Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.mft
File: cRtPOqRdxOwzbWLpp-idebPvyrA.mft (raw, json)
Hash identifier: KznqzcrAuyJFdZGtjuRFrdR21GEdPZET5EZ/PBuhN7A=
Subject key identifier: A0:19:69:35:71:64:8E:F2:69:24:62:D5:52:E6:F7:48:3D:31:84:59
Authority key identifier: 71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
Certificate issuer: /CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Certificate serial: 01904E32CD14704D97D15F7F141E43105350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.mft
Manifest number: 07F3
Signing time: Tue 25 Jun 2024 07:01:10 +0000
Manifest this update: Tue 25 Jun 2024 07:01:10 +0000
Manifest next update: Wed 26 Jun 2024 07:01:10 +0000
Files and hashes: 1: H30auULydNxyy-C7uIlQaiTUbl0.roa (hash: UTM8NraVmGQA1YX012rMJkZhTe04oV+1Lumq9fsy6FM=)
2: HrEUO4vd6T6hrfeTEagPcNKP3tw.roa (hash: KHdnOsypVzMnxYZfNewEyPYZOJzet17jGu19za2RQHs=)
3: cRtPOqRdxOwzbWLpp-idebPvyrA.crl (hash: AkZVb+XskFxL0t1ZqmssKVUuuh4SwmeOGFoMSBzBk1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:32:cd:14:70:4d:97:d1:5f:7f:14:1e:43:10:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711b4f3aa45dc4ec336d62e9a7e89d79b3efcab0
Validity
Not Before: Jun 25 07:01:10 2024 GMT
Not After : Jun 26 07:01:10 2024 GMT
Subject: CN=a019693571648ef2692462d552e6f7483d318459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:19:c4:33:b5:fe:d2:ad:44:e4:a9:41:a4:
13:ad:0a:d6:c2:0b:5d:a6:70:c4:ff:ce:bd:bb:a9:
e5:a3:a9:e7:f9:64:71:29:35:1e:63:9e:b7:09:43:
0e:12:44:66:fb:e5:ad:57:3f:8c:b4:c7:8d:f4:99:
fd:1e:fb:d0:9f:3f:53:8e:59:f1:93:5a:09:a3:62:
5e:fa:b5:dd:cc:f5:52:c5:56:d1:64:cf:85:d0:0d:
82:13:24:cc:88:1e:46:9a:ef:5b:8f:f2:14:10:38:
9f:f1:91:ad:aa:5c:4c:94:36:ca:c4:05:e6:16:fb:
0d:db:a2:6f:b0:b1:a2:86:5e:d1:f3:18:3d:6e:a2:
35:ae:4e:6f:d3:25:1f:58:ac:b5:62:0a:90:e3:41:
c9:a8:bc:4d:09:cf:57:c8:00:c2:12:16:fc:63:f2:
67:7d:3c:9f:e4:44:cc:ca:76:27:c7:ae:d1:8d:52:
d9:ea:1d:85:4b:ef:19:54:0a:99:8f:e5:64:67:8b:
80:6a:30:8d:a9:39:62:69:1b:0f:27:18:3b:eb:34:
a1:0f:50:f6:aa:46:f3:54:47:12:15:f1:1d:4d:b5:
d3:d4:fe:75:99:bc:f6:86:97:90:9f:23:64:c0:bc:
cd:8d:16:92:95:0c:03:e5:fb:3f:42:0e:23:b7:15:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:19:69:35:71:64:8E:F2:69:24:62:D5:52:E6:F7:48:3D:31:84:59
X509v3 Authority Key Identifier:
keyid:71:1B:4F:3A:A4:5D:C4:EC:33:6D:62:E9:A7:E8:9D:79:B3:EF:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRtPOqRdxOwzbWLpp-idebPvyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d71c56-b8be-4d1a-bc22-037539631bb4/1/cRtPOqRdxOwzbWLpp-idebPvyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:e6:a7:1e:22:c8:8b:9b:cf:c3:cb:41:9a:c0:a0:15:fb:
de:a0:b4:e4:7a:c8:bb:c2:cd:ce:91:98:2a:9e:67:b5:8c:1b:
b6:42:82:37:86:ac:e7:a5:70:85:9b:d9:cc:cc:16:81:41:f7:
ef:c6:7f:5a:3d:7b:40:66:28:e0:0c:cf:52:6a:d6:42:b4:b0:
20:f9:59:c3:f1:71:31:0a:f2:83:b7:3c:0b:24:4d:14:83:fb:
4f:c9:ae:3e:b9:95:28:e1:c9:52:76:e9:de:ab:6d:d5:2d:a1:
06:6c:f5:e2:5d:68:76:bc:ca:8b:fc:dc:f1:d9:27:0e:da:9e:
b8:85:4e:02:8b:c3:d0:26:03:c3:cd:36:f4:b6:67:18:06:9a:
41:78:45:0f:89:80:74:7e:de:d5:5a:61:eb:b4:d8:c3:35:bf:
7b:bf:cb:f2:53:32:d2:02:18:7c:58:fc:b2:a8:8a:b6:a5:69:
30:89:f0:99:4d:92:b9:5c:4a:fe:6e:f6:ec:5f:3f:75:c1:da:
b8:82:cf:52:43:13:81:10:c7:39:a4:c3:d5:39:f7:aa:98:5b:
76:87:f4:5c:39:00:c4:08:a1:56:2b:2c:43:5b:4b:6f:7f:0b:
d1:24:41:b0:4d:5f:60:fc:f5:80:a5:e6:02:d1:2e:ce:90:51:
a2:cb:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:22 2025 by rpki-client