Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: Y1dWOHRgXQNb2/lZacYimsOWTAuXURYJdYbYFWlliuk=
Subject key identifier: 8F:8E:B3:0B:CB:F7:4A:17:2F:C3:EA:1A:A8:52:40:2D:50:83:60:8E
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 0194BC3C2C7E08FA095A456FBF9B62E3B33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: FD
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: znPa9yMIf60QnPzb1KZQdwMbC2eqGTOS6UAAVTIvYbs=)
2: zto4NeQB1_I3QORAJXQ-oNO5db0.roa (hash: 4X/MAtxcgqfp8hiwe6Iai+qfAWiiXuU0LC7+GPHFtZ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2c:7e:08:fa:09:5a:45:6f:bf:9b:62:e3:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=8f8eb30bcbf74a172fc3ea1aa852402d5083608e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:84:c2:06:3a:a2:58:8e:03:fc:7c:64:47:
30:6e:67:c0:8f:28:de:99:e3:e3:9e:61:de:dc:68:
15:a5:23:ab:b5:70:0d:3b:78:2c:77:2c:87:da:3d:
5b:6a:ab:d3:85:21:86:03:a1:ce:e6:f9:06:d8:52:
7a:20:f9:4e:b7:bf:7b:12:96:63:34:74:ed:13:13:
40:81:3a:96:17:b0:b7:f1:17:a3:12:a1:94:5c:ff:
1d:fb:d2:7a:3a:7b:38:2a:e6:96:a0:30:c5:1c:c9:
67:5c:0c:2d:c0:de:86:22:db:3a:d2:9a:31:39:da:
2d:e7:c1:ca:50:bf:0c:b6:f8:82:0c:8f:e3:c8:af:
8e:62:d1:44:2f:29:f3:7f:7a:4d:04:95:a2:00:c2:
77:7f:6a:6e:73:6f:e7:34:a3:77:6d:8a:c4:3a:cc:
03:cc:0a:f9:91:a7:ea:d0:b1:7d:42:f5:e7:e1:a3:
8a:a1:d2:10:28:d2:7f:53:f7:bb:9b:12:18:3f:9e:
3f:82:b7:54:a7:9d:c4:e0:e7:44:83:8b:9d:d0:41:
0a:a2:6d:08:31:6d:20:3b:f1:c7:a5:d7:aa:dd:d5:
0e:19:80:58:ed:e8:e2:b4:1f:95:1a:f7:8a:77:41:
fa:a9:a3:de:77:0c:68:6c:68:1f:20:5c:e4:6d:5e:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:B3:0B:CB:F7:4A:17:2F:C3:EA:1A:A8:52:40:2D:50:83:60:8E
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fc:82:48:72:ab:04:a5:95:fc:cb:db:e4:79:cd:7a:83:89:
20:33:5c:36:ad:9d:6f:49:11:c2:9f:52:b9:bb:34:c5:c0:09:
d7:24:1a:45:61:4b:0d:7a:d9:7b:19:e9:ab:4e:85:fc:ae:e9:
68:83:a7:e0:41:b4:b1:8b:44:fd:42:76:01:c0:52:e6:dd:55:
26:60:a5:e8:37:6e:1b:8e:6b:fc:5e:f3:b6:18:e8:b7:89:cb:
e3:7d:0a:9a:9e:b8:06:0a:9c:91:30:ac:88:55:16:75:62:19:
a5:c6:59:ac:8b:93:d6:d0:d0:96:9a:e4:a1:4b:b7:bd:24:12:
89:1a:d5:ad:c8:89:49:25:ca:43:d9:dc:3c:8d:3b:6f:a9:b3:
9c:33:e3:60:c9:2f:77:16:f6:be:17:2c:3e:9c:57:dc:e2:54:
23:c5:57:45:71:8c:70:cb:d2:25:5a:49:09:32:1e:58:4a:86:
ae:7a:ba:be:29:da:4d:05:6f:25:c3:d4:06:c4:2d:58:d9:32:
4e:e3:02:2b:a9:5a:8f:3e:f3:09:f9:4b:1b:46:35:e3:45:85:
5c:9a:46:32:3b:71:f9:6a:f4:c5:23:46:82:e3:b4:1e:d7:3e:
0d:fb:12:e6:45:4c:22:74:69:b1:00:46:37:f2:16:fa:20:8e:
5e:a1:30:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client