Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
File: cAAC6c0sdKDvi1G0DUTRQaky0oM.mft (raw, json)
Hash identifier: hOnpGHIw2jrYpmzMin3tsvvqod9sgwhzKAT11dfQ9bY=
Subject key identifier: D3:DA:30:16:FC:33:0D:46:B0:C5:D9:A8:CA:B0:11:A6:68:24:0B:63
Authority key identifier: 70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
Certificate issuer: /CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Certificate serial: 0194BC3BBA85F06433A4636C0FB247B5B7C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
Manifest number: 0BC5
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: 7oIzidmPV5DMaJu71KEE7TN3jrE.roa (hash: kCtY+zZ5Nv1Tl34nUDS681Pc5/oW0aaVlayqB3KyvjU=)
2: cAAC6c0sdKDvi1G0DUTRQaky0oM.crl (hash: vU3DV48qk6XTJfWOv6X3Re+LgPeRCOy/np2yqa3D75I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:85:f0:64:33:a4:63:6c:0f:b2:47:b5:b7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700002e9cd2c74a0ef8b51b40d44d141a932d283
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=d3da3016fc330d46b0c5d9a8cab011a668240b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:0f:5d:bc:8d:5e:04:e4:93:0e:31:65:81:
17:a4:91:7e:c8:17:21:50:41:bb:28:51:ca:ca:66:
9f:bc:33:60:ad:91:e3:02:fd:bf:66:40:db:e1:bf:
59:49:a4:fd:a0:5b:bc:12:36:d4:4d:23:0b:d6:b0:
96:f7:a4:10:d9:29:1c:76:f6:de:78:9a:09:71:bd:
0e:f1:9d:9e:11:e5:74:81:06:e2:30:82:50:30:69:
47:6a:fb:cd:4d:c7:32:5d:32:a6:d5:e6:6e:2c:35:
5c:4f:34:da:05:5c:6e:86:8d:28:b7:71:fd:69:96:
42:42:22:c5:f0:80:32:22:8a:e6:56:47:36:33:1f:
f5:4a:b8:31:5e:13:9b:2c:b2:01:e3:15:e7:a0:ef:
85:8f:f0:04:fe:33:0b:f7:8d:f1:af:8f:6d:3e:fc:
84:36:f4:64:2f:20:fe:e5:f7:8c:a3:59:07:e5:a4:
52:6c:5d:2c:62:26:bb:25:2d:7b:a1:a7:5e:78:89:
71:c4:d3:98:ae:81:d1:5c:d1:14:cf:09:b6:97:f7:
8a:77:44:59:dd:f1:65:55:fe:09:88:f0:b8:7f:b0:
0e:8f:0e:e7:6a:90:0f:1f:29:a2:31:4a:af:df:a2:
1c:91:b9:2e:c5:d0:af:40:5a:db:d9:fc:06:cd:2c:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:30:16:FC:33:0D:46:B0:C5:D9:A8:CA:B0:11:A6:68:24:0B:63
X509v3 Authority Key Identifier:
keyid:70:00:02:E9:CD:2C:74:A0:EF:8B:51:B4:0D:44:D1:41:A9:32:D2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAAC6c0sdKDvi1G0DUTRQaky0oM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/52e0bc-9629-4a20-a002-909209356b2f/1/cAAC6c0sdKDvi1G0DUTRQaky0oM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:61:79:6b:98:fc:bf:79:85:56:e8:08:20:c8:3a:dc:f7:85:
4a:bc:a8:d0:85:17:c3:12:08:8f:e2:9d:e0:33:a9:c4:18:e2:
97:b8:e0:52:34:78:70:52:db:21:74:bb:c1:45:e4:94:ba:76:
ad:70:86:a3:41:5a:e7:6c:c0:1a:73:f1:25:a4:17:bf:a9:9c:
fb:2f:75:92:a5:e8:92:f9:35:b1:d7:26:b2:3a:5a:ba:b3:cd:
ae:5f:d0:b6:81:6f:4f:37:f7:c2:f7:cd:9b:04:10:1d:78:a8:
f8:75:81:78:22:27:21:b4:f0:56:71:5c:fc:e3:8b:e8:43:53:
e3:25:db:14:5d:b5:3e:da:05:b8:66:fb:20:fb:14:6f:37:bb:
d3:1f:ac:46:da:6d:3c:d1:bb:03:9b:c4:44:38:89:6d:a6:16:
82:35:fa:ca:42:61:18:f1:57:b6:d2:44:fc:b6:ec:61:61:9c:
80:ec:66:41:09:57:41:e6:36:3a:88:bf:ef:1a:be:b3:c5:61:
05:eb:61:3b:8d:e0:5a:34:b8:d1:1a:73:17:eb:fa:4a:7a:9b:
63:28:a4:28:69:7c:c0:92:ac:66:8f:70:67:7f:bd:30:a0:c4:
cb:9f:eb:2b:10:3f:c0:78:55:1d:0e:f5:d7:fa:4d:96:f5:6c:
f4:56:46:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:37 2025 by rpki-client