Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
File: POwGHF7VbcoHdT_ktbjAkNl60OE.mft (raw, json)
Hash identifier: n9im3HJrECYNGu35ilY44TUUbSfJ1ycJevUVUmGLe9Q=
Subject key identifier: B0:A1:BD:40:3B:8C:C3:D3:42:8F:8C:55:E2:1C:A8:A5:F3:70:2C:B4
Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Certificate serial: 0194BC04DB5D39C2B00F76AE01EA258E5029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
Manifest number: 03CC
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: J--9FTqyd7jwis3viXw5cnMN5-o.roa (hash: DC3T7Frr+GR57cEYLFoZVlKHfiR/SiiUWqjetZEXAWY=)
2: POwGHF7VbcoHdT_ktbjAkNl60OE.crl (hash: zjCwL+R7o/aTrVcjaSzr8sJFSVdxE01rcQ1qW+68e5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:db:5d:39:c2:b0:0f:76:ae:01:ea:25:8e:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=b0a1bd403b8cc3d3428f8c55e21ca8a5f3702cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:6b:83:b5:19:67:0d:28:d4:aa:0d:bf:f9:
90:04:25:2c:ac:44:f3:cf:31:39:aa:0a:ba:91:77:
3a:07:bf:b2:1b:f2:9a:77:ee:08:23:65:2a:e5:bf:
c2:5a:3e:f2:dc:2f:0a:b3:e7:ce:37:37:0e:6e:35:
de:fa:ad:c2:0f:1a:32:e2:3e:0b:9c:f2:c8:34:0d:
88:b5:ac:85:fb:0f:cc:02:8c:8d:50:47:25:e0:44:
20:78:db:61:ab:42:c9:6a:05:50:85:8d:5c:bd:8b:
54:fc:44:b9:4b:8c:16:92:8f:ca:49:35:0f:0c:2e:
f8:95:a3:8b:6d:88:62:26:6d:e2:fa:57:a7:6e:54:
60:01:be:49:aa:63:2c:da:7c:8a:18:65:5a:41:ae:
cc:15:df:b8:6c:2f:2a:e4:34:47:db:cc:ac:03:b7:
59:cc:df:55:b3:fd:c6:c4:48:83:18:b0:87:2b:39:
89:7e:15:13:bf:4b:5a:c1:79:fd:49:2f:e0:b3:61:
ef:9c:7a:e1:f7:65:0c:49:01:af:51:57:76:02:83:
b3:25:b5:08:44:0b:f2:33:0c:52:85:af:91:43:dc:
b4:74:df:06:2f:a1:9c:de:6a:f9:be:84:2d:9d:9f:
5f:d6:46:f3:c6:8d:d9:e1:ba:8b:7a:b3:1e:9c:19:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:BD:40:3B:8C:C3:D3:42:8F:8C:55:E2:1C:A8:A5:F3:70:2C:B4
X509v3 Authority Key Identifier:
keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:2f:f5:00:2c:4f:82:e5:46:81:b1:25:87:a8:a5:cc:9a:
b8:df:40:b3:73:58:e6:b5:9d:fb:cf:8b:9d:b2:8d:94:ba:69:
a6:85:28:e8:bc:0f:af:17:3d:f7:0b:f6:b7:47:15:01:01:d8:
05:f0:17:a4:fb:a0:91:24:78:27:aa:47:6f:b9:30:94:a6:8c:
d5:7a:65:40:72:2b:4d:82:43:c8:f1:73:c3:08:a5:16:85:09:
68:fd:aa:82:da:87:f8:4d:ca:2b:db:bc:01:81:aa:a0:0a:a5:
5e:fd:75:31:ae:54:42:35:78:c0:cb:34:af:4b:bb:ae:ec:39:
b4:d3:8f:71:ec:c0:4f:dd:40:96:6d:88:e5:ef:01:b3:a3:96:
d3:90:fd:ca:6b:82:76:62:9b:24:c4:16:76:34:02:eb:ec:d3:
cf:07:03:15:74:ca:1e:d0:a4:0f:99:03:c8:32:9e:08:c7:d7:
cf:a1:f0:ee:22:df:3f:b3:f5:7b:0d:7b:24:f7:8d:0f:63:5d:
44:fb:49:45:ec:ba:60:d6:92:39:c2:c7:2c:63:7d:f5:23:2a:
33:3d:4f:b5:f2:ea:89:af:fb:31:10:ad:14:83:e7:b0:e7:06:
8a:df:55:ad:4e:68:14:75:e6:03:1c:a0:b5:4f:4b:1e:02:63:
ba:c1:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:08 2025 by rpki-client