Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
File: crJdhZ_wa-HryXrdXewF02_Nyi0.mft (raw, json)
Hash identifier: hyHWRMEJ8U5HRPkPN48hQW156MNTnycHsw718ndQA6w=
Subject key identifier: 52:92:43:D0:39:CE:86:44:27:54:C6:C1:E6:A4:03:59:F7:7E:17:D0
Authority key identifier: 72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
Certificate issuer: /CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Certificate serial: 0194BC3C4A266EAC7C6051D13B3D5DF7A774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: U-ro-LNCvBFTwBgTtGDT2mvZouk.roa (hash: 6fLiIQ9uzQL3oVBXgLqfKJlttobGrN9uY8IvnWrXSwc=)
2: crJdhZ_wa-HryXrdXewF02_Nyi0.crl (hash: 9SOwtm8RdnuuDY2sugG8qfiPwpl6mGCQ8lMK7xdFIhY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4a:26:6e:ac:7c:60:51:d1:3b:3d:5d:f7:a7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b25d859ff06be1ebc97add5dec05d36fcdca2d
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=529243d039ce86442754c6c1e6a40359f77e17d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:1e:02:a0:51:84:82:da:79:6b:5b:bb:75:
5d:58:01:05:9d:60:46:5c:c4:a0:cc:73:86:56:3a:
91:35:16:b9:fb:5b:9f:a6:50:39:f8:63:73:6b:37:
ba:cf:3c:e0:62:b6:c5:02:58:52:94:ff:9f:2e:ea:
f1:de:be:8f:f1:a2:b2:63:4e:5a:29:3f:4d:9f:9f:
1b:dc:e1:b3:c6:f2:8b:bc:82:82:23:2d:c5:b7:ba:
c8:4c:11:b0:b8:53:8e:3a:97:ae:d9:16:4e:a6:64:
4c:75:49:8e:04:a5:1b:f4:5c:60:80:1a:01:c5:2f:
ef:2a:c0:cf:12:44:fe:fd:f2:c1:01:70:00:68:a5:
a0:be:5f:5a:e9:d1:cd:71:2a:ac:9e:49:0c:96:fb:
d1:35:e0:6e:f6:2e:87:c5:30:35:29:92:4e:21:51:
ec:a9:29:b1:f5:a4:9a:28:5b:a2:4f:48:11:79:b7:
0a:e2:9e:1b:0a:4a:22:b1:d6:bc:40:76:d6:a0:e7:
c2:b4:a6:50:80:8d:7f:19:5a:f4:48:bd:64:52:49:
7f:91:d5:fd:c7:a3:5a:18:cd:af:ab:ee:a8:78:0b:
3b:da:61:da:c3:70:aa:4b:38:70:1d:66:78:3e:ed:
32:29:25:f7:8c:2f:5b:47:f7:8a:95:21:9f:b5:ca:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:92:43:D0:39:CE:86:44:27:54:C6:C1:E6:A4:03:59:F7:7E:17:D0
X509v3 Authority Key Identifier:
keyid:72:B2:5D:85:9F:F0:6B:E1:EB:C9:7A:DD:5D:EC:05:D3:6F:CD:CA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crJdhZ_wa-HryXrdXewF02_Nyi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2f833f-a7e8-4f9d-a383-123fa2ab9408/1/crJdhZ_wa-HryXrdXewF02_Nyi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1c:c2:0a:37:df:b8:d3:1b:cb:41:10:bd:65:5e:24:ec:9c:
9a:7b:6e:21:3f:21:e0:5a:91:81:e9:00:ab:65:71:1b:16:13:
41:cd:c3:a2:86:19:bd:72:2d:59:8f:79:35:1e:73:af:d6:ec:
b0:00:fb:0c:67:82:d7:cc:23:78:16:90:c3:31:c2:b1:0f:0d:
9f:3e:55:57:e1:6a:9f:ad:19:ca:69:c1:25:47:37:83:81:f5:
2f:68:b1:71:b3:26:b4:ad:6d:48:79:16:7b:be:a4:ac:b1:e4:
0f:07:a7:b1:25:69:3e:fc:f3:e6:4b:30:e8:d4:ad:67:51:68:
5d:a3:7d:84:6e:1e:74:4b:1b:8a:f5:74:a6:8b:a6:51:3f:ec:
aa:9f:4a:0c:f5:11:3a:ad:c0:6e:ad:a0:79:5c:2f:15:9b:03:
25:8e:45:91:bf:5a:4a:14:0f:cf:58:e2:80:af:27:82:cc:4c:
b0:00:f4:f7:01:6b:2e:89:99:07:ec:82:fa:47:57:62:24:3c:
b4:37:e9:88:e1:54:ba:58:43:bc:09:2f:a1:eb:57:46:1a:55:
35:37:13:5e:59:f7:9b:e0:69:82:fa:74:8a:0f:49:4f:84:4b:
24:50:cb:fa:c8:1d:d6:3f:ea:9e:1f:26:42:00:2b:61:2b:a7:
16:4b:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:49:59 2025 by rpki-client