Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft
File: CKB2kHVu7fadJFEIl_lB6xluW1k.mft (raw, json)
Hash identifier: Z55BV2M7uGScXZMpx7KAugb4/kN6v/RW6ZhD9gjAgi0=
Subject key identifier: B5:FD:EE:FA:01:9E:46:F0:46:2E:DB:7F:51:6A:9A:27:6E:C2:C7:19
Authority key identifier: 08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59
Certificate issuer: /CN=08a07690756eedf69d24510897f941eb196e5b59
Certificate serial: 018F13695223E3A0FC5685F32FC9D8B8F94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft
Manifest number: 0738
Signing time: Thu 25 Apr 2024 04:00:20 +0000
Manifest this update: Thu 25 Apr 2024 04:00:20 +0000
Manifest next update: Fri 26 Apr 2024 04:00:20 +0000
Files and hashes: 1: CKB2kHVu7fadJFEIl_lB6xluW1k.crl (hash: 4uyR4KDYJA5D7/ZVNNVG/q/DRbIy3EV73fHC8xlbBXw=)
2: TrdU6PScnn4E_xfbl-qwCjXnaJU.roa (hash: DK9Jku/TOH/68ODxjiGDnCXgK7nec5CUhRmkFLVnOcs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:69:52:23:e3:a0:fc:56:85:f3:2f:c9:d8:b8:f9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a07690756eedf69d24510897f941eb196e5b59
Validity
Not Before: Apr 25 04:00:20 2024 GMT
Not After : Apr 26 04:00:20 2024 GMT
Subject: CN=b5fdeefa019e46f0462edb7f516a9a276ec2c719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:d8:db:d7:42:80:95:d6:4c:ba:b4:a9:f9:
09:71:dc:ea:08:4c:76:a5:43:f2:f5:01:dc:29:36:
93:cf:06:b9:6d:8e:c2:cf:e9:2e:ac:4d:1e:87:95:
86:00:2e:08:b5:72:77:33:15:ba:03:1a:2d:56:fb:
37:9d:e9:73:79:43:79:ec:7d:31:d6:01:8c:3f:49:
f9:03:fc:91:ff:24:39:d6:2e:22:98:75:cd:50:08:
8c:e8:30:2c:a3:2e:92:1f:2e:d4:71:03:a6:83:79:
89:94:96:d3:d6:09:2e:4c:fa:4b:94:fd:ca:9b:08:
7a:94:e3:02:e0:b8:ec:8f:a7:e8:b2:4b:a5:a2:5a:
67:e2:9f:36:7b:7b:9d:3f:88:11:59:87:59:dd:a7:
af:5c:aa:7c:70:ba:c3:0f:a7:f3:13:84:0e:84:5f:
eb:60:68:00:4c:df:35:6c:30:ce:aa:05:84:86:28:
db:6d:ea:11:b4:75:ee:f0:4d:db:21:20:3b:c0:e4:
5b:3b:6e:72:31:6b:99:22:c8:b5:e9:cd:b4:9b:7b:
ce:96:5d:69:d4:93:87:f2:96:91:2e:01:49:94:52:
89:16:46:96:ff:40:57:e4:54:65:7b:df:a5:30:8d:
20:20:ed:40:a6:9b:e7:27:17:f2:5e:41:fb:fb:c9:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FD:EE:FA:01:9E:46:F0:46:2E:DB:7F:51:6A:9A:27:6E:C2:C7:19
X509v3 Authority Key Identifier:
keyid:08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7a:91:82:c2:29:ec:ad:7f:a0:77:3f:06:f2:d9:73:55:bd:
c0:a7:96:b6:fb:4e:e9:1d:4a:b2:96:d3:ca:25:7f:76:4b:89:
3f:06:c4:50:9d:12:67:65:6d:9c:66:bb:f5:72:a7:04:25:bb:
4e:fc:7c:72:3c:7f:4c:e8:86:60:aa:8c:bc:ea:bd:9c:2c:d2:
0e:ae:e5:bb:b9:ab:05:59:5f:a3:49:2c:9f:fa:de:c9:34:5d:
25:aa:64:bd:9b:15:f2:4a:8a:30:67:00:a6:14:21:d0:a7:42:
0d:54:64:b4:be:0c:db:44:86:28:ee:ed:22:42:fb:e9:1b:2c:
bf:b2:d8:b4:1e:fc:a9:ec:8e:0d:12:a4:28:1f:95:75:2f:df:
74:fe:09:a2:4c:dd:08:7f:0e:ba:02:9a:c3:02:3d:1a:32:65:
1c:72:86:77:8b:f6:39:ac:b1:69:fc:f1:54:cc:29:88:45:f6:
55:06:52:50:03:7e:c6:81:9f:15:12:cb:b3:29:09:42:3f:44:
44:d7:50:9a:33:73:a0:81:e9:c5:6b:e3:4b:f1:c5:d7:5e:31:
e3:ae:a8:c8:e7:25:f2:bf:f0:91:78:ef:87:09:ff:e3:77:f2:
11:a4:a7:8a:39:af:87:48:31:77:d1:4b:37:c7:02:94:f9:e7:
27:5b:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:17 2025 by rpki-client