Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: B22F0xVZXt5uS6kawJfo73XA359FXd5C/dc7om5ObcM=
Subject key identifier: 01:16:42:B6:91:1B:07:89:53:8F:46:72:15:FC:0C:24:8C:DA:1F:8B
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 0194BD179D2DF6D3090D8B657780EEFD18E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 139A
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: YXf-UI6sodjRtp6HqVvWtQPvYyw.roa (hash: Jo6+/rWF7ZwPltXrVquS1cq9nd5I9gl4VOXFVkjNYeU=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: m/AdhAZ44RSAOIB/pk3TcmBcEFfJgB2s7y8ftdjCv7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9d:2d:f6:d3:09:0d:8b:65:77:80:ee:fd:18:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=011642b6911b0789538f467215fc0c248cda1f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8c:f7:4f:de:b9:16:b8:20:af:8d:cc:7a:48:
a4:46:68:32:35:b7:b7:ac:8c:b5:31:ad:f6:c8:a1:
f6:a4:c8:6b:ad:87:24:60:6d:72:68:65:ed:75:26:
17:e6:26:6f:d5:dd:ae:56:20:a3:59:bb:94:8c:11:
21:61:aa:aa:c7:75:3c:2a:b7:fb:7e:90:ad:25:85:
0f:6c:83:07:66:ab:e5:8c:20:72:14:b3:4d:18:66:
ec:13:b8:12:27:15:f0:a4:ac:e5:e3:e9:7d:18:dd:
c3:1e:bb:0c:eb:91:f4:f2:3a:a2:3b:c9:1f:57:4c:
b2:c4:6e:92:b3:ea:bd:df:90:05:a3:d3:92:c0:a3:
5e:0f:0f:70:2b:5b:bc:11:e1:6e:a9:6d:d4:6a:95:
44:d9:b5:1e:ac:5b:2b:e4:3e:05:43:72:bc:15:a9:
10:86:cc:75:27:9d:e7:9c:1f:59:1d:72:c2:a8:f2:
6d:e8:6d:42:6a:5e:57:ec:df:10:63:d4:0c:72:04:
00:f9:6f:85:59:b4:0e:94:7b:f6:a0:2c:af:21:ec:
77:04:f8:03:e2:d1:92:e1:9a:8e:e9:c7:b2:ef:c4:
e0:42:7c:66:a0:10:e2:a7:63:10:f7:da:25:c4:95:
70:14:89:48:74:90:5d:b9:df:66:81:f7:32:92:44:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:42:B6:91:1B:07:89:53:8F:46:72:15:FC:0C:24:8C:DA:1F:8B
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0e:93:c0:cb:95:cb:14:89:ed:5b:0a:59:bd:4c:c5:d7:c1:
bf:63:ee:d9:8a:28:f3:97:2e:69:d9:b6:bf:66:d0:b1:ad:04:
25:c6:72:f5:1a:65:29:a4:8f:6c:c8:aa:0c:a3:e5:f5:36:95:
6f:a7:8e:e6:db:e7:92:a1:2a:36:61:2c:17:0d:63:e4:f3:77:
35:2d:7f:bc:b3:3f:6d:23:87:95:0d:98:bb:25:e4:f2:99:50:
cf:c5:2a:d9:3c:da:2a:1d:de:3d:c8:cd:42:e7:4f:1c:c8:d2:
3a:53:3f:0f:c9:f4:02:1d:97:33:43:2a:8e:7d:b6:0a:e4:2a:
ff:bc:4f:e6:66:e0:d7:df:64:92:ec:47:c0:76:16:2b:54:b9:
2b:5b:e3:28:e2:3e:d2:e0:07:c0:c0:f8:b1:1c:99:7e:4d:bb:
87:af:bd:74:c8:db:ff:f6:d2:43:46:87:fe:11:86:ad:f1:62:
09:e2:85:70:23:dd:72:79:ec:1e:22:76:e1:dd:3b:c8:5e:67:
45:de:ef:f8:81:62:15:46:30:9b:56:18:7f:9b:04:d3:18:ad:
2a:a9:f2:1c:81:c7:fe:88:1f:6a:40:b3:ce:a6:1e:33:80:22:
46:91:c7:59:19:1d:db:ad:03:91:40:6d:be:67:4a:96:25:bc:
13:c5:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:11 2025 by rpki-client