Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File: CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier: +sqKlDYUMuvAJWvKrKJyKWEaMBBD2HmUnCeG5+iTus8=
Subject key identifier: 0A:57:09:02:75:05:AF:6A:71:11:F3:23:C7:6F:71:AB:72:E4:D3:43
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer: /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial: 0194BC731F1FDFE71B2B59C1B4F5710FF33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number: 06B7
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: xoyDX6caHWb+CCjxfjXNv5Gr/tgdWOo+yO73Cn8gVgk=)
2: Lh4J1VP02-oTK-HxM-W2DuWref8.roa (hash: W28vw4gwp9YROhgcttiVHyEse6JN5PCY1Q1d5LlTtlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:1f:df:e7:1b:2b:59:c1:b4:f5:71:0f:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=0a5709027505af6a7111f323c76f71ab72e4d343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:be:6d:6a:00:83:62:c3:93:bf:5c:88:80:
e2:8b:a8:c6:eb:fe:e9:48:aa:9e:3d:9e:44:2f:90:
fd:0b:a9:df:c1:c6:69:38:c8:8c:76:9f:81:bb:af:
1f:39:a9:3d:dc:ea:f8:f3:23:d9:a0:44:b4:82:cb:
b0:d4:de:e4:12:98:49:6e:92:d2:51:a1:ec:de:45:
15:ea:0e:a6:03:b0:32:90:24:25:6d:68:e9:b3:e0:
f1:d9:99:54:79:5e:bc:1e:44:13:c3:92:49:87:fb:
fa:6b:c7:e1:13:ea:b6:ad:c5:95:8f:d6:6f:d4:e3:
91:35:9d:6f:91:c7:15:fe:55:7f:13:2a:5f:d4:fd:
1e:a2:e7:22:fc:57:dd:49:99:da:53:f4:1d:c4:a7:
4c:c5:f0:72:47:9a:83:57:21:13:e6:60:48:8e:50:
fe:9c:c0:09:ed:60:ad:1d:7f:55:3f:e9:e5:74:75:
d1:50:6c:b3:42:2e:58:6a:a5:08:93:c1:29:08:68:
9f:42:8c:08:70:4d:36:5a:70:9f:7e:3b:37:b5:48:
70:b2:82:4c:41:35:13:05:51:46:27:3d:75:92:b2:
be:5d:13:bd:2a:a9:48:b7:7a:39:11:fd:b4:9c:dd:
67:66:1b:1e:b7:34:d4:18:c3:fe:ef:74:d2:fc:66:
bc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:57:09:02:75:05:AF:6A:71:11:F3:23:C7:6F:71:AB:72:E4:D3:43
X509v3 Authority Key Identifier:
keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:43:cb:73:47:a8:1d:19:cd:3b:b9:1d:2b:29:7a:3d:6e:1b:
1d:c8:18:48:eb:4d:ae:1e:91:1c:c3:23:02:fb:e8:93:79:ac:
02:08:ac:ef:79:5a:44:5e:3f:4b:ab:5b:e3:0e:0c:4f:2c:cd:
55:2a:6b:9b:c5:4c:c6:a9:72:1b:91:ca:90:f2:92:cb:86:39:
e6:da:25:59:ee:05:e4:0e:8a:f9:20:59:49:f0:86:3b:16:23:
c6:d6:1d:9c:4f:bf:98:ec:9c:b0:7a:98:3f:5c:1a:50:81:37:
04:d1:42:76:8e:a0:d8:f7:e3:ab:a1:de:3a:72:13:5b:4c:6a:
88:42:d3:89:95:dc:ad:7c:21:32:30:8b:60:fa:da:bf:1d:c0:
2d:32:6f:b4:95:fb:92:18:e3:1a:4a:33:c5:50:10:b0:4a:d8:
31:66:b5:e7:ec:dd:94:c1:16:b1:ac:b8:9a:89:2b:fe:a8:de:
70:2a:19:52:eb:5b:25:18:e7:0e:ac:40:48:ad:d6:4a:a5:c8:
1e:67:ac:97:a3:c6:fd:de:de:c2:fd:99:1c:65:b3:46:5d:3f:
b5:50:55:0f:f4:49:df:d5:42:ed:c1:10:bd:7b:8f:27:c8:65:
c7:73:7b:4d:3c:13:ed:27:03:fa:9b:9c:93:90:62:05:68:05:
6e:3c:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:13 2025 by rpki-client