:ec:80:e6:b6:08:54:
48:9e:dd:c0:f2:65:0b:db:03:d9:35:41:94:0a:92:be:3a:c6:
d2:d2:61:d2:9e:8e:88:16:11:1d:24:dd:7b:0e:7e:b1:3e:7c:
8f:ec:b9:2d:b3:9a:09:03:eb:bd:ac:a6:aa:57:6f:ae:99:31:
0b:b7:b0:4f:e5:5b:1a:03:dd:0c:aa:34:cb:23:10:db:0d:73:
be:7b:f6:a5:be:73:71:1b:5d:7e:c4:8e:d6:67:fb:4c:26:c9:
e8:35:25:8f:38:d7:87:82:e9:1a:70:d6:aa:a0:e2:50:fe:9e:
3b:bf:97:01:b6:a9:e0:ed:23:b1:8b:9c:78:2f:e9:8d:2c:23:
ba:07:9e:e3:47:b4:ad:cc:ae:6b:88:c1:cb:ab:94:62:e6:5d:
45:c9:29:fc:f1:57:ee:af:ac:a3:78:90:97:59:3b:06:53:ee:
43:8c:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:04 2025 by rpki-client