Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json)
Hash identifier: qH/CtXlNkQJBQ8uZ+Oext3X9kY+cYdOjvQwfdvc9Jgw=
Subject key identifier: 59:D0:6A:05:24:44:3E:0A:EE:40:48:BD:BC:F9:0A:24:93:E2:E3:04
Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Certificate serial: 0194BCA9EEF51CB1B953DAF8F0C805528F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
Manifest number: 0F7E
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: BQ3iJXnxNfBsdJbf1EavKnaygeljqsCBR4rp1sfhzc0=)
2: omD35PZpVyqvkF4OdnFj08JxMFc.roa (hash: PjR4MlrZz5S4peGDKTF1jke6AAq8KkU6oiu9IFgbnOY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ee:f5:1c:b1:b9:53:da:f8:f0:c8:05:52:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=59d06a0524443e0aee4048bdbcf90a2493e2e304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:d3:3f:51:1c:51:8a:16:88:15:a2:1f:04:
4b:2e:9d:26:62:4e:5f:35:09:72:50:c3:86:ad:72:
f0:7c:6d:4d:6b:c6:27:b0:8b:e8:f2:d0:9f:b5:ed:
e5:50:97:2e:fa:05:08:4d:a7:ab:8f:26:ba:12:09:
47:88:d7:35:68:32:68:28:b4:ea:bf:44:86:7a:d7:
4e:2f:28:e2:79:de:c2:0d:4d:1d:6f:49:09:48:e3:
84:4f:d5:45:58:93:dd:1e:3d:30:f7:1c:1f:27:53:
b8:e1:4e:c8:88:aa:cb:53:45:fc:d8:d7:88:60:ab:
62:a3:8f:58:59:5a:8d:a5:99:ee:66:20:c3:28:da:
65:79:01:94:7b:82:f8:1b:4e:19:6a:02:17:ce:85:
44:3e:ea:76:dc:4f:0a:9a:ff:f6:8b:df:79:43:4e:
c1:7c:a3:1b:85:b6:71:09:82:f7:80:14:a9:ea:1f:
bf:78:4d:b7:36:c7:62:05:3a:e5:a1:7c:93:e7:db:
91:49:aa:19:04:7e:a9:ee:c7:06:5e:e9:a5:df:2b:
21:88:2b:6d:ec:4e:a2:3b:92:5a:9f:c0:f9:e7:51:
7c:66:5a:73:00:5c:85:44:bf:5e:9c:cd:42:8e:6f:
47:cd:c7:20:7f:f2:c2:10:99:14:c3:76:1a:52:0d:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:6A:05:24:44:3E:0A:EE:40:48:BD:BC:F9:0A:24:93:E2:E3:04
X509v3 Authority Key Identifier:
keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:88:9e:90:ca:a9:0b:23:ab:31:0b:e9:09:9b:fd:67:56:28:
79:33:d2:93:78:2b:2f:eb:e2:4c:bc:92:82:59:bc:f7:48:0e:
77:7b:72:69:05:79:a8:ef:86:2a:3d:bb:e6:42:62:56:2c:e4:
65:47:65:ff:ba:8d:d3:fd:5c:48:31:a2:8e:2d:ff:e1:50:b4:
fa:0a:41:b9:2f:11:2e:5f:c0:52:31:e7:29:b8:09:c3:b7:9a:
ca:c4:2b:11:a1:0f:3d:fa:96:70:94:d9:7a:d3:ca:80:dd:f1:
fa:70:22:03:35:11:3e:b3:2c:fe:74:b0:04:d8:4d:5e:51:62:
3d:d2:68:65:f1:9e:49:16:2d:88:b7:1c:96:f4:da:b8:55:7d:
c1:6c:1b:0f:2b:77:e5:f6:d9:4b:fc:37:5f:7c:68:22:d7:9c:
03:68:0f:01:08:ee:3d:ae:40:7c:c9:3f:e7:a8:66:2d:ec:d8:
db:ea:10:26:48:78:1a:bc:25:6f:1d:c7:e0:b0:87:5b:69:70:
39:eb:1a:80:1c:f6:6f:a4:de:fd:01:9c:09:42:6a:f5:86:96:
78:b0:9b:a3:aa:c6:cd:60:97:b1:1d:4f:23:4c:92:19:5b:f4:
b9:e0:47:bd:e4:83:c8:df:c2:36:1a:f2:01:39:88:a9:e7:93:
cd:8e:d2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:19 2025 by rpki-client