Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
File: CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft (raw, json)
Hash identifier: AnCFXT64chfwlUwYloYB4562kP3FU1MhsObYgWmO2vA=
Subject key identifier: 72:D1:64:25:42:0E:60:56:AD:49:4F:BC:94:8C:7D:4B:2F:D9:3E:C9
Authority key identifier: 0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
Certificate issuer: /CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Certificate serial: 0194BC72ABACEA932E95B6DD2C08E0A46B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
Manifest number: 0BC4
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl (hash: Qoi4uyXwQ8SvVoNn9eFVVx7qCAsbIhW5QTkJ5AM3qQk=)
2: YVDiu2Bt78Tw59IN2GiD08sPbEY.roa (hash: gfGYuVaf6Cp8c+ZZnEv2bV6oyjPxVpLPDTmNGZk2jGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:ac:ea:93:2e:95:b6:dd:2c:08:e0:a4:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aaaa79caacff5f0304b9ae9002e2713fbff6d52
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=72d16425420e6056ad494fbc948c7d4b2fd93ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:20:6d:14:d8:ef:e2:c5:a0:0c:46:24:bd:
ee:f0:2b:7b:14:69:92:ee:59:74:10:da:7f:7e:4a:
d0:a0:b7:b0:c2:70:c8:c8:2b:90:3d:02:33:c4:1b:
1f:1b:63:3d:f3:f3:7f:03:56:9d:70:ba:18:78:7e:
22:35:f6:67:79:45:c9:bb:49:30:34:ca:88:49:ac:
fe:2c:42:11:24:dc:82:16:6c:48:8d:b1:41:8f:67:
c4:23:eb:3a:10:ba:3d:a9:4b:17:e3:bf:53:43:da:
dc:02:be:dc:da:9b:63:be:03:31:5d:64:10:1f:a3:
b9:b7:ec:7f:c0:1d:8e:08:e8:c8:2b:04:89:77:7f:
b3:68:19:b6:8d:92:fc:77:c2:80:34:5e:91:9e:b2:
07:44:fa:a7:25:2c:b5:e6:1e:34:da:77:b9:dc:4b:
83:88:d0:8c:ba:d1:e0:14:3e:2e:b3:9f:4a:17:c9:
1c:ae:2b:dd:23:42:67:41:22:0e:ca:7b:90:91:d2:
41:f7:11:8c:3e:8b:59:56:87:b8:67:58:32:d9:2c:
51:16:1c:0f:e3:fd:09:76:cc:83:e2:17:2f:54:28:
4a:6c:43:8a:c4:b0:ff:bd:6f:f0:e4:9e:bb:8e:33:
0e:59:9f:44:02:bc:6c:a6:41:6d:b9:3b:db:1a:3c:
5c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D1:64:25:42:0E:60:56:AD:49:4F:BC:94:8C:7D:4B:2F:D9:3E:C9
X509v3 Authority Key Identifier:
keyid:0A:AA:A7:9C:AA:CF:F5:F0:30:4B:9A:E9:00:2E:27:13:FB:FF:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqqnnKrP9fAwS5rpAC4nE_v_bVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2fc266-1247-4f00-b161-6eb9a22129e1/1/CqqnnKrP9fAwS5rpAC4nE_v_bVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:45:47:62:9a:c5:34:e0:58:61:c7:05:2b:a6:01:c4:7c:
c8:33:be:de:7e:77:ef:6c:ed:cc:4e:13:e1:f5:2e:bb:24:1a:
a6:df:a4:04:b8:1c:47:10:c0:65:0b:4c:df:54:94:a0:09:cf:
a0:ab:57:98:85:02:8c:30:2f:a1:7b:c1:c7:f2:c4:bd:5a:d7:
69:88:62:0b:c5:17:6c:0f:78:31:5e:29:f2:8d:ca:2c:82:2d:
4a:d2:52:59:d6:55:1a:ca:c2:5a:67:88:bb:4c:0d:0d:eb:6c:
f8:6a:26:0d:1d:37:2e:98:85:c5:d1:ad:33:24:f2:31:e6:f2:
a4:1d:13:31:03:ae:69:9f:f8:ad:c2:0f:bb:dd:d2:41:e9:ff:
a2:7b:e6:91:dd:20:f1:e9:0a:17:5d:0e:90:c1:73:6d:e0:18:
1a:63:54:e0:cc:4a:02:1c:37:70:0a:ce:8d:31:3c:66:da:98:
86:3a:4a:98:2d:59:0b:f5:78:56:ae:75:5f:c3:d8:33:e9:1d:
7a:10:dc:d4:2f:33:62:23:ca:54:17:11:33:05:3c:bf:e0:f6:
4c:96:3a:dd:82:59:d4:0b:cf:b5:95:e1:cd:f1:8f:19:ae:89:
2a:cd:70:6e:c7:25:25:9e:2d:3b:0b:e8:d9:a5:96:59:ca:ae:
0f:83:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:41 2025 by rpki-client