Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
File: czQP17PChWN63ADx5h4rjkAmWPM.mft (raw, json)
Hash identifier: 1fRfSmO348z8WhJmKfVZRzrym46eJ3SL6EQlnkUptXY=
Subject key identifier: 51:03:28:4E:E6:1A:BD:9C:27:31:C5:5A:83:F8:4A:37:4A:FC:81:16
Authority key identifier: 73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
Certificate issuer: /CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Certificate serial: 0194BBCE0ABBBF26B787A4FAC3B80FD94505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
Manifest number: 0FA8
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: HjTMoAYNnig_SLdG7cjgafMO6sM.roa (hash: vtEs32Udg21ECRrqFxXkvtH2fOMUI8ZhlpPEmcfn7YU=)
2: czQP17PChWN63ADx5h4rjkAmWPM.crl (hash: WJDtnkGZJV8ayDbp1j6Jk2ZuxJg4uQA14Ru7Xm/WjTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:bb:bf:26:b7:87:a4:fa:c3:b8:0f:d9:45:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73340fd7b3c285637adc00f1e61e2b8e402658f3
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=5103284ee61abd9c2731c55a83f84a374afc8116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9e:48:1d:4e:14:d7:78:28:bd:02:8f:f9:9e:
92:5f:bd:e3:6f:c7:50:a4:b6:e3:2f:4d:37:e4:c6:
35:4f:cf:af:9e:6e:9f:63:a1:69:c4:1f:8e:6d:8b:
7b:fc:63:8e:fb:6b:65:99:a5:0f:05:e8:de:d8:cc:
76:ff:a4:54:47:ec:ea:0b:94:e5:28:a9:da:a6:cc:
33:6c:4e:cf:d7:2d:1f:f9:d5:39:a3:1d:43:cf:04:
aa:25:84:d9:2a:2c:3b:e4:3a:3a:0b:34:b8:ff:91:
4b:a5:bb:36:ad:06:6c:da:a4:29:d8:50:f8:10:b3:
e2:9d:c8:49:03:98:b6:37:cf:ab:67:82:4b:17:72:
0e:e0:c0:3f:e2:d9:1c:06:0f:97:e2:b6:ba:4c:8a:
e0:00:3d:0a:f4:6d:03:57:dc:10:e7:24:90:b6:fc:
a8:e4:a5:66:7e:44:a4:c1:60:66:77:e3:22:bb:dd:
cd:e3:ff:b3:72:8c:b0:13:a4:fb:d2:18:4a:25:ff:
7a:cf:d2:27:9c:c3:3f:14:55:3b:f8:0a:4b:88:6c:
6c:65:6e:20:42:78:6e:5a:c9:3d:ee:84:a9:3b:fb:
8b:12:14:17:8d:51:98:bb:97:e5:07:a3:29:7e:bc:
14:dd:af:fb:6c:9f:78:40:e4:c6:ab:34:aa:b3:8d:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:03:28:4E:E6:1A:BD:9C:27:31:C5:5A:83:F8:4A:37:4A:FC:81:16
X509v3 Authority Key Identifier:
keyid:73:34:0F:D7:B3:C2:85:63:7A:DC:00:F1:E6:1E:2B:8E:40:26:58:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czQP17PChWN63ADx5h4rjkAmWPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/0b4dba-0747-4e0f-8036-f2223606c538/1/czQP17PChWN63ADx5h4rjkAmWPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d9:3e:7c:e5:fc:c3:f9:ec:51:7a:0c:95:1f:c4:b5:84:03:
0e:a5:81:19:d5:97:a1:17:d6:ac:48:a9:0b:bd:18:9f:b2:c7:
bb:ec:ca:6e:44:be:66:5b:e0:f2:f2:09:a7:d2:3b:3e:d8:bb:
d7:83:ed:96:ac:db:a1:ba:c7:08:c3:1f:56:7a:07:b0:fa:63:
4d:10:03:7d:35:6a:80:e8:4c:ca:20:78:3b:a6:15:07:ab:f6:
d4:2a:bd:d4:13:5a:da:dd:99:09:bc:dd:d5:78:b1:49:5e:94:
3f:5e:29:6a:4f:7a:86:50:dc:3a:8e:05:ff:a5:c5:33:b9:4a:
41:13:0a:b7:37:67:45:af:3c:80:85:bd:b9:5b:c1:83:4e:5b:
b3:c0:2b:f0:d2:a0:3f:8a:ee:65:70:29:42:13:f3:29:a0:e8:
fe:f7:c6:a1:bc:01:68:83:50:11:2f:ce:65:a5:5d:10:ac:7a:
f0:3c:e6:07:86:88:72:72:1c:8a:6e:45:f7:a5:c3:ce:a6:9b:
1e:4e:2d:6a:f6:29:33:aa:25:b7:6a:c4:5d:5a:21:b0:24:19:
db:a3:0d:8f:8d:5b:69:1e:a7:d9:a8:9e:39:0b:4f:30:26:ee:
e7:a9:7c:59:4d:a7:30:5e:46:99:b0:a2:08:65:f4:87:4e:b3:
c7:78:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client