Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/C6ymmUQOJd1lA3kot8lqAJ9VmdM.mft
File: C6ymmUQOJd1lA3kot8lqAJ9VmdM.mft (raw, json)
Hash identifier: WJcMF7g2Ib+HrYnnFrtCorAPJYiid3VRbAt0TZNdTQs=
Subject key identifier: 4A:F6:86:30:DF:EA:77:49:80:9B:61:6F:78:85:E3:51:F2:AC:CC:40
Authority key identifier: 0B:AC:A6:99:44:0E:25:DD:65:03:79:28:B7:C9:6A:00:9F:55:99:D3
Certificate issuer: /CN=0baca699440e25dd65037928b7c96a009f5599d3
Certificate serial: 01851539BC88E2E7EDB411DA4A25171F0B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6ymmUQOJd1lA3kot8lqAJ9VmdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/C6ymmUQOJd1lA3kot8lqAJ9VmdM.mft
Manifest number: 01CA
Signing time: Thu 15 Dec 2022 09:59:43 +0000
Manifest this update: Thu 15 Dec 2022 09:59:43 +0000
Manifest next update: Fri 16 Dec 2022 09:59:43 +0000
Files and hashes: 1: C6ymmUQOJd1lA3kot8lqAJ9VmdM.crl (hash: YytQzidSQ7FJVq+S2Wmf7WPDodaMWU1F+8DNPegnINw=)
2: xyrkTk4olzoS8i3f9wyRJqCs38s.roa (hash: blxq5YTp4gVTeySQ0VwWRn98I1R5OFIR2E8tKlXAzE8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:39:bc:88:e2:e7:ed:b4:11:da:4a:25:17:1f:0b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0baca699440e25dd65037928b7c96a009f5599d3
Validity
Not Before: Dec 15 09:59:43 2022 GMT
Not After : Dec 16 09:59:43 2022 GMT
Subject: CN=4af68630dfea7749809b616f7885e351f2accc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:1a:ea:f4:90:cc:20:a4:cd:c7:3e:e3:c5:
da:f7:05:80:9d:74:7d:ca:fd:dc:9a:72:ef:5a:b4:
71:7d:19:c6:65:bc:0c:2e:a6:04:0b:30:14:eb:ae:
9b:ac:79:ae:f7:55:18:bc:95:f4:ba:be:0f:2e:df:
13:73:30:eb:a0:c1:2e:42:eb:a2:b7:d4:c9:cc:0f:
ea:a8:92:c0:95:4f:78:93:33:39:b5:10:dc:af:a1:
ea:c3:ef:34:f9:16:64:e5:7f:26:81:ec:9e:cf:d6:
9f:8d:eb:cd:68:24:54:64:a9:b1:f8:26:4a:29:54:
b7:da:1a:73:e5:b3:ab:67:9c:7c:01:73:90:77:28:
84:52:5e:ea:9f:09:0e:42:ca:4d:72:aa:96:b5:f7:
9b:a4:e8:0f:06:12:f2:2b:8c:86:98:01:9f:9d:d8:
21:28:a0:9f:a0:98:43:9f:49:41:cd:a6:9c:86:d5:
a0:84:57:01:43:9d:04:ce:68:de:55:78:77:86:6a:
48:c9:60:bd:9b:cc:fe:8f:c8:2d:5d:3a:3a:6b:d7:
f8:cb:43:f4:25:54:f5:29:8d:9a:4b:b3:42:8c:a0:
e9:19:90:c2:d4:88:bd:88:0c:49:3e:91:18:ab:29:
c2:0e:63:ab:a1:5f:91:aa:c9:ea:c7:0d:35:49:bf:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:86:30:DF:EA:77:49:80:9B:61:6F:78:85:E3:51:F2:AC:CC:40
X509v3 Authority Key Identifier:
keyid:0B:AC:A6:99:44:0E:25:DD:65:03:79:28:B7:C9:6A:00:9F:55:99:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ymmUQOJd1lA3kot8lqAJ9VmdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/C6ymmUQOJd1lA3kot8lqAJ9VmdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/591926-3230-4796-b144-71e936c54022/1/C6ymmUQOJd1lA3kot8lqAJ9VmdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:11:e9:af:22:cf:dc:19:33:57:68:4c:2d:47:70:80:70:92:
fe:50:ca:fb:c9:73:7e:fe:a1:6d:23:7c:c1:32:09:68:cb:a9:
57:8c:e4:d4:dc:25:39:ef:88:7d:56:c7:36:95:2c:0e:ab:61:
09:37:f9:a4:20:45:14:4f:54:83:71:00:81:83:4d:9d:bd:11:
e7:7f:6b:73:ea:de:5f:2a:25:65:09:a8:74:e8:ae:47:5e:c1:
35:fb:0c:9a:3c:58:97:fc:c6:a0:54:07:49:e1:33:3b:69:6f:
43:16:bc:1b:ff:24:e9:60:a3:c6:1e:3a:e1:fd:2d:c8:da:e2:
75:11:91:0c:8b:67:dc:c4:6e:25:5c:ac:6c:66:35:21:e9:52:
2b:a3:fc:a5:92:df:13:32:79:da:7e:28:74:16:a3:bb:92:86:
cf:4b:b8:08:0b:4d:be:9c:35:c7:5c:18:6d:ae:00:b2:fd:e7:
d7:50:07:1f:23:61:45:e7:bc:94:ac:f1:5f:3a:fc:fb:18:29:
06:ed:55:b4:a7:c0:d3:ac:b7:8d:70:b3:ca:a2:0e:5c:ec:c5:
75:7c:c3:22:12:f9:e7:57:b0:9d:f1:ce:d5:5b:a7:1c:44:8f:
64:b4:e4:54:36:3f:b5:5d:85:a4:30:2f:71:13:1a:99:89:7f:
f8:72:ff:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:22 2025 by rpki-client