Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
File: CgIUob8dOv0t1msjqZcxBrXTFso.mft (raw, json)
Hash identifier: L6+q9jHhUpLzgv2daaFZ0tD6aabULIf69O8tIXuN0mM=
Subject key identifier: 3E:4B:47:70:96:86:B9:5D:6E:B1:78:ED:BB:69:36:B8:65:F1:DB:30
Authority key identifier: 0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
Certificate issuer: /CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Certificate serial: 0194BC7298DEE7EA42715BC305FBC60EA9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: CgIUob8dOv0t1msjqZcxBrXTFso.crl (hash: 4IWt9kVF0ZiMVj/a01LHX3Uu+yr6kflHb5PgWy9qb1Y=)
2: EaaXkbC8P0tMcWH8_B2AeHqJuik.roa (hash: Agyi8/XYUtn0V9u60ReeITYzaWhDJOT1A+JDHxK163o=)
3: iRncY0RPMdG6ZS1FNbvbNQvbM88.roa (hash: cZd3pDxm+3G7IN3N9+ceJiYJz5MHexdMYYiB+WqQjOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:98:de:e7:ea:42:71:5b:c3:05:fb:c6:0e:a9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a0214a1bf1d3afd2dd66b23a9973106b5d316ca
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=3e4b47709686b95d6eb178edbb6936b865f1db30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:68:7b:ef:33:af:60:fa:02:ab:d2:ab:af:
3a:e9:5c:34:0e:2c:06:c2:cb:7c:fd:a6:70:68:af:
7b:42:f0:d5:b7:eb:a8:17:fa:a9:73:3b:d0:15:1c:
00:ae:e3:77:62:72:a2:38:44:52:f3:38:56:65:ca:
06:7f:c6:a1:56:63:54:a2:dd:28:4c:c5:c3:d2:9c:
48:82:3e:7b:69:69:71:f6:56:68:45:cf:94:cb:7f:
8f:36:12:a1:ac:26:16:3a:b9:e2:0a:33:f0:1b:c7:
b1:cd:33:8e:da:6d:5a:ed:81:ff:ce:8d:7c:85:38:
9c:eb:32:ce:55:d7:2d:97:cc:eb:01:10:6d:7f:1a:
35:42:51:d7:91:8b:a0:7d:da:b3:65:d1:f4:2a:ee:
f7:ce:58:b4:a0:58:ec:2b:f3:da:35:23:64:ca:e2:
99:1f:d5:1c:9c:c6:2d:73:77:4d:26:19:11:59:e2:
f0:0c:f7:5d:5e:ac:15:99:f7:20:17:57:2e:39:46:
1f:65:9c:c1:ce:b7:5c:0f:d4:5e:17:2f:d3:55:4c:
1f:de:a8:15:1c:52:5c:f3:82:b8:a2:35:38:35:77:
36:02:e0:b0:65:1f:5b:4b:e3:49:b2:8b:56:52:31:
dd:b2:e6:2f:5f:93:57:c0:e3:1b:3e:c0:48:01:6f:
09:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:47:70:96:86:B9:5D:6E:B1:78:ED:BB:69:36:B8:65:F1:DB:30
X509v3 Authority Key Identifier:
keyid:0A:02:14:A1:BF:1D:3A:FD:2D:D6:6B:23:A9:97:31:06:B5:D3:16:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgIUob8dOv0t1msjqZcxBrXTFso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/04ecc0-663c-460e-920d-332ee5425c7a/1/CgIUob8dOv0t1msjqZcxBrXTFso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:73:a5:12:e2:20:58:fc:ed:4f:d4:45:82:fc:12:2a:49:d0:
c4:1e:0c:34:6e:99:bd:c5:ae:e8:51:80:b4:fd:47:d9:ef:da:
0a:e0:77:f1:4c:08:36:d1:fa:d8:63:47:9e:5f:b8:e6:1b:e0:
b7:49:61:d8:6d:23:72:1d:13:ed:9e:89:cf:14:d1:23:07:7c:
11:47:29:b6:45:5e:1c:de:84:d6:41:2e:56:bc:ef:6e:94:9f:
63:34:b1:49:c3:84:92:88:db:39:39:93:a4:dd:fe:5d:50:24:
45:39:76:72:84:5f:20:88:44:be:ba:d6:1b:bd:d8:9a:50:19:
7f:0c:67:d9:86:6a:c4:a2:95:9d:1c:1e:3a:48:f1:37:6a:b9:
20:c7:33:3a:1e:f4:61:c7:5d:7c:b6:af:43:b9:2e:4e:71:c8:
a3:e9:15:33:4c:db:a3:05:4f:9f:45:6e:f6:25:35:b9:ab:86:
b6:ef:f5:63:d7:95:ad:f4:bd:de:7b:6d:60:0e:c4:e9:9a:d1:
92:97:8a:f5:f6:21:37:91:70:8c:83:f8:1b:b1:91:26:c8:be:
10:b4:52:6c:95:d3:1c:ea:8e:25:e6:f6:27:aa:00:b9:0c:86:
4c:79:8a:a1:09:96:00:2f:70:62:94:52:9d:7f:38:cf:4e:db:
e2:bb:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:59 2025 by rpki-client