Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
File: CCpuN38ciFptc_P1af0G1-pMekU.mft (raw, json)
Hash identifier: /QLLlC3OHVSeu/nnc3Qfn2XQO1eM6r083deYL5aKD6o=
Subject key identifier: 0F:AE:89:F6:0D:B8:C4:8C:15:DF:A7:FF:0A:F1:99:13:B9:A1:8F:E5
Authority key identifier: 08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
Certificate issuer: /CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Certificate serial: 0194BBCEA09545C87A26BE3C008C9A97BBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: 7kjs94GsooBC3ok8_eDki6AqwvE.roa (hash: JBRZ5Zvu3ouJDx1Zug8almp1xArIsUFTcW8TFA1+REc=)
2: CCpuN38ciFptc_P1af0G1-pMekU.crl (hash: umZvkGWZzR4leXwnIfGZ5ylXmOKUoDsf2XZGFKYg/XE=)
3: iSF6wZyO6If58sQqTXysl1_Kh_M.roa (hash: 3SWDCP6sS0WfTJUbeS9QKmM82fQRW3IvJzsiGsOp1qA=)
4: u-28X2e_QK57_FwKns881CWMp-M.roa (hash: mnCpJ6c77tMsA8C2BwDpmN2eotoq+p9B3KyML3KcafM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:95:45:c8:7a:26:be:3c:00:8c:9a:97:bb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082a6e377f1c885a6d73f3f569fd06d7ea4c7a45
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=0fae89f60db8c48c15dfa7ff0af19913b9a18fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:4c:3e:f6:a4:3f:7b:70:5e:f6:73:96:13:
49:09:8a:b5:2f:00:8e:49:70:e4:db:a9:33:01:8a:
c4:8d:c3:6f:0f:37:ef:52:a3:2d:cf:1d:06:17:5e:
7c:fc:a4:d2:2a:73:90:13:ec:9b:1b:74:31:cb:77:
da:e2:73:fd:9a:83:58:74:3d:c1:77:33:c9:15:a0:
ac:ac:50:40:5d:44:b7:04:ce:44:e5:75:d8:5b:fa:
fe:97:35:08:af:c9:72:3c:6c:0a:cb:e0:d5:9d:03:
e1:d9:73:7e:a3:69:30:cc:b9:44:44:12:9d:77:98:
e4:e2:95:50:18:4c:5f:db:15:06:42:48:56:a8:2c:
a0:9c:8a:8f:1e:04:e0:0e:c8:8d:ed:80:e2:c7:22:
e0:33:78:0a:b9:6f:ac:fa:8e:ac:10:f9:35:17:43:
6e:39:53:c6:7e:8f:05:d7:e6:8b:47:77:45:b5:74:
c2:c6:86:98:2c:be:1d:85:99:6b:39:b9:ca:8f:86:
7c:6d:d5:17:9b:a7:32:b5:64:7e:4b:09:64:b2:84:
90:dc:e2:a0:46:11:9a:39:78:f1:97:86:1e:68:76:
c9:b7:59:f7:fc:dd:1d:4b:f7:8d:b0:ec:c9:7a:da:
7b:39:2e:6f:59:bd:08:a6:e2:36:e2:31:e0:c0:b1:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:89:F6:0D:B8:C4:8C:15:DF:A7:FF:0A:F1:99:13:B9:A1:8F:E5
X509v3 Authority Key Identifier:
keyid:08:2A:6E:37:7F:1C:88:5A:6D:73:F3:F5:69:FD:06:D7:EA:4C:7A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCpuN38ciFptc_P1af0G1-pMekU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/18feb3-f3d2-49f3-90d2-9d4b16b59de6/1/CCpuN38ciFptc_P1af0G1-pMekU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:22:19:58:72:c6:eb:90:86:8c:c8:53:b8:ba:ae:ee:ea:f4:
7c:4a:0d:ea:26:eb:81:da:71:74:a7:a4:4f:54:da:a6:a1:9a:
9b:a4:15:3e:89:93:f7:d1:16:3d:35:50:11:67:50:cb:49:0a:
21:cd:61:0c:05:06:16:72:76:25:79:26:c0:bd:07:06:6c:4c:
72:db:3d:41:7f:ef:31:3a:d5:9c:d1:3b:ec:27:10:92:34:c9:
5d:b9:e2:01:3d:6d:ed:bb:1e:34:50:d3:d7:ec:65:4b:fa:94:
e3:30:64:c9:12:bb:47:e1:36:be:4f:d4:28:67:d9:73:8c:da:
6c:af:63:2b:24:2e:87:63:dd:30:47:df:ab:cc:74:86:0f:c8:
cd:b2:fd:ea:4c:fe:e7:e1:73:bf:73:3e:18:2e:e0:b9:e4:4f:
9e:30:25:59:7b:43:44:2d:34:fc:1c:d1:5e:65:00:d9:05:0f:
66:20:a1:85:4c:63:37:06:f5:cf:8e:b3:33:3c:ca:de:32:e8:
21:9c:b8:38:6f:2f:90:2d:91:d5:3d:62:a7:06:86:4a:8d:57:
6d:23:a6:c4:84:9b:2b:ac:af:15:ad:2f:0c:bc:57:28:5e:40:
e2:c6:f7:25:dd:41:54:f1:f7:84:f5:60:e6:66:01:62:d6:ad:
a0:27:47:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 08:25:23 2025 by rpki-client