Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
File: cHdwf2aXiCaodeuNLrMzvthWlmc.mft (raw, json)
Hash identifier: Ps3c56vhl51TCYMsxDM8F8h8YSca0WbEP6Ll7CjnMCY=
Subject key identifier: 60:A8:29:FF:8B:46:7B:8A:45:84:84:F2:34:9E:45:70:4B:37:C0:17
Authority key identifier: 70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
Certificate issuer: /CN=7077707f66978826a875eb8d2eb333bed8569667
Certificate serial: 0194BBCDFCDA6E0BFF479AC0BC490F432C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
Manifest number: 0610
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: ZBqGiL5Lwt5_4rzPo7SO0cTda9c.roa (hash: KELG75sz8Tw2WawKyeiPVA4v+ezxNcK7f4e9XzFuUUw=)
2: cHdwf2aXiCaodeuNLrMzvthWlmc.crl (hash: DewMlSY7qowyZz4GDCUPwsQxmNRN3Xp9Bau2hOkdAdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:da:6e:0b:ff:47:9a:c0:bc:49:0f:43:2c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7077707f66978826a875eb8d2eb333bed8569667
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=60a829ff8b467b8a458484f2349e45704b37c017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:f0:8c:4b:d5:3e:e0:bb:37:69:35:c5:a0:
03:2b:88:f7:eb:d7:7e:19:a8:2a:08:ce:1b:c0:5e:
dc:ce:54:c6:55:84:77:db:50:8f:af:5f:6b:ab:3f:
e7:98:10:62:8b:3f:6e:e7:51:58:45:84:60:55:9a:
f2:66:c4:0e:70:fc:81:0d:4a:60:01:00:f3:9e:08:
4c:16:dc:d1:ba:c9:d2:42:b7:93:0a:d2:29:6b:ff:
7e:83:bb:36:90:13:6d:88:2d:29:bc:94:53:05:c7:
e4:8c:ae:2f:5a:0e:6a:00:bf:5a:76:63:6c:9c:a2:
d4:e7:e1:ac:1f:59:52:96:b8:77:f6:29:8d:39:a0:
56:58:c8:92:a2:14:8b:32:8a:25:81:ba:1c:9d:9f:
1e:07:74:ba:55:af:f2:d5:11:cd:37:99:c1:19:e9:
b9:cc:0b:ac:db:bb:f8:9c:4b:31:56:20:73:a2:0a:
91:4d:e5:f6:67:33:f9:1a:47:b6:df:8c:0b:7a:c2:
05:43:d1:57:b8:5e:d3:e9:70:7a:09:ab:c9:ca:91:
4f:fd:25:29:01:0c:1e:92:b1:db:33:58:2c:e4:f6:
4f:2d:84:96:a0:17:3e:74:7f:7c:e9:b0:2d:71:87:
58:90:da:2f:25:bb:5a:79:69:36:30:53:2d:24:14:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:29:FF:8B:46:7B:8A:45:84:84:F2:34:9E:45:70:4B:37:C0:17
X509v3 Authority Key Identifier:
keyid:70:77:70:7F:66:97:88:26:A8:75:EB:8D:2E:B3:33:BE:D8:56:96:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHdwf2aXiCaodeuNLrMzvthWlmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b9a1a0-6ada-4dde-965b-46ff7ce2c140/1/cHdwf2aXiCaodeuNLrMzvthWlmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:5c:40:7b:80:b1:fc:63:70:ca:9a:00:b1:d7:54:ef:81:
b2:79:5b:28:9a:6d:ae:90:ee:f5:cb:78:e5:7a:e0:c4:1b:fb:
ce:7d:08:f0:69:de:e0:69:63:37:75:f2:98:d0:43:e2:03:69:
d1:f8:f3:25:57:8a:93:dd:fe:c5:ef:78:75:8c:d5:a9:ac:d4:
17:6d:97:57:40:cc:b8:5d:bd:19:d1:20:a7:a4:5d:77:0a:74:
c3:03:51:00:ba:5a:80:ef:8b:90:99:00:d1:90:6d:19:07:23:
fa:b9:9e:93:4f:ba:23:eb:1a:a9:16:6d:41:a4:ad:bd:a3:1a:
24:94:b9:b6:c3:22:60:71:1b:01:b2:d0:ab:62:85:a5:66:10:
7f:68:d8:61:cb:52:cb:b1:22:c1:64:57:fe:12:2e:b0:be:b7:
26:17:a2:2a:5d:66:d7:e5:29:7f:30:f7:4f:35:2e:db:41:c0:
31:74:e7:9d:5a:e2:88:fe:ed:75:29:90:f1:48:94:1d:16:01:
ff:ba:92:20:d3:0d:7c:b5:b0:5a:4d:5f:a1:1a:20:8f:56:1d:
a9:8e:77:8c:bb:10:41:cf:3c:57:ae:83:d3:24:f2:d0:12:d7:
4b:c6:07:d4:04:b0:7d:43:94:6e:ce:0e:17:37:10:48:79:c5:
2f:d3:2d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:42 2025 by rpki-client