Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier: DlJ0Sm1NRq27vreh0R6Ike4aZdlIK5QdoiO7zxPeT9g=
Subject key identifier: 18:49:79:CB:1A:1E:AC:C3:6E:CF:6E:0F:5C:E5:BF:A1:4E:00:55:79
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial: 0194BC72E4446920FA6CD487A568B1122055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number: 1158
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 6JEp_TS_vsTaIMzeYjxRg8y7_V8.roa (hash: SC/T7Z+hBtwyyJiKTDTnhcNot2zvgILN7qV02Pf6Nbs=)
2: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: 1LIBN5Y4jyQ3WBNfIFUAL/O6GR5wEvPw3IYLdhVw6cs=)
3: G3mV2aMuM8y2VDbVKoO1CvIX8jE.roa (hash: hw5cMOBfO5nlB/szU8+JwoMA13fSqw9OG26l4otUomg=)
4: HkRR9x0kwfCOGLQ5HGNvo9QbY3Y.roa (hash: h65bix0jyABriVc1PTgNi/FxADysyPwwSZa1akkv7og=)
5: u5uGdv7ahMN4VTdaMgbbpLRX3gE.roa (hash: rQgLckSzeaLo6eafpSN7kpYx8Hw/jY/LMChw/HsMXX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:44:69:20:fa:6c:d4:87:a5:68:b1:12:20:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=184979cb1a1eacc36ecf6e0f5ce5bfa14e005579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:53:79:d4:93:70:ec:33:ff:7a:fb:83:91:d3:
0b:d5:cc:4c:fb:66:d0:62:70:f6:5e:cf:13:47:ce:
b6:ac:63:ea:e5:dc:00:b6:21:be:94:ee:92:85:b2:
90:db:b3:1e:34:95:de:fc:3e:4e:2a:c0:60:aa:98:
75:4a:10:3a:26:2c:45:af:e9:2a:ea:44:92:4b:17:
2e:88:ad:19:21:48:95:57:ae:6c:9e:1c:6e:52:e2:
64:91:9c:5c:ea:41:6f:68:1f:27:8b:27:c6:0b:fb:
91:e4:6f:86:98:47:6b:e1:c0:25:1e:44:d6:f5:42:
04:96:3d:94:cf:62:0b:f0:df:07:ee:b5:f2:97:00:
87:48:52:c4:f1:47:87:70:ff:36:8f:78:e6:69:4b:
8b:7b:8d:81:62:d4:f2:25:8a:1a:18:e3:ae:a3:37:
67:82:55:18:64:c6:ca:5b:36:53:7a:f0:b5:a5:0a:
8a:13:42:65:22:8c:36:97:bc:c8:5c:96:43:08:cf:
7f:f1:94:5f:41:36:85:09:5c:c0:49:8a:ee:fc:15:
da:99:4c:51:18:d7:2e:6d:e2:8e:e2:f5:c0:31:d8:
0b:0a:e5:47:31:c0:cd:08:19:46:46:53:5e:be:37:
a1:f0:06:c7:ed:3e:a3:d4:03:9d:89:07:4e:04:5c:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:49:79:CB:1A:1E:AC:C3:6E:CF:6E:0F:5C:E5:BF:A1:4E:00:55:79
X509v3 Authority Key Identifier:
keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e0:e5:ce:75:55:4f:b5:bf:36:f1:67:34:4a:90:7c:27:d3:
7d:21:8a:96:e3:c5:d5:59:ee:fa:02:01:39:6d:e8:c8:04:ac:
f9:e0:db:32:67:7e:ce:b9:2c:c9:bf:17:36:ca:f4:39:32:3d:
d2:67:2d:a7:ef:6f:8f:f0:f4:d8:54:0f:36:38:dc:b7:30:77:
84:ce:3b:6c:6f:7c:2d:3b:ab:08:89:76:9b:65:a9:84:41:f7:
19:39:7a:84:ba:c0:fd:87:cb:eb:93:0b:3d:d6:b2:b1:32:f4:
a5:18:e2:e8:c7:55:a0:22:fa:b0:0b:aa:50:f6:4c:68:0f:2f:
5f:c1:2b:43:b0:f3:5a:a1:11:25:ab:93:2c:9a:05:a4:68:c2:
6a:9a:ee:3b:28:8e:ae:31:44:2c:2a:3c:cd:da:c9:be:ba:68:
06:9e:d6:67:a0:ed:91:72:94:6e:11:53:f4:e7:c6:2e:84:e5:
1d:1a:d3:dc:55:94:30:6a:7c:c2:40:0b:ab:70:ca:ea:9f:4d:
9c:e5:4e:92:52:73:00:5b:b4:17:2f:ac:e1:71:83:aa:71:5f:
4d:58:07:48:ca:6d:af:23:a0:e5:cb:3d:f1:0b:c5:40:7b:35:
a7:80:bc:4a:68:a9:1c:e4:27:55:c8:83:97:aa:ec:24:44:ea:
0a:7b:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:40 2025 by rpki-client