Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: Bin8/bBpEtGj1wEClf2S6CKOZsLgjZJGCG+m4ygWWks=
Subject key identifier: 26:F1:5D:C7:7C:8B:30:B5:D5:17:46:20:9F:5A:CC:DF:E8:24:46:7C
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 0194BD17DDE010DFDF13C137397EDABB5D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: HhR0YbAzFYnp8w+EBpMSw8zhehcNpiK3GNS+w6Pj8Aw=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:e0:10:df:df:13:c1:37:39:7e:da:bb:5d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=26f15dc77c8b30b5d51746209f5accdfe824467c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:ff:f2:20:16:d0:7b:b3:2d:a3:fd:95:07:
60:f6:ce:74:5b:cd:c1:f8:8e:1b:d3:f3:d9:2d:cd:
fe:99:72:da:4e:f9:64:1b:ee:41:fe:7b:a1:bf:97:
99:77:6a:90:03:ae:07:8e:9b:7b:c6:26:cf:62:62:
76:c6:74:90:be:9e:2a:02:25:0f:09:40:b8:94:0a:
59:25:3e:f0:ac:ef:7b:42:b9:21:85:a9:47:99:3e:
70:d2:f9:19:36:3b:c4:05:ee:c4:a4:95:34:76:1d:
85:2b:7e:03:b2:79:31:90:58:e9:8f:14:d6:b8:71:
6d:64:b6:81:b4:3f:b6:4f:4c:04:67:88:2a:dc:07:
2d:b5:a8:db:8d:a5:2d:f7:c7:8c:49:1a:90:c7:99:
9a:6e:2f:73:f2:21:1d:61:c5:18:cf:31:dd:54:2f:
e9:e6:88:41:54:95:a7:dc:15:22:92:07:f7:d2:21:
b4:2e:6e:6a:63:72:b9:32:07:5a:77:ff:34:c2:9d:
fe:b2:3c:02:fc:2a:00:36:80:29:19:6d:9d:fc:b2:
d9:ec:10:fb:96:ea:71:31:99:19:ff:f7:5b:d3:7c:
e8:3d:50:c5:09:71:4d:eb:67:ff:c7:7e:1f:fc:e4:
31:05:e4:b6:4c:6c:2a:46:f6:20:e9:85:aa:cd:5f:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:5D:C7:7C:8B:30:B5:D5:17:46:20:9F:5A:CC:DF:E8:24:46:7C
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b7:cc:57:e7:f6:c0:dd:96:00:f4:c0:0a:8c:2a:28:db:01:
8a:84:55:8f:e5:d6:e7:24:e1:8b:12:c8:c0:4c:7e:bb:91:2b:
78:20:53:c0:c9:88:0a:3e:af:a0:2d:3e:6b:6e:5c:a5:03:1e:
dc:5f:1f:0f:ff:0f:09:f8:8e:84:cf:2c:d6:a2:1a:ee:c3:b3:
19:a5:41:01:60:9f:ef:42:0b:00:20:8e:ee:65:1a:72:33:33:
c4:45:a2:b5:4d:9c:ba:a4:81:56:50:01:8f:b7:c1:41:fa:36:
33:73:ea:24:99:b2:f0:02:ed:4c:c3:c3:72:18:8d:1a:85:93:
ad:c3:aa:5c:b3:ce:e5:f1:1f:fe:a7:26:d3:48:0f:4f:bf:bf:
38:0f:46:3a:de:62:f7:38:c5:f4:f7:f9:38:42:da:c5:17:e0:
a3:86:e8:b3:42:da:37:5f:e9:3d:bd:32:f6:ea:7c:91:31:f0:
49:c1:71:83:dd:17:22:c8:3a:cb:f9:34:1b:b5:e2:f6:5e:6b:
e8:77:86:04:65:ce:1c:8a:8d:3f:8b:f1:18:5e:e5:80:e6:89:
de:46:6d:91:d8:a4:32:a8:27:e8:98:98:2c:db:6e:9c:d3:fa:
f2:63:85:51:3c:7a:5a:cb:d4:de:1b:80:db:d2:6d:19:58:47:
bc:31:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:40 2025 by rpki-client