Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
File: Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft (raw, json)
Hash identifier: vpwiQohbNqm9f+WSb81tFd9TTqDFetsg9IQD+NLd7TI=
Subject key identifier: 8C:EE:73:94:67:FA:E3:2F:49:B5:66:EE:B7:5A:9C:6A:1F:75:F1:5A
Authority key identifier: 0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44
Certificate issuer: /CN=0a6d5b2c6ea00931631554066f995146e3ff0144
Certificate serial: 0194BBCE2A0793C91E658358992BF7836701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
Manifest number: 03D9
Signing time: Fri 31 Jan 2025 10:00:38 +0000
Manifest this update: Fri 31 Jan 2025 10:00:38 +0000
Manifest next update: Sat 01 Feb 2025 10:00:38 +0000
Files and hashes: 1: Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl (hash: DDzYDgQZhY5NPi5/rnugeJ0L4QMyLrh0jNdvYR2Vb0M=)
2: ibL-wM5Utk3qSFo0-NrYlsVtpTI.roa (hash: H67n/HQzKROWvSa4M/HKFg5PRZKUR6a+MTAqwbhiOYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2a:07:93:c9:1e:65:83:58:99:2b:f7:83:67:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6d5b2c6ea00931631554066f995146e3ff0144
Validity
Not Before: Jan 31 10:00:38 2025 GMT
Not After : Feb 1 10:00:38 2025 GMT
Subject: CN=8cee739467fae32f49b566eeb75a9c6a1f75f15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:cf:4c:40:26:5e:e5:23:fb:10:4e:f4:e7:
ee:cf:30:08:54:95:85:6d:d0:a4:99:42:b2:3a:ce:
ce:58:83:20:da:e2:b1:ae:3b:10:39:8b:03:2a:d3:
98:86:80:85:fd:b6:76:4b:25:f9:d0:06:f7:1c:e6:
4c:09:00:c4:61:49:58:3b:2c:4e:e7:e6:6b:25:c2:
9f:43:fd:e4:02:b6:94:dc:39:e9:34:0d:d3:ea:23:
cf:2c:9a:3c:3d:da:9c:9c:30:29:f5:38:5d:c2:76:
2a:1e:6f:37:5e:62:56:54:62:48:d2:04:13:08:d1:
bc:8c:1f:4b:aa:7f:63:4f:8a:22:0e:10:8b:06:04:
4a:1e:07:67:e8:4f:01:04:c0:0f:00:25:75:b3:7f:
a2:9a:06:5a:d6:29:f0:ca:6e:53:77:27:ce:b9:bc:
76:16:e3:04:9a:94:75:10:1c:13:3e:ce:5b:37:6f:
c4:d8:0f:3d:ed:91:e8:61:f5:60:06:98:3c:ee:c8:
5e:5e:e6:c7:f7:71:75:21:c1:c6:25:68:24:aa:c9:
45:fd:4e:87:0f:95:93:18:0c:be:00:e6:d1:ab:9c:
61:33:37:d5:16:dd:14:c2:a1:5d:08:e3:1e:4d:a1:
ba:51:0c:f0:bf:47:87:b0:0f:03:26:65:25:da:a2:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:73:94:67:FA:E3:2F:49:B5:66:EE:B7:5A:9C:6A:1F:75:F1:5A
X509v3 Authority Key Identifier:
keyid:0A:6D:5B:2C:6E:A0:09:31:63:15:54:06:6F:99:51:46:E3:FF:01:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/Cm1bLG6gCTFjFVQGb5lRRuP_AUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:d5:0e:e2:6d:e4:ef:62:be:39:87:45:6b:6e:c3:5e:54:
b7:14:0f:f7:af:e0:2a:56:76:09:9d:d3:53:12:90:0c:03:cd:
77:bd:9d:c9:af:bf:bf:48:68:4c:be:5b:9d:55:87:89:75:eb:
c9:58:55:7e:ad:8d:80:fb:3c:7b:5e:aa:02:e9:b7:db:a2:6b:
b1:59:5f:ff:51:16:3b:cf:80:32:a2:53:0b:f0:cd:17:dc:43:
c4:1d:a0:42:6d:9e:1c:0e:b2:3d:56:a6:5b:0c:c7:f2:5d:00:
96:f2:9b:dd:56:96:25:bd:4e:42:3b:b9:61:a2:2d:db:6d:c8:
3a:9a:2b:db:e6:ee:a1:a9:30:ab:89:27:c7:d0:a3:42:03:b3:
c2:29:2a:27:65:36:42:42:a7:bd:84:95:a7:76:88:97:de:2d:
09:17:87:91:3f:0c:de:8a:bc:d8:19:67:ff:cb:73:d8:11:cc:
f4:86:60:11:c9:5b:72:8f:6c:63:fb:7e:aa:6a:65:18:54:89:
8f:06:63:45:83:ce:4c:f5:0e:a2:22:91:ca:02:8d:64:27:02:
13:f8:0e:b2:27:ac:89:f4:04:9d:55:34:5a:ca:3f:be:92:ed:
4e:84:4b:77:e4:f4:2e:c3:9b:64:a9:13:7f:24:be:ca:4a:05:
68:e8:21:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:01:02 2025 by rpki-client