Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: JlkMQP/NedvCcEiOd79YEkVECx6j14ltX1ZhWsO3BAU=
Subject key identifier: 98:BD:82:94:01:89:BA:B2:12:47:BC:17:96:44:74:7D:B2:51:39:24
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0194BCE0767C11BE4B5893FCA50568B6BE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0C4A
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 7xGD37hd+R6WX04nnCH0pzGEtewChg6SVdA7jBHKBV4=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:76:7c:11:be:4b:58:93:fc:a5:05:68:b6:be:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=98bd82940189bab21247bc179644747db2513924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:a5:eb:5a:e7:17:ec:34:f2:8f:e6:ed:58:
7b:b4:68:77:31:3a:22:c6:35:38:43:4b:bd:ad:14:
ad:0d:06:4d:18:6e:60:6f:2d:67:83:b4:c2:a7:96:
6a:74:1e:bc:32:41:ef:ac:a8:90:84:9f:0d:61:8b:
32:55:6b:84:5a:97:30:2f:54:f4:82:40:71:6c:db:
12:1b:34:4f:43:07:f2:97:92:05:bb:a5:42:5c:d2:
db:9e:91:72:b3:e2:2a:4a:87:7d:86:ef:5e:7b:5d:
c6:a3:9d:d5:1a:3e:54:68:92:cb:d6:14:6c:2f:21:
08:1e:35:ad:1d:00:9c:1f:27:2f:c4:e3:4d:de:e5:
a8:57:ec:fa:ce:c4:c6:72:49:9d:96:05:ac:12:8f:
ed:d3:ff:6f:b5:46:ba:bc:84:e7:0d:74:de:65:13:
39:21:ca:44:d6:b4:71:b1:ec:81:d7:6f:9e:2c:ac:
1d:3b:aa:e4:a5:15:10:af:a2:b3:26:bb:33:2b:ea:
63:6d:aa:b3:3c:bf:ed:16:db:1b:ee:5e:77:d9:e3:
e9:ef:38:45:6e:dc:62:9d:52:cd:38:05:8f:81:ba:
e7:47:ac:b4:df:91:49:95:e8:b4:bb:50:a2:d2:c6:
7d:b0:df:f1:fd:0a:c0:72:1c:8e:df:37:47:ec:9a:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:82:94:01:89:BA:B2:12:47:BC:17:96:44:74:7D:B2:51:39:24
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b8:6d:e9:31:d5:fc:3d:1d:1d:0e:4e:f3:db:31:c2:dd:9c:
02:e3:e6:11:e4:a1:89:fa:a7:8e:7a:17:07:25:00:27:62:9a:
b7:f1:77:15:56:3a:d7:0f:21:e8:3f:f5:e8:97:d6:0f:96:3e:
51:4c:9f:2b:45:d6:b7:53:18:a9:0d:81:7b:2f:4c:22:ee:dd:
72:02:2a:e0:36:bb:52:9f:11:cf:c6:01:37:cf:2f:c4:f7:73:
86:4f:58:9d:3d:7e:14:7c:5b:dd:4c:97:39:5b:8a:6f:f2:93:
cf:4f:91:37:6d:0e:4f:a6:1b:8c:89:6e:a0:57:30:e0:41:83:
dd:69:7a:44:86:cc:5b:df:fb:48:6d:04:df:c9:70:8b:b8:bf:
2a:0a:e6:a8:d2:5b:f6:b4:09:c9:dc:af:9b:82:d5:90:74:65:
04:6c:c7:ce:76:40:d1:34:ab:08:e9:a4:96:24:6f:d4:e7:4b:
ff:c3:79:ab:5b:65:05:e3:65:73:ca:45:f1:4b:1a:97:bd:6c:
be:bc:44:16:f1:ba:bb:3d:1c:9f:08:c1:cd:53:c3:c9:8b:ec:
4e:0c:74:0b:01:ad:11:2d:3d:dd:58:53:3b:2b:6b:4f:8f:54:
64:8c:a2:b2:e3:f2:71:06:99:ab:b6:91:8c:75:97:12:45:02:
63:85:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:30 2025 by rpki-client