Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: +rw9vcy8MRji672N/7Pw0bnCknJyzjSLsbH77ZXBzc4=
Subject key identifier: 22:76:9E:A1:07:AB:1C:F7:09:E6:C1:08:E2:E6:D1:F9:22:8C:C8:47
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 0194BD17A2A7DDB0238E0DDC15CAC9FBCBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 040F
Signing time: Fri 31 Jan 2025 16:00:30 +0000
Manifest this update: Fri 31 Jan 2025 16:00:30 +0000
Manifest next update: Sat 01 Feb 2025 16:00:30 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: VRYVolh1iGer98dGnTGa1Jd0E05BB0eh1qGcG14Pv4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a2:a7:dd:b0:23:8e:0d:dc:15:ca:c9:fb:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Jan 31 16:00:30 2025 GMT
Not After : Feb 1 16:00:30 2025 GMT
Subject: CN=22769ea107ab1cf709e6c108e2e6d1f9228cc847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:da:6d:21:4f:3a:fd:4f:2e:ac:d4:0c:7d:
ea:48:1e:de:59:73:49:c9:9f:40:47:f6:76:b1:b1:
2e:6e:ad:28:83:95:5a:88:63:ea:56:e9:20:b3:0b:
63:d4:95:27:c6:17:56:b9:3d:27:aa:71:60:44:f0:
54:1c:86:74:54:04:31:78:17:ae:c4:15:a4:df:1a:
a8:1b:46:b6:ac:2f:22:4c:58:bb:ae:90:18:39:f4:
90:2d:aa:64:f0:c9:00:5f:f2:42:f4:5e:c6:cc:9c:
9c:92:c2:91:97:f6:cb:85:ee:38:6b:4e:5f:19:5c:
b3:4f:7f:a2:89:0b:25:c4:c9:a8:bb:01:1b:9a:7e:
91:0e:66:1c:59:be:3a:c4:b6:d5:99:b4:77:ac:58:
6a:50:47:63:21:d6:38:c5:64:46:51:b8:4a:c5:e0:
4a:37:85:b2:83:12:48:ab:a4:73:51:08:1b:f0:a0:
5f:74:d4:ad:3b:aa:df:4c:cb:38:bc:46:22:19:39:
19:c7:2e:96:85:ab:4d:9d:95:3a:e6:c3:28:1a:cf:
2b:da:1b:01:9d:05:4c:52:b0:09:43:58:3d:37:3f:
b1:9e:30:8a:51:4c:6e:d2:a0:5b:fd:46:44:2a:61:
83:ac:44:bf:c3:45:91:33:36:4e:0f:ab:91:88:c7:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:9E:A1:07:AB:1C:F7:09:E6:C1:08:E2:E6:D1:F9:22:8C:C8:47
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:41:10:3e:23:0a:3e:a5:ed:5e:c9:5b:a2:e1:96:e3:85:83:
66:bc:a5:1b:da:1e:0a:f9:7d:95:6f:c1:40:dd:33:67:be:c0:
87:10:eb:e5:54:a7:88:e6:b7:be:81:7a:17:2b:68:4c:59:ad:
64:b8:1f:29:d1:1a:82:49:5c:cf:97:ae:32:3c:d6:ad:e9:f0:
da:de:9c:fc:de:0c:62:28:b6:cb:a8:75:bc:dd:c6:21:3d:d3:
02:fc:24:80:86:00:f9:77:54:5a:06:2a:c8:1d:e3:0f:3a:4e:
4d:f4:c3:fe:66:b9:24:13:71:61:d3:b9:fe:2c:2f:f2:9f:0d:
56:0f:b4:08:ec:05:32:73:d1:8d:4a:6b:f2:f1:f3:de:f9:a9:
8a:d4:d8:e6:79:20:8a:bc:3a:83:d7:00:fd:57:36:fd:78:76:
c5:9b:43:bd:aa:bc:e0:3b:d5:24:d9:1e:84:bf:03:d2:53:3e:
be:0d:13:ed:e3:9f:e1:70:83:35:05:1f:ab:b8:9e:a9:9d:50:
fa:ff:47:c0:1b:ad:eb:69:dc:c2:6b:a1:5f:18:c5:0e:8c:22:
32:db:22:a4:51:f5:9c:64:2e:51:99:93:7d:9e:69:5c:dd:ce:
a4:49:c4:9c:21:d6:fb:e7:05:8c:73:f9:e8:c3:26:00:d5:f7:
10:41:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:55 2025 by rpki-client