Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File: cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier: +k7ctWPmPquu9cuvTBpBaF4RX5sxzBEtStWKu/I+ZpQ=
Subject key identifier: 86:C8:0E:0C:27:BE:78:D3:B4:59:4E:EE:52:65:CA:5F:F5:26:7B:73
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer: /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial: 0194BCA9E1ADA24FAF9F0EE2F7B9869448D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: XRHaA9L1xYVAIJB4k6eJAmgn2qRdNIrPwJRKCgmZ4w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:ad:a2:4f:af:9f:0e:e2:f7:b9:86:94:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=86c80e0c27be78d3b4594eee5265ca5ff5267b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:34:0c:91:a7:62:0a:53:d4:eb:d9:33:53:15:
75:b7:c2:dc:08:50:80:83:d6:71:4f:b9:3e:f0:09:
f6:93:27:c8:39:be:64:cf:b5:90:7d:db:d9:bd:0c:
c1:da:6d:cd:d9:31:f3:32:cc:b1:a0:3d:76:a5:f1:
0b:00:e2:f4:a5:60:30:c1:f3:fe:a9:80:e5:9e:cc:
8f:31:4a:1f:66:6f:e6:ff:5d:1c:e0:c5:e6:64:de:
5d:e1:2f:45:72:04:e4:ef:a6:31:c5:15:4e:48:c9:
89:85:50:1f:20:46:0a:9a:3f:42:74:53:b9:f9:a7:
10:96:89:4e:d0:ab:5b:45:ab:b4:37:f3:a8:9c:be:
83:fb:96:f8:f1:f7:0c:b3:ca:f6:0e:81:b9:99:2c:
ae:e2:8e:a8:e3:e7:ea:1b:6a:77:b0:3a:68:ac:8b:
df:1d:3f:d2:fc:b3:ae:a4:09:97:f7:bd:5e:3e:3e:
51:0a:91:2c:16:f3:71:48:2a:c5:4e:9a:85:2d:ba:
c7:de:eb:c4:f1:34:e9:3e:1b:75:27:2c:d1:04:9a:
72:d8:4f:31:f1:b7:c0:3e:0d:b0:ca:17:6a:fb:0f:
d7:76:c2:ad:9b:a6:b7:ee:0c:9a:74:e5:e1:a0:44:
a7:35:6e:76:75:28:f9:7f:f8:00:0f:0d:9e:9a:73:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:0E:0C:27:BE:78:D3:B4:59:4E:EE:52:65:CA:5F:F5:26:7B:73
X509v3 Authority Key Identifier:
keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a3:cf:aa:1c:1b:06:bf:a6:33:3c:42:e4:bc:c4:8a:3b:fb:
c4:d3:4e:21:c5:c8:ba:0c:89:40:29:f6:ad:a0:c6:e0:7e:cc:
bb:75:47:0e:c4:96:4b:14:b4:0d:df:b7:ff:be:87:77:89:03:
df:da:74:d2:ac:0a:ef:dc:3a:42:cf:3d:e9:fe:0f:aa:e8:38:
a4:ff:3d:68:aa:11:6c:1f:f8:ed:f8:53:40:96:4d:13:e8:3f:
bd:db:26:a9:5a:25:7e:2f:84:a8:d8:ca:88:b8:6f:96:6f:d4:
0a:c1:87:03:ef:e9:33:32:61:6b:1e:93:4a:1b:0f:2a:52:41:
ef:2b:82:3b:86:c2:df:90:73:e6:dc:43:dd:29:42:0b:84:ba:
62:c0:b9:cf:a1:ff:b6:45:12:32:c6:dc:32:1a:4e:89:3e:af:
1a:f2:c6:e6:6a:58:64:27:7c:02:47:85:a6:b7:a1:2f:0f:25:
c9:91:46:8d:0c:7a:88:f3:ec:06:ad:4a:e5:04:60:e4:cf:8d:
7e:ef:b5:67:91:e9:8e:8c:be:e3:c9:6b:51:86:37:a2:38:9a:
6c:ef:50:9e:da:53:08:93:a5:22:66:63:23:31:ee:52:f2:f5:
9e:b4:51:da:67:57:0c:36:a7:a1:da:05:77:65:87:a0:5e:94:
9d:dd:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:36 2025 by rpki-client