Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
File: chprP17V-3TQNRIhZRPEyB7-Hlw.mft (raw, json)
Hash identifier: MDPkqzFfaV/yBTrRK6/5WDCjnCZja5bLhAAStFFGOnA=
Subject key identifier: 1D:C9:F4:3B:21:49:36:AD:5E:3A:17:B7:DC:6A:6B:38:CE:34:C2:6C
Authority key identifier: 72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
Certificate issuer: /CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Certificate serial: 0194BD4E540C8D2A83697E4049484D20A235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
Manifest number: 0B0E
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: chprP17V-3TQNRIhZRPEyB7-Hlw.crl (hash: ZZX+4ldOhJhd+W/rUl3+GuIlyG8Eijl5EHJsql+Zhzo=)
2: kXwe6i_ywP7BuQfaKeMIx8MSFQ8.roa (hash: /QfuO16P3y+Nn1KiVZoDEz0J7D7ghuw9uLlF/vWhXd4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:54:0c:8d:2a:83:69:7e:40:49:48:4d:20:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=721a6b3f5ed5fb74d03512216513c4c81efe1e5c
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=1dc9f43b214936ad5e3a17b7dc6a6b38ce34c26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:9b:ae:45:08:6a:22:ef:e5:df:fe:1e:56:
37:9d:55:bd:09:a2:98:c9:1c:75:a5:56:26:70:14:
88:92:46:2d:01:26:40:21:a8:ac:e2:fd:71:c6:45:
21:8a:c2:cd:bf:93:55:e7:7e:87:bd:5d:0c:5f:b1:
48:13:a7:aa:9e:4c:ad:d2:30:c3:b0:01:47:3e:c7:
79:8e:94:e0:ff:e5:33:f7:4e:42:fa:21:47:55:2f:
26:55:79:12:4b:eb:72:fe:c5:d2:07:f1:ef:7c:bc:
a0:49:ea:14:96:0c:36:f1:e6:eb:84:b8:8f:58:ec:
fe:ba:6e:74:e9:0c:c8:d4:7f:94:36:0c:e2:53:aa:
00:ff:2e:09:6c:60:84:ed:a2:e7:8a:db:c9:f7:e4:
0a:94:d5:1d:04:7a:cc:4f:ab:c7:21:59:13:60:90:
60:62:21:55:12:ee:86:0c:94:97:a6:50:c7:18:83:
87:db:2d:96:3a:4b:c1:bf:98:45:b4:b6:dd:78:f4:
9d:a3:9c:28:6a:00:fb:d5:99:0c:63:5f:72:c5:c5:
fa:ec:87:91:15:e1:54:f6:17:5c:e0:0f:e5:5f:1e:
3e:a0:d8:32:ba:b1:46:c9:ed:2e:70:9b:6a:59:6a:
0f:bd:88:35:57:f7:ca:b3:3f:f2:03:b5:96:f6:eb:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C9:F4:3B:21:49:36:AD:5E:3A:17:B7:DC:6A:6B:38:CE:34:C2:6C
X509v3 Authority Key Identifier:
keyid:72:1A:6B:3F:5E:D5:FB:74:D0:35:12:21:65:13:C4:C8:1E:FE:1E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chprP17V-3TQNRIhZRPEyB7-Hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/af310c-2bd8-4efd-88e4-80c31db20ac5/1/chprP17V-3TQNRIhZRPEyB7-Hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:d7:2e:b1:81:28:36:5b:d9:67:d3:3e:f2:f1:dd:af:50:
be:7a:03:5a:be:72:ce:09:62:9f:e6:82:d1:f8:62:44:42:71:
8c:6f:3c:c3:0b:4a:e5:cf:31:a9:75:41:a3:ec:ca:80:ae:10:
cc:45:b2:77:fe:34:b9:0c:08:0e:a9:47:6f:82:e1:db:4c:f9:
92:6d:c9:fb:41:db:4a:38:7a:b8:d2:2b:81:f9:3c:69:99:e6:
64:bf:29:73:f3:19:7d:31:11:57:34:58:a6:a2:8e:27:2b:a1:
b0:9b:98:ba:33:b0:8f:5a:de:32:b5:66:dc:68:27:bf:6c:a6:
f8:b8:69:04:95:c4:c1:31:10:d6:97:9e:ed:75:01:c9:07:96:
f8:92:81:9e:3b:a0:b4:94:3c:33:aa:37:e4:5e:bf:4e:e6:61:
76:75:26:1a:86:fc:4d:ae:12:7a:02:a5:0e:e9:88:b9:f0:e7:
67:37:0d:78:f1:a6:27:5b:48:ea:e9:03:2f:e9:77:33:b1:3f:
98:15:bd:1b:91:f1:31:de:31:70:85:cd:3b:5b:17:bf:9a:33:
1c:a5:50:b4:1e:cb:3d:c0:6d:42:df:e8:34:86:4a:4e:9c:fb:
94:13:30:24:b1:03:5d:42:d2:e5:91:62:4e:1f:20:e7:68:22:
d4:37:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:06 2025 by rpki-client