Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
File: CnAgLDEt0sem_8MXqobk4gaSSaY.mft (raw, json)
Hash identifier: jUfgRSfAFZLZHYE/qF0IPn212tdwBIKuH4gZVMcGk8Y=
Subject key identifier: 8F:60:B8:9B:87:99:10:13:37:13:80:AC:9A:27:6A:0F:15:3C:77:74
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 0194BC3C089041630DF753BBBC4234B90831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: CnAgLDEt0sem_8MXqobk4gaSSaY.crl (hash: uhc8rjMc/wNjESeTSguOFt/m4M079A8RkQ7MteN9+jY=)
2: xVi5DHD3s-r5Votl1DTiGtuYvcw.roa (hash: +V2nAdl2ox/97Kg2Kv4wd0L6SAO7LGva7RVK1ZGXjZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:90:41:63:0d:f7:53:bb:bc:42:34:b9:08:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=8f60b89b87991013371380ac9a276a0f153c7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:65:1b:93:76:e5:98:44:9a:9d:7d:2c:d5:
78:41:d0:ef:b6:16:e6:28:60:2c:59:57:a6:f3:c5:
47:3c:f4:fe:cd:56:5f:ed:6b:c0:9d:fa:bd:e5:9b:
78:a6:1c:d6:2e:63:b0:dd:ea:2e:03:d4:8d:01:fa:
0e:4f:9e:df:b8:02:d4:41:98:5c:ae:de:f4:fd:8e:
7c:d1:1f:d2:91:ea:5c:ab:25:c1:7a:fb:e2:1c:e6:
64:32:d2:d1:a1:ea:25:d1:3d:33:ec:23:d8:cc:3f:
c7:f7:ac:8c:3e:bc:ed:2d:f6:d6:a8:a3:c8:92:22:
c2:42:9f:a3:83:da:b1:2e:c1:8a:64:0d:95:6c:0b:
0b:49:b6:fb:96:8c:61:bd:eb:05:8e:d8:b1:d6:25:
ad:df:70:9d:db:3f:b1:33:94:2b:ee:7f:f3:79:29:
5a:ba:d9:77:ae:0e:3e:e4:ea:da:28:af:b4:6c:d8:
70:7c:7c:1d:74:54:c4:b8:4e:85:32:82:8a:9d:2d:
84:b9:76:5b:0a:f8:14:0e:fa:b3:0d:22:7c:7e:2e:
9d:a0:fd:68:3a:9f:d5:80:bd:8c:26:35:71:66:f3:
07:93:7e:13:e8:22:fc:dd:eb:32:5b:f5:7e:43:f0:
f1:ef:08:81:c4:87:f3:ae:e6:38:13:f8:4a:7c:d8:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:B8:9B:87:99:10:13:37:13:80:AC:9A:27:6A:0F:15:3C:77:74
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:5f:5e:d8:1d:fb:c3:44:fe:7a:a2:9a:26:5f:fa:b1:e5:
f4:50:56:eb:15:a8:88:6f:ff:ab:f6:cc:cf:16:c6:e2:b7:cf:
bc:e9:56:7d:21:a0:49:52:55:3e:95:36:5a:e8:7b:3d:6f:bf:
36:c2:b7:c9:e1:98:21:28:31:b0:92:2a:7c:73:7c:11:80:e3:
11:c2:67:ce:cf:84:b6:b2:b3:4d:28:6d:9d:79:d1:63:ba:87:
8b:2a:2c:25:4e:3a:d4:fb:21:8e:66:82:0e:44:62:ee:5e:8c:
e0:f3:38:81:b3:0c:91:f8:f6:4a:5d:42:d7:23:8a:a7:9a:40:
74:b1:bc:8c:0e:30:07:24:9f:04:a2:5f:dc:f6:a4:39:5a:4a:
db:86:b7:13:ea:9f:ef:c2:a6:ee:e7:9e:63:a7:54:f1:b6:e0:
af:b0:52:71:84:73:5f:7c:1b:04:eb:55:c9:c9:2b:8d:9f:c3:
7a:e8:45:94:de:51:59:30:e1:31:fa:78:bb:11:2b:b9:0c:1d:
8f:a1:e4:18:50:52:9f:1c:6d:ce:c5:f5:42:0b:d1:12:c2:2c:
82:0e:1a:73:c4:f8:36:12:7b:c2:96:8f:da:ea:4a:d7:c0:92:
ff:75:a3:2e:10:3b:41:d1:4d:c0:53:9c:1d:07:f8:29:37:7e:
26:1a:0d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:49 2025 by rpki-client