Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json)
Hash identifier: yCcrvODsgXgo/vFF/Y0orKcJj5VAPXP1Qv/12vMT6S0=
Subject key identifier: 5C:A6:51:14:DE:8A:73:80:30:95:DA:05:21:AA:69:05:48:1C:42:A2
Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Certificate serial: 0194BC73054A20E284B29F47E1061D3A3457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: 7rNZ2gZrunzhfrZm2BnX/qjP3rPuJQ6yvmgN0e3lRn0=)
2: tICvfkE-wd7ljGY6sghDtS75C50.roa (hash: EofEa7cxTHv8xJhHBChQPwYV0i7JZnqjIowIrpKVJDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:4a:20:e2:84:b2:9f:47:e1:06:1d:3a:34:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=5ca65114de8a73803095da0521aa6905481c42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:2f:13:5b:78:e9:4f:66:56:c0:98:16:25:
e2:ed:f2:3d:4c:79:95:ed:a9:b4:06:08:d2:8b:93:
dc:71:1c:98:65:f4:35:77:2f:03:6c:6e:af:6e:b1:
78:14:0e:3b:a8:81:5f:d5:66:6d:4d:af:7b:c0:73:
b9:74:b0:ed:cb:ff:7b:4e:89:a4:39:5c:ea:62:32:
6e:cb:2f:16:08:74:27:88:6d:d1:f5:6b:69:d9:aa:
8c:e3:e0:55:be:f0:51:a0:f3:b8:76:dc:ab:2e:36:
49:1f:55:0f:31:df:df:de:9f:c8:19:1b:e7:7e:e0:
7a:82:2c:cd:00:6e:6d:34:89:4b:79:72:98:99:65:
a2:1c:96:14:2d:6a:53:c7:45:76:c9:42:0f:11:3b:
0d:5a:be:d8:2a:67:78:6e:3e:59:c8:4d:0c:48:79:
92:ef:1f:5c:c0:4a:06:40:2e:2c:98:16:32:ba:9e:
4a:0d:89:74:eb:6c:fa:b4:f7:3a:36:ed:7b:a8:40:
77:71:61:b3:0c:d1:18:7e:3a:df:f9:80:b7:f8:fe:
08:29:c5:c8:2a:56:4d:90:90:06:9a:0c:4b:29:85:
6f:a2:79:68:cd:d9:f1:86:54:7b:bf:84:38:ba:c6:
fe:26:59:81:d7:4e:5c:d1:2d:89:84:75:c9:b2:67:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:51:14:DE:8A:73:80:30:95:DA:05:21:AA:69:05:48:1C:42:A2
X509v3 Authority Key Identifier:
keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3a:a4:21:0b:64:a4:66:8e:6c:5d:8d:6e:e2:51:3d:99:43:
d4:c6:d8:33:24:f0:00:f5:d5:d1:87:b9:89:11:ca:7f:f1:60:
16:e2:27:b3:75:3e:e6:5a:e4:2a:bb:6e:67:20:0e:28:71:74:
b2:4c:2a:1c:a3:d8:73:24:01:67:fb:69:ef:da:92:fb:43:d8:
7b:6b:36:13:fd:af:14:5b:5c:24:e9:9f:b5:d4:97:48:c8:f0:
d4:bb:75:54:2b:f8:74:c6:0a:09:53:45:65:79:3f:a6:92:22:
90:ef:ff:79:a7:e9:c6:9f:e3:a7:3f:b6:6f:70:3d:c6:68:bb:
2e:4d:40:83:c3:bd:6b:8f:15:a2:e3:b0:ab:74:b0:01:cf:5a:
de:5a:17:20:ce:5e:50:0c:14:a6:a5:16:ae:3d:7c:17:e2:75:
d2:07:53:2d:e9:0a:9c:8b:31:d8:36:72:ff:b6:3e:54:10:a0:
cc:2d:39:a4:e1:c7:50:3e:9a:be:6a:4f:33:4e:e0:1d:fb:a2:
1f:a7:7b:57:01:02:fb:46:65:22:9a:52:4a:ae:bb:c4:41:05:
ed:44:06:6c:6f:67:b9:89:00:e0:f8:ff:2f:97:ff:84:3c:fc:
9c:28:57:ff:7a:c5:db:f9:4b:99:f5:1b:0b:e7:d0:58:e8:5d:
a1:db:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:24:43 2025 by rpki-client