Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: 0lDe28yH3fKp8sKFwfnE7kQ85UcvlaY2h4NfjQDLEvc=
Subject key identifier: 8E:42:40:00:9C:A3:B3:54:3F:32:57:E3:C3:69:B0:50:54:0A:96:09
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 0194BCE0E24D538330C40BF403675B6862ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: CiRt+gmrgcUvxTKjSaSA1WBuMDAycjMCGxDERsJ0ni4=)
2: kxDnCfrHQUfbaGERQmFbfTd98cU.roa (hash: CMFKoekNusaFzTmzQwOz3sNiedhzXtOMY7NEwqosvXQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e2:4d:53:83:30:c4:0b:f4:03:67:5b:68:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=8e4240009ca3b3543f3257e3c369b050540a9609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:59:ee:c1:fc:71:6c:c9:92:ef:85:d8:9d:20:
72:92:99:ca:63:79:99:d4:a0:56:ed:8a:ed:b3:7c:
db:09:80:17:f2:5f:1a:da:15:32:9d:63:38:37:c4:
4e:42:71:50:42:62:49:02:a2:ef:d1:fc:43:33:e6:
0c:ac:f4:0e:dc:40:b2:39:d7:dd:62:5d:9a:d3:a5:
a3:0e:7c:36:7d:dc:2e:f1:42:67:b5:41:d1:ca:28:
c6:0f:35:e5:e6:74:de:f8:15:98:d3:96:70:0c:f4:
7d:db:aa:94:74:b4:2f:3d:39:0c:82:5f:c5:30:f6:
98:a2:31:70:a5:da:7f:c7:aa:27:3e:63:33:1e:16:
c2:82:7b:45:0a:a0:b5:1d:87:8a:f3:d5:bd:1b:dd:
f4:c2:50:b9:13:7a:f0:a6:b1:2f:bb:c3:18:11:6a:
95:ba:34:11:af:2b:be:df:a2:2d:80:24:81:61:f8:
f3:18:cf:5e:ac:02:f3:b9:ec:8c:6a:f6:2f:0a:0b:
eb:50:ff:e0:e6:63:28:6c:ff:6a:b3:0e:ba:f6:ab:
af:06:35:a7:ee:38:cc:5f:57:1f:45:1d:35:91:dc:
43:99:f8:6e:ba:77:3c:ca:85:a3:cd:00:36:ad:8d:
dc:13:ea:f8:07:64:b3:f6:f8:16:9d:bc:51:ef:37:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:40:00:9C:A3:B3:54:3F:32:57:E3:C3:69:B0:50:54:0A:96:09
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d9:41:74:6a:27:2b:b0:db:be:d6:23:35:b0:71:02:73:01:
af:b7:6d:29:2b:ca:b6:85:05:98:05:3e:69:07:ae:b1:e5:6b:
41:8b:4a:49:e1:bb:71:51:6c:64:e2:26:c9:9a:1a:da:6c:77:
36:2e:66:ce:b3:09:2d:89:87:bf:20:69:94:b6:30:66:a0:34:
cf:e5:a3:03:27:1b:99:da:47:92:27:f9:bf:37:f2:9c:72:6f:
97:ce:a7:65:be:cb:f7:48:0a:97:f6:6e:e7:95:e7:dc:9b:d4:
55:10:dc:b2:21:88:f5:4d:d6:76:ac:34:17:d2:a6:51:b5:6a:
c1:f2:5b:c3:76:2b:18:c2:7d:8a:c9:38:65:bd:b0:4f:0b:cf:
7c:75:bb:f2:d8:6a:75:78:9a:7f:70:db:01:fe:56:d9:81:f6:
7c:e3:b0:8f:a2:bd:65:67:5d:17:ef:53:ba:d9:8c:ba:57:8f:
cc:30:9d:b8:9d:c8:45:d7:09:01:04:af:b9:b3:bf:16:bc:a1:
56:63:83:b9:48:05:5d:80:96:b5:56:0f:f6:1f:fd:35:c2:e5:
19:0f:24:cd:d6:85:76:ed:b6:f5:e1:ba:aa:59:4f:ca:3d:71:
12:d3:67:44:48:76:21:26:e7:df:4e:cb:60:28:8b:03:08:5e:
dc:74:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:53 2025 by rpki-client