Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft (raw, json)
Hash identifier: qwF0PQs6DwbXwS4C1DkUUFIth2b6wfLwCmoYG1TKyfk=
Subject key identifier: 17:24:3C:F5:87:3D:AE:56:24:3D:40:14:4A:FB:86:EA:08:A3:DA:B8
Authority key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Certificate issuer: /CN=724994bb7a6a3f4333d668c498fb965b172c3455
Certificate serial: 0194BC730B9722670E93D755C28CEF7E563A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
Manifest number: 03D0
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: V-Zw-R39fa3vjmQTK3pi-ruJAOM.roa (hash: svw00iQ8XqkVPen4oB7uX29LsRKx9ZNkxy68U1tQQ8A=)
2: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl (hash: hEI8vGiEmEcvG218PgHlIbObk4B/FSp1YyCLSaTrqRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:97:22:67:0e:93:d7:55:c2:8c:ef:7e:56:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=17243cf5873dae56243d40144afb86ea08a3dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ac:04:14:72:a0:4a:ee:e8:34:9a:b9:db:da:
de:6f:95:9c:42:9b:fc:d3:3b:c3:78:e7:b4:0c:a6:
98:16:0f:c6:6c:65:3c:49:91:67:fd:0e:6c:1c:bc:
f1:19:d5:de:f0:05:e6:a5:3d:84:25:15:3c:05:d6:
6a:dc:c7:95:1b:69:a3:7b:6c:ce:3d:c5:8f:d8:b2:
c8:84:a3:55:60:be:79:7a:64:49:26:6f:08:13:a5:
d6:4f:b2:cc:9b:e9:17:82:46:ae:88:81:95:98:39:
ed:f9:fc:52:cc:a9:05:ca:7f:ed:72:dd:51:42:78:
14:75:65:f9:3d:a7:a6:6a:ec:04:4a:f1:a0:3b:2b:
89:86:61:f5:36:11:62:f9:d5:f4:7c:99:b5:5a:82:
cc:d1:5b:d4:57:53:71:03:4d:03:2c:b9:6f:0f:43:
ca:4d:7b:ee:6e:76:81:a4:65:d4:07:ab:da:19:e7:
94:ef:35:ff:58:c1:db:03:d5:7e:a3:45:12:21:1d:
e0:aa:fb:c4:a9:25:1d:69:94:c9:51:bd:43:42:89:
22:30:06:a7:b4:0b:b8:84:3c:8c:62:de:4e:9f:91:
2d:69:4c:e2:ac:4f:41:da:af:85:f9:ff:07:60:66:
fc:9d:37:ff:17:bb:e2:e3:ae:9c:35:5b:71:6f:6f:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:3C:F5:87:3D:AE:56:24:3D:40:14:4A:FB:86:EA:08:A3:DA:B8
X509v3 Authority Key Identifier:
keyid:72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:5a:90:59:6a:b3:09:42:20:64:4d:8e:71:ad:45:e2:51:
b3:9b:98:0c:59:82:69:2a:cb:5c:b3:2c:dd:3e:33:34:89:4b:
9c:db:e0:f9:d0:02:2c:f5:69:25:7e:70:6a:4a:b7:4d:4e:25:
bc:70:39:39:41:ce:df:c8:96:df:c5:bf:03:88:d8:62:d7:88:
0e:14:bc:bf:0e:65:08:69:56:e2:71:72:d7:13:13:cb:4b:18:
44:3a:64:f3:98:fd:ed:10:9c:25:d5:bf:e6:00:85:25:41:ce:
55:99:52:33:c6:8e:70:d2:81:04:a3:ef:c3:ef:c4:c7:7a:3b:
fc:1c:59:d6:c4:d0:66:6b:3b:da:ef:93:24:61:07:77:88:01:
84:30:fa:cc:13:ee:5f:d9:d0:10:0e:52:f8:19:38:8e:6d:e4:
5a:23:89:65:2a:61:d3:cc:de:e7:0b:e5:15:f3:cc:fa:3f:5c:
42:5c:2c:22:bc:bc:a2:68:66:f7:b1:bc:87:f1:ae:b6:50:2e:
5e:df:28:4d:af:1b:8f:cc:f0:65:ce:c8:db:98:c4:94:b3:65:
e2:b5:d5:2d:86:29:5c:0b:17:53:f4:d5:6c:05:7a:8c:bc:56:
2e:9c:32:99:00:b4:22:3a:43:a0:ad:34:81:54:56:50:f6:04:
d6:33:2e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client