Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: htGENcQ3OkP5oqdNEMh3Pz30EdNQ4mQwXGlrYOxl3TU=
Subject key identifier: 05:EB:D4:39:23:58:E3:9D:00:C7:FD:E4:8E:F3:F2:9B:36:5C:81:50
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0194BCE06E53CB8E157484032E2FC877918C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 1112
Signing time: Fri 31 Jan 2025 15:00:12 +0000
Manifest this update: Fri 31 Jan 2025 15:00:12 +0000
Manifest next update: Sat 01 Feb 2025 15:00:12 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: fdiECmKA3sBrwvTF9nzmUUKblZqsqYWi5cXR0M9CpMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6e:53:cb:8e:15:74:84:03:2e:2f:c8:77:91:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Jan 31 15:00:12 2025 GMT
Not After : Feb 1 15:00:12 2025 GMT
Subject: CN=05ebd4392358e39d00c7fde48ef3f29b365c8150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:91:ee:37:06:c1:9c:a8:d1:a4:32:b9:17:
51:04:25:a3:a4:4c:4e:49:c6:c8:d3:4b:ba:18:69:
80:d1:e9:9f:73:3c:0d:f2:bb:16:05:73:a1:3d:5a:
83:d8:e2:e9:24:5d:06:24:d6:cd:a1:88:5e:80:0e:
6f:62:61:2e:4f:1c:68:5c:9f:2e:db:4c:6c:a9:63:
c8:50:f4:8b:3d:2f:68:ab:6e:19:26:57:fe:65:bd:
bb:25:9e:7c:d0:fd:a6:f6:ec:ff:65:1a:cf:79:47:
dc:1b:68:16:75:76:d6:c6:c8:5f:97:63:e7:77:22:
60:55:90:ef:c8:cd:15:a7:15:48:f7:63:24:13:c3:
25:93:d9:25:a1:88:b1:70:98:28:b7:90:53:20:d8:
e7:7e:40:dd:9d:d3:f5:d5:b0:41:73:8d:2d:11:b2:
70:bd:57:83:b7:4e:62:93:6a:08:b9:b5:37:d4:cb:
dd:5c:b6:57:b7:a1:25:d3:1c:70:a0:ce:d1:dd:6d:
9c:7d:c5:36:37:3b:56:80:e6:2b:e9:29:a3:e8:be:
85:28:9b:4b:04:89:6d:ba:97:92:05:c5:bf:00:aa:
84:56:85:f8:b8:af:85:36:81:96:fd:2c:e1:51:67:
ac:8e:46:ab:ad:c5:3b:52:db:3c:77:17:94:d7:39:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:D4:39:23:58:E3:9D:00:C7:FD:E4:8E:F3:F2:9B:36:5C:81:50
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:8e:1b:7c:7b:12:15:da:fa:b5:bb:e4:ca:3e:fb:89:af:
4b:f2:98:bb:24:fd:5e:27:2b:c9:45:0e:0c:fb:85:35:a1:fd:
68:64:30:b1:53:2d:ab:ec:86:56:a8:05:13:4a:53:5b:03:d4:
64:b8:8b:29:0b:4b:a5:bc:c0:d4:c8:10:f7:b1:39:84:19:8b:
f0:6f:94:ac:ae:43:29:7e:67:3b:cb:ef:64:43:3b:80:65:f4:
1a:ec:ee:38:f5:32:67:6e:72:b0:63:30:9b:0b:db:38:1a:68:
e9:3e:b9:71:9b:33:f3:24:94:4b:d3:34:e8:81:7f:1f:71:7d:
d5:f2:89:45:f5:d8:37:fa:e5:af:be:70:8f:49:66:99:b2:8d:
3f:e4:53:0c:a9:3d:b2:8d:ad:b9:9f:29:0a:8d:3f:04:0d:26:
95:90:73:48:9b:18:55:d6:c3:c3:26:1a:06:44:89:5b:77:44:
c1:c2:f9:23:1f:5b:42:8d:1d:ae:6a:c6:6c:6c:32:1b:67:62:
18:cd:a3:08:ea:b4:f3:03:34:92:91:df:a9:f9:f3:c8:9b:30:
91:ba:6a:06:99:f7:72:29:14:ed:b3:96:a1:0c:64:5a:8f:f3:
88:53:d7:f9:b3:2a:ba:66:b3:05:9e:50:30:0d:29:79:25:b5:
9d:d3:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:38 2025 by rpki-client