Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
File: cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft (raw, json)
Hash identifier: 7S9iICqYDuO+VW2+tS9LxplHAPt8SdEaNFvAMMaTXz8=
Subject key identifier: 68:1F:39:44:67:9F:FE:4D:AC:7E:37:59:A9:04:95:AF:DD:CB:31:64
Authority key identifier: 72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
Certificate issuer: /CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Certificate serial: 0194BBCDD6F1C19D7A77199844D20C0F9012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
Manifest number: 07CB
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: YJ__Jpr1denKLIU4A4wwpaBEGuM.roa (hash: HQMvWJSgBySt+TDaIiCe+VSZte2lW30WZtz1IJWSvxM=)
2: cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl (hash: X9t7R3RYdPj1MDUM18t+UoW//dD8Vt7FlyQkZLl5Yuc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:f1:c1:9d:7a:77:19:98:44:d2:0c:0f:90:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd0e36e1c202304a35133b11666625e5d6e5ef
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=681f3944679ffe4dac7e3759a90495afddcb3164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:bd:c8:82:79:6e:3d:8a:0d:12:29:97:6f:
ee:11:fc:a7:b0:e6:a4:9b:3c:9d:d9:db:51:dd:37:
5b:f7:24:48:06:73:13:75:70:60:ef:47:0b:2a:da:
0c:17:52:30:3e:3b:04:11:6b:26:6d:4a:07:e0:73:
bb:7f:84:7c:f4:46:ad:58:ac:a4:02:06:20:c7:0d:
7a:20:c5:2a:f8:3a:06:f6:25:b6:e1:f8:5c:92:d2:
44:62:79:df:1c:8a:d5:b1:12:2b:b6:f5:2d:73:06:
c6:98:f0:9a:f2:b9:e2:99:1a:1c:7b:9d:35:10:af:
45:b3:a5:29:53:66:49:90:cc:dd:79:e4:8b:56:6f:
bb:89:34:b7:86:a7:c5:b4:52:25:68:ea:9c:62:95:
cf:59:25:88:b7:97:4c:4a:55:47:6b:39:cd:2d:c1:
e4:d0:fb:45:f0:00:27:b4:5d:73:02:e3:46:ad:c0:
04:a6:62:a9:e3:7e:1a:26:df:9d:ff:18:8e:63:83:
77:13:85:06:f7:de:5c:3c:34:29:03:73:d1:56:e7:
7e:3c:93:da:b5:96:f9:40:f5:93:d8:7b:22:9b:70:
1a:97:5b:8b:1b:0a:47:47:6b:83:2a:76:d8:a5:da:
88:d7:8b:45:68:7a:b5:84:84:5f:15:fe:4d:30:ca:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1F:39:44:67:9F:FE:4D:AC:7E:37:59:A9:04:95:AF:DD:CB:31:64
X509v3 Authority Key Identifier:
keyid:72:BD:0E:36:E1:C2:02:30:4A:35:13:3B:11:66:66:25:E5:D6:E5:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr0ONuHCAjBKNRM7EWZmJeXW5e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/52476d-a794-47d5-8f50-aeda824678d4/1/cr0ONuHCAjBKNRM7EWZmJeXW5e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:1e:2a:c1:b8:12:dc:26:ec:e4:50:82:10:e7:a9:86:a7:93:
4c:b4:f2:35:53:39:04:cb:dd:de:e5:8f:31:73:5e:e2:ad:00:
81:01:b6:f9:ae:67:57:6f:db:5d:2b:28:2f:76:34:1d:4f:f2:
58:14:9a:87:f0:a3:0b:22:7d:2f:b7:38:6f:89:f1:fb:fb:80:
26:a3:f2:b0:f1:d4:41:c0:ea:c1:64:ba:dc:93:5a:af:f8:57:
22:c9:01:4c:6e:85:59:1e:69:67:ef:79:d0:87:e6:dd:43:35:
82:df:b4:ba:6a:56:e4:a5:a9:f6:b9:4d:9f:eb:14:84:c7:79:
42:ef:c7:80:78:7f:e2:1a:9d:29:41:bc:4d:dc:5c:4e:89:ba:
bf:0e:9a:65:a6:2c:9f:3e:68:f3:9a:73:07:3c:f5:ca:b4:05:
49:2d:3a:68:cd:7a:fb:62:04:09:62:06:56:a3:da:91:1b:88:
40:2b:ca:be:dd:7e:a2:ae:a9:27:78:6f:17:38:9a:60:75:72:
84:eb:a1:dc:98:1b:89:91:e6:8c:03:70:c6:05:61:76:14:49:
c0:08:ed:ab:b4:1b:2f:8e:f5:9b:f6:37:2a:aa:68:49:38:0a:
f7:60:5d:c4:f3:77:74:f4:1d:17:05:21:43:8d:b7:67:2a:4f:
f3:cd:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:01:58 2025 by rpki-client