Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
File: cqdZqCUCUkHhqOASv57Mbyp8Uns.mft (raw, json)
Hash identifier: psP2KdrmPftE4PZc12qYw8riFr2nxNWGS0IJoDEydQQ=
Subject key identifier: CD:98:8F:7C:07:5F:D7:98:87:2A:68:DD:69:EE:76:88:96:DA:1E:3A
Authority key identifier: 72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
Certificate issuer: /CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Certificate serial: 0193BED3E6ADF9669B76B6B07679FAD8BA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
Manifest number: 13A7
Signing time: Fri 13 Dec 2024 07:02:58 +0000
Manifest this update: Fri 13 Dec 2024 07:02:58 +0000
Manifest next update: Sat 14 Dec 2024 07:02:58 +0000
Files and hashes: 1: 8k6GkAOae_jBFbQbLdXCkL41trs.roa (hash: mDxeFwwYKV92WPAg0+nnbr5JYz2pP6RQagd/3AjluUQ=)
2: cqdZqCUCUkHhqOASv57Mbyp8Uns.crl (hash: 0GU59nzB2FZuB9UrCeensPykyQJ8/4Km2ylQ6uMI+Dc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:be:d3:e6:ad:f9:66:9b:76:b6:b0:76:79:fa:d8:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Validity
Not Before: Dec 13 07:02:58 2024 GMT
Not After : Dec 14 07:02:58 2024 GMT
Subject: CN=cd988f7c075fd798872a68dd69ee768896da1e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:ff:31:09:a1:db:4d:13:81:91:12:bc:46:
de:34:38:f7:1a:95:76:c6:55:d9:7d:ef:69:ef:e0:
7a:87:b0:87:63:13:47:46:10:89:6b:51:b4:b3:ab:
e3:ef:d2:32:fc:0e:c3:b8:b8:b2:3d:4e:9c:80:b4:
13:d0:8b:72:21:d4:98:54:64:fa:94:5d:b0:af:3c:
7a:0d:5b:61:b6:57:2c:83:df:df:cf:0d:e0:94:1d:
5f:9f:13:88:2e:47:14:56:59:00:be:42:50:89:82:
8e:14:31:de:cf:1c:49:19:34:b8:01:90:a6:87:69:
89:70:88:2d:8b:38:57:27:34:7b:64:2e:12:df:39:
de:25:25:0e:fb:3c:89:d3:79:31:b9:d0:7d:a3:bc:
ef:d7:f0:3d:22:80:3b:c1:90:c6:41:01:92:88:7d:
46:a5:a4:1e:51:48:ef:7e:6e:16:17:f5:06:db:7b:
00:97:26:37:2c:08:07:df:48:64:4e:41:35:20:c5:
2d:47:0f:07:db:9d:a6:a4:9c:df:fc:0d:94:61:73:
ac:13:12:8f:f7:78:0e:d2:5e:cd:9d:3e:49:46:49:
a8:59:4c:fa:0e:d1:6e:ee:a3:5b:cb:8e:c4:7a:4a:
10:08:e7:67:11:cc:27:82:fe:1a:c4:2c:a9:e9:72:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:8F:7C:07:5F:D7:98:87:2A:68:DD:69:EE:76:88:96:DA:1E:3A
X509v3 Authority Key Identifier:
keyid:72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:48:87:6b:9a:92:3a:82:de:f8:67:a8:73:bd:40:83:90:8c:
13:fc:41:23:09:6b:f2:a0:e8:23:74:17:1b:b6:5a:02:d3:f9:
43:85:9e:97:43:f5:ea:83:ec:68:74:9c:de:cf:19:49:70:28:
43:2d:0f:25:08:ee:2a:f3:4a:07:5c:d5:f7:35:53:42:4c:b0:
d5:5a:c1:fa:86:fe:27:b1:01:01:e3:c4:a8:ac:76:52:24:8b:
6b:6a:7d:3f:c1:0f:6d:81:29:23:1e:b7:e4:bb:ab:46:94:a0:
47:ac:30:ca:ef:9d:66:07:c5:73:a1:32:5a:97:f8:50:a3:63:
ad:5e:e7:89:ae:2a:30:bf:25:90:9b:f4:f3:34:e8:35:95:d2:
cd:1f:2a:f9:6f:47:bb:29:2c:3e:ef:7f:e6:ad:d3:65:b7:17:
bf:de:e1:9e:44:45:79:e3:cb:c1:54:02:0c:69:e5:15:d7:87:
15:a9:b7:82:da:bf:22:b6:7b:41:23:e4:33:01:97:c1:cf:53:
42:3d:9d:80:9a:33:2a:26:de:b7:34:81:26:77:db:99:4b:ba:
e0:9f:e6:11:15:a1:33:b8:c5:c8:65:14:e4:33:6e:59:3f:f4:
d0:25:82:1a:3c:39:e3:2b:10:2f:4b:3c:7f:fe:01:22:b7:94:
9b:30:59:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:23:21 2025 by rpki-client