Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
File: CkjASBaqYfk14Upkw-u6kQumUfQ.mft (raw, json)
Hash identifier: y9jksBCljCnHKounNjqxsM4+Ht4VksriDvTx4Q/G67M=
Subject key identifier: 50:1C:6D:FD:0E:FC:CC:55:E4:8B:19:7A:CB:74:14:4B:BC:29:8A:90
Authority key identifier: 0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
Certificate issuer: /CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Certificate serial: 0194BBCE9137BDF3B87B15F2BCF4ACDF7BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
Manifest number: 010D
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: 4nDZaowRUFxgro9HzJBdqHtaGu0.roa (hash: Pz1RCZ4Km++aeaXhzcucZrOWQ7ERwfeOGau3PvRd+wA=)
2: CkjASBaqYfk14Upkw-u6kQumUfQ.crl (hash: 251cDcNheuENCVr7rnJG5wIKnyJVm9lkpTdvnPaCrew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:91:37:bd:f3:b8:7b:15:f2:bc:f4:ac:df:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a48c04816aa61f935e14a64c3ebba910ba651f4
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=501c6dfd0efccc55e48b197acb74144bbc298a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:48:af:77:65:62:e2:b9:fa:87:62:c2:dc:
e9:64:57:77:75:73:8c:fe:ec:ce:44:e1:c3:fc:b3:
03:40:db:25:7b:61:9c:bc:e9:e0:6f:87:29:da:d3:
2f:e6:66:de:ee:4d:ee:77:ac:43:4e:79:7c:cd:ab:
04:0e:39:bd:78:a0:e4:98:7a:2b:b9:56:7a:e9:5f:
15:e8:1d:44:75:76:13:ba:b7:51:ec:09:66:30:b0:
a0:fb:32:ac:04:32:b5:22:a5:ec:20:c7:ec:52:a0:
a4:29:71:30:48:34:3e:44:bc:17:1d:c2:68:22:da:
79:be:f5:09:c6:b4:25:3b:06:51:ae:ae:e0:82:51:
eb:6a:4f:a2:4c:9b:35:89:ab:75:4e:75:91:1b:b7:
0e:2c:a2:49:bd:16:03:df:42:ef:d3:ab:3d:1f:2f:
f3:96:4a:c0:1c:de:90:17:5f:ed:4a:53:72:7b:62:
db:d5:69:91:59:2e:7a:2d:c6:52:94:41:46:24:76:
56:51:2a:84:d4:a8:0e:8b:f3:a6:f7:ee:e7:03:9e:
e5:19:c3:d3:21:7a:47:78:67:9e:4c:9c:e4:6f:a4:
17:b3:97:59:32:6d:82:e5:b3:b1:fd:ca:ce:f1:a5:
0c:a5:be:cb:b6:37:fa:f5:33:34:61:38:86:3a:43:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:6D:FD:0E:FC:CC:55:E4:8B:19:7A:CB:74:14:4B:BC:29:8A:90
X509v3 Authority Key Identifier:
keyid:0A:48:C0:48:16:AA:61:F9:35:E1:4A:64:C3:EB:BA:91:0B:A6:51:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkjASBaqYfk14Upkw-u6kQumUfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/069eab-f80d-4953-abc1-31aec07e945a/1/CkjASBaqYfk14Upkw-u6kQumUfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:09:47:71:c3:4d:0d:78:7b:ed:c1:3d:57:d1:a1:78:7d:1d:
32:7c:e9:35:fb:19:2b:bb:62:dd:6c:db:51:5f:77:4a:2b:94:
7e:03:c1:af:34:31:5f:dd:48:46:4c:b0:92:31:81:79:00:bc:
6d:07:b7:d4:bc:cd:71:f0:d7:46:bd:35:fa:63:64:17:c8:b3:
f8:ff:dd:a1:4a:d6:bf:9b:a1:1b:6c:9a:ea:da:66:11:08:8e:
2e:c1:26:6a:4a:ac:3e:20:be:a1:f0:d1:a5:6f:63:50:30:c9:
25:9a:02:b4:9a:01:72:6c:b4:6a:d1:63:87:ea:73:7c:8b:e1:
1c:70:a5:d4:9e:68:88:a4:38:e7:dc:0d:46:23:3f:73:f1:f6:
6f:ee:51:75:24:cd:70:d3:10:f6:a5:36:ea:81:34:13:ba:70:
a3:7c:72:0c:20:55:ee:7f:3e:0d:32:3f:6e:0a:9d:df:7b:88:
3d:5b:c2:ed:18:12:7f:e5:3b:f0:77:ad:e1:d1:e9:cc:e4:1f:
70:34:13:b8:d6:8a:e0:ca:44:2e:aa:39:4d:7d:c4:e8:6f:0f:
8d:50:6b:a6:7f:3c:8d:53:ec:c9:45:68:ff:9c:36:41:25:f3:
8a:82:93:26:42:7b:33:cf:00:f1:a9:fd:e9:7e:89:54:ef:53:
c4:1e:01:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:29:41 2025 by rpki-client