Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
File: cpnOZKDxYk17stKWnlwRrbqlSFw.mft (raw, json)
Hash identifier: aAAni7u8Vm+LKF9pWNM09wrz9TtWRGWlrgQVFs3CKrU=
Subject key identifier: BA:DA:C6:62:94:92:CC:47:84:19:07:01:20:A2:E6:B7:66:DF:E6:B8
Authority key identifier: 72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
Certificate issuer: /CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Certificate serial: 0194BC728D999B19421715EBEF22A1E8D754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
Manifest number: 0852
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: cpnOZKDxYk17stKWnlwRrbqlSFw.crl (hash: A90cYA2Zg1ra23ZFYdqUQ0A0QOM4ycdknSb89uVq61Y=)
2: hGLXMAJyrLLUknw2I4rIa47GY5A.roa (hash: 2PfIq+E4/YZaE6ygL6f+ygB4E8ocD+aiVc7FkOqVsVA=)
3: vbTBxrwzB75awQdnuHxvUmGSxrI.roa (hash: BNvntPsh9Cs3tqn2zXlS+7ZhQF3J782Zk6D2d5jtV8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8d:99:9b:19:42:17:15:eb:ef:22:a1:e8:d7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7299ce64a0f1624d7bb2d2969e5c11adbaa5485c
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=badac6629492cc478419070120a2e6b766dfe6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:c7:c3:98:0c:85:ef:33:df:48:5d:c0:94:
61:b0:4e:ce:3f:65:2c:85:d6:7b:c8:d3:ea:62:2c:
46:d1:40:b6:74:5d:bc:bf:fb:b7:c8:b6:fa:83:c5:
17:7f:e9:8f:a3:bf:64:bd:db:81:2b:46:ce:cd:f2:
c6:3c:11:79:88:31:7f:6f:6a:a4:86:72:8b:85:53:
85:31:be:08:89:ea:63:92:bd:40:3b:0d:de:9e:db:
41:16:09:2d:c6:3c:30:53:d8:82:bc:64:a8:5e:27:
2c:ef:ea:f5:1e:4f:9f:8f:a8:3c:d3:d0:58:c2:c1:
c2:de:9a:a7:14:7b:dd:fb:04:75:80:80:8a:89:48:
32:3a:63:88:a3:08:a3:e4:c6:dc:31:ba:eb:b4:7f:
53:72:ba:c1:6d:fb:a4:12:16:f4:8d:79:e3:30:20:
0e:0e:48:be:b7:8a:51:5c:2f:50:7a:fd:87:07:c6:
43:49:59:ba:8b:23:16:82:5a:59:da:bd:bc:d6:be:
46:a1:9b:71:39:e3:03:9c:ab:4b:bc:a4:be:ca:59:
d9:33:4d:77:3f:20:d0:7b:2c:f5:16:c5:64:0c:db:
34:9d:73:da:e8:2f:1b:f2:00:90:3a:cc:54:01:5b:
7a:23:02:d0:78:89:70:ea:79:27:1d:01:4e:9f:fe:
c6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:C6:62:94:92:CC:47:84:19:07:01:20:A2:E6:B7:66:DF:E6:B8
X509v3 Authority Key Identifier:
keyid:72:99:CE:64:A0:F1:62:4D:7B:B2:D2:96:9E:5C:11:AD:BA:A5:48:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpnOZKDxYk17stKWnlwRrbqlSFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c20fba-5b67-438c-ab00-c7eb34e2dca6/1/cpnOZKDxYk17stKWnlwRrbqlSFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8c:e3:db:7c:2b:a4:96:da:20:84:26:3d:06:92:d4:d4:dd:
00:f6:48:fc:f0:37:8e:86:ff:75:42:12:c9:8a:f3:43:1b:c0:
ec:31:af:16:b7:4b:e5:7e:c0:0d:5a:b8:59:fa:b9:0f:37:6a:
1f:a8:a5:75:6d:fd:a4:93:3c:fa:d9:78:b9:2b:77:73:ad:c2:
f4:c4:2d:38:53:32:72:77:d3:17:be:22:e4:07:48:b5:ca:06:
71:74:b6:b4:c8:be:80:60:5a:a5:58:27:64:9a:9f:f9:09:79:
eb:b9:0d:1a:fe:15:cc:0e:e6:9d:15:68:10:62:0c:d9:6d:8c:
c7:a0:31:79:54:81:a3:21:0a:f2:a3:b0:86:01:14:3c:0c:c7:
7e:e8:d0:79:37:76:5f:83:c4:93:79:4a:87:8a:1d:87:6c:49:
90:09:f1:a8:60:f0:d7:96:46:8e:ad:8d:e7:c7:d1:49:d2:f4:
04:67:93:7b:de:31:ea:ca:57:7d:a7:b0:bf:1a:a7:15:f0:c6:
04:88:9f:7b:77:14:e5:52:9f:50:e6:43:ec:50:cc:77:9a:6b:
72:9d:95:13:53:1e:ad:ad:a1:c0:d8:3e:dd:2d:a1:8d:c1:1b:
ea:f6:96:a6:46:e9:bb:4f:c2:3d:bb:75:85:f7:58:38:f7:e7:
0e:2a:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client