Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
File: ckUYpXBpyv2D4htcYPsmLY7fNCs.mft (raw, json)
Hash identifier: erGiif10P+q+ICRkgmZE/C+k08/hMO2jUC/1GoJAnKI=
Subject key identifier: E7:D1:E6:27:FA:E3:A2:A9:A2:5D:EC:50:46:81:D5:3B:26:AD:9A:40
Authority key identifier: 72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
Certificate issuer: /CN=724518a57069cafd83e21b5c60fb262d8edf342b
Certificate serial: 0194BBCDC236F273D8D2D905B3A1EC38EAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: VntpOhfdioRatCH4o3GkTZdOjlc.roa (hash: gcIiYrJNp2HrQ1a0bBTw3kNV/tkPu/21t2SyNmL8svY=)
2: ckUYpXBpyv2D4htcYPsmLY7fNCs.crl (hash: 1byQoWgio4bfF4gWgA+CRBogrCodP/cvHmTkyxhv4aY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:36:f2:73:d8:d2:d9:05:b3:a1:ec:38:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=724518a57069cafd83e21b5c60fb262d8edf342b
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=e7d1e627fae3a2a9a25dec504681d53b26ad9a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:48:14:56:01:0a:fb:e4:04:0f:fd:2d:05:
c8:78:e8:63:a3:9b:9d:0b:38:b3:3f:96:bf:5b:49:
4f:b3:50:0b:8a:6c:d4:c1:a3:f0:dd:2e:04:3e:33:
91:36:04:f2:70:40:5d:ca:27:c7:e7:bc:43:bf:3d:
30:0b:cf:b3:5c:f6:7c:40:cb:a2:25:4e:2c:f4:1b:
43:78:07:e6:cd:2a:48:a4:f6:a8:d6:52:6f:7c:77:
e2:f0:e8:d2:d0:bd:2a:f2:9e:0c:db:72:e1:bf:27:
38:85:d9:85:c9:46:c8:9b:29:28:73:8b:38:09:e1:
20:a8:e9:c1:18:ca:e6:14:42:54:f4:81:fb:b8:b7:
2c:2e:02:10:9b:43:66:68:ac:30:3b:f5:c7:66:7b:
56:8e:af:b3:92:eb:16:af:37:1e:80:4e:25:ab:f0:
65:f9:00:25:b1:fa:25:de:f1:7d:fa:c7:71:fc:0e:
16:ec:10:be:0b:b5:31:ba:3e:1f:91:15:62:a2:70:
09:fa:80:e8:f8:b0:d8:ea:43:36:6c:b1:16:73:59:
4d:79:e2:eb:d5:74:2e:06:65:a5:48:a8:ee:4d:ed:
a6:4e:c3:2b:82:5c:f2:a5:b2:51:52:2e:2d:11:88:
10:c9:6b:fb:3c:7d:58:f4:a4:e3:7b:ee:4d:c0:22:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D1:E6:27:FA:E3:A2:A9:A2:5D:EC:50:46:81:D5:3B:26:AD:9A:40
X509v3 Authority Key Identifier:
keyid:72:45:18:A5:70:69:CA:FD:83:E2:1B:5C:60:FB:26:2D:8E:DF:34:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckUYpXBpyv2D4htcYPsmLY7fNCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/953550-0266-4f2e-8dc3-7f4bd9b54e62/1/ckUYpXBpyv2D4htcYPsmLY7fNCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b8:d6:df:cb:bb:a7:92:54:4e:41:70:dd:53:cc:66:7c:5c:
7c:e9:c2:ef:3c:6e:d1:6a:37:9d:15:e0:48:2b:d9:32:7d:f3:
5a:07:66:11:34:e4:84:78:cc:08:62:30:00:3b:0a:21:20:1d:
ea:5f:15:19:3e:54:98:44:97:4b:e7:5f:fd:bc:dc:62:bc:82:
0b:52:ba:fc:ea:70:ea:45:a8:da:30:52:49:a4:20:5f:aa:6e:
42:7b:c0:38:21:b4:8b:c7:d9:12:2e:18:30:b7:52:00:4f:10:
35:49:42:82:c3:d2:7f:23:44:91:f7:cc:2f:37:b1:6d:23:43:
6b:6b:9a:ce:e8:a9:88:b5:2c:c4:c8:af:72:b0:ab:aa:a2:bd:
e3:70:33:03:f4:bf:0d:c1:f3:b2:e5:48:a0:f0:60:ad:d1:55:
8a:fb:09:e0:55:0f:9d:c6:30:25:5f:0f:11:d6:51:55:2f:90:
da:41:1b:ae:03:40:32:4e:94:58:86:e1:e5:63:fc:ff:57:a5:
6b:e3:de:0e:21:93:af:e9:66:5b:26:fd:7b:d2:11:7c:59:e8:
70:6c:81:46:af:8c:68:b6:f9:30:e9:b5:63:5d:82:5f:30:83:
8d:d1:9c:f5:94:15:5d:95:3d:58:50:ce:61:55:99:b7:ed:59:
44:0e:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:30 2025 by rpki-client