Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File: cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier: z7EdF+dIyxZ1Y7p8zlkHAMUMuZ5i5zF1lszPF9ty0RQ=
Subject key identifier: 38:C9:C2:E7:3B:4B:DC:71:62:D8:3D:0B:5C:2E:8D:3B:6E:52:D5:96
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 0194BD17715319B8B5347638C9044F0C47ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number: 1036
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: AKUmzSpUJGE/hF5AEVTSNB0lT8TeVUgF8FRKpLNQ6To=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:53:19:b8:b5:34:76:38:c9:04:4f:0c:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=38c9c2e73b4bdc7162d83d0b5c2e8d3b6e52d596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:62:fc:6d:10:2e:e1:75:c7:47:04:c1:c3:
39:b7:dc:25:9f:14:ea:b7:24:25:94:24:3b:2a:6d:
27:8a:28:a1:9e:d9:9f:cd:7e:bd:ee:a8:15:a0:bd:
cd:e9:90:6a:2e:24:87:f3:66:f8:53:4e:fd:9a:0e:
fa:ab:14:f4:6c:3a:29:92:0f:45:bd:f7:58:ff:ae:
61:78:3a:91:59:b2:27:f4:c8:c8:a9:10:65:d3:5b:
f9:40:72:f7:83:21:21:58:3d:b2:5b:89:87:04:ef:
e4:72:8d:c2:d9:6b:87:22:74:b0:83:04:11:48:c5:
cd:6e:35:01:42:75:03:7e:b2:98:b5:a7:f1:5c:a2:
bd:c0:bc:92:e7:9e:bd:7a:7a:1d:5e:0a:c4:40:a4:
68:10:85:e7:2d:15:53:b3:35:8a:58:21:15:67:26:
f7:0d:59:3b:3e:2c:17:f9:cf:bb:2f:31:72:17:75:
fc:ba:d1:a0:c9:47:ca:e2:32:45:97:7b:7e:7d:0e:
cc:31:04:54:80:e5:1f:32:3c:71:46:28:bd:d4:40:
ed:eb:87:2b:0e:46:8b:54:13:9f:d5:e4:01:5f:90:
20:02:39:fe:ed:23:48:15:ec:9f:f1:06:83:3e:c7:
c6:a0:35:8d:8c:8c:7f:c1:ba:13:9f:cf:7c:d6:d5:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:C2:E7:3B:4B:DC:71:62:D8:3D:0B:5C:2E:8D:3B:6E:52:D5:96
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:32:a7:20:4b:04:54:30:c7:1f:be:a4:d6:81:45:34:41:
ec:ea:eb:0c:5b:a0:84:ba:d4:b0:83:e1:5d:40:e9:08:44:75:
53:22:ae:62:72:ed:ba:de:cc:19:04:84:8d:58:54:c4:8d:08:
46:fb:b4:a2:43:5b:c5:7c:0c:c5:5b:ab:31:81:6b:7c:57:e3:
60:ff:22:8a:4b:cb:f3:26:22:18:4e:5c:9d:4e:90:a5:cd:b5:
41:7c:90:89:a8:37:ba:7d:b7:48:e9:a0:62:7b:7e:bf:85:b4:
0b:b1:61:ad:2d:df:8f:64:60:ae:a8:35:70:28:d1:7f:13:2c:
47:5d:f6:07:52:48:5d:37:15:22:e6:b1:cd:12:f9:09:06:89:
02:fc:22:d0:6e:e9:16:f9:97:cd:d3:ff:27:1b:96:7d:e6:45:
39:14:b3:e1:e5:f2:33:af:39:13:2f:ee:a1:fc:8c:43:c0:76:
53:98:1d:f8:b1:a5:5f:3d:1c:47:9c:a9:09:ad:ea:af:53:1d:
27:8f:aa:7c:c2:86:65:c8:26:c6:8f:cd:99:50:1b:76:98:4e:
d8:30:7b:89:38:2b:f6:6c:77:92:e1:e6:bc:b2:88:5b:cd:56:
80:cd:51:f5:76:e8:99:b5:51:cf:a8:4b:18:bb:4e:ed:64:fd:
4b:e6:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:50 2025 by rpki-client