Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier: 8ip5Px15VQ63CdB0MTBrDli0kLsgt2/evXm3r1U5ICs=
Subject key identifier: 72:E5:74:D2:3E:1A:0A:74:4C:00:83:D0:4D:D0:4A:75:58:00:F6:D7
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer: /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial: 0195E12242F0D1DBC4DA229DAE0880A8523C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number: 0F03
Signing time: Sat 29 Mar 2025 09:01:13 +0000
Manifest this update: Sat 29 Mar 2025 09:01:13 +0000
Manifest next update: Sun 30 Mar 2025 09:01:13 +0000
Files and hashes: 1: F6TRgo1Qxqb0z2HOICITaJq6vVA.roa (hash: HB4jpWzWtSDjiUJivZqFCyvc7yAlpLdjecgjjSvTmVc=)
2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: cbAqwdVnPBBI97twn2ZBgYqpluZ7TDYQIPpRP//aUs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:42:f0:d1:db:c4:da:22:9d:ae:08:80:a8:52:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Validity
Not Before: Mar 29 09:01:13 2025 GMT
Not After : Mar 30 09:01:13 2025 GMT
Subject: CN=72e574d23e1a0a744c0083d04dd04a755800f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:ae:c6:1d:e3:ce:45:93:f2:54:e1:5a:8c:
0d:78:aa:6a:fa:cc:eb:b3:f9:ef:57:0e:73:a1:13:
22:29:f2:7d:15:ea:88:61:d6:ce:45:64:c3:78:54:
ad:96:12:b3:5e:f1:59:1a:0e:06:df:3e:79:15:92:
a5:18:3a:2b:ea:26:54:02:47:7c:41:b7:f6:f7:14:
63:1a:de:63:fc:e7:62:80:5f:8b:7a:eb:d5:8a:cc:
53:56:e8:6c:be:51:f1:22:b8:22:4b:00:67:84:89:
69:d2:a3:0f:ed:b0:88:f9:83:ac:a5:de:25:24:73:
5c:c1:1f:e9:1d:b8:f0:08:72:b2:4f:6a:9f:27:b5:
9a:77:e1:9a:f0:33:9e:a4:df:eb:dd:a7:43:4b:a4:
e2:bd:26:06:33:d5:28:8b:00:27:33:c6:61:32:ed:
c3:e9:d2:1c:a3:89:7c:61:da:b1:6d:9f:3a:2c:5d:
77:72:47:96:05:2b:7b:2f:a2:cf:dc:2b:00:3d:de:
58:ca:9a:bf:11:26:03:e4:7f:1e:f6:dd:69:c0:b5:
3b:10:74:de:df:a2:16:85:8f:ff:96:72:50:97:c0:
e1:87:0b:14:ea:df:6e:9f:94:44:a5:f0:bb:cc:01:
f7:d9:3e:7a:5b:ac:61:9a:ba:4a:c1:67:4b:bb:fd:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:74:D2:3E:1A:0A:74:4C:00:83:D0:4D:D0:4A:75:58:00:F6:D7
X509v3 Authority Key Identifier:
keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2f:71:f7:8c:0f:6f:09:c4:a2:95:89:4a:01:8d:88:b5:fa:
8d:fa:4a:70:69:4f:b4:4c:cc:38:f2:df:3c:a7:26:93:04:1b:
09:f6:90:5f:cf:08:0b:fe:0d:1a:c1:65:97:72:38:d8:fc:fa:
0a:4d:35:38:86:a1:1e:5c:6e:fd:f5:4b:40:5b:6b:d3:b4:60:
69:cb:b8:c9:02:a3:fb:6b:a1:3e:43:7c:23:85:67:74:ee:f5:
e9:f1:49:e5:39:f6:33:66:65:26:21:76:17:dc:02:81:bc:b8:
1d:9b:8a:18:12:5c:b3:45:7c:10:c1:b3:dd:2d:a5:92:02:f7:
27:01:a3:ea:0d:42:54:c0:00:05:20:a4:0e:fa:bd:f7:6e:b9:
fd:0b:2c:36:d9:e2:47:2a:1a:28:ae:9b:eb:a5:52:a5:b6:12:
0d:3a:0a:f2:2c:88:ae:95:2e:02:56:ec:1a:11:3d:f8:88:d1:
7f:b5:89:e8:41:d6:66:f7:ee:14:1f:a7:0d:74:80:94:eb:12:
d4:f6:49:40:7c:ca:94:aa:1b:8d:85:f3:e5:aa:be:f1:c5:43:
55:6a:ff:86:e2:0f:31:79:ae:bd:73:8f:79:fc:63:76:36:c7:
9c:aa:17:e9:2e:30:fa:c0:cc:b3:6e:06:41:a7:7d:bc:0f:f3:
5d:1d:ef:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:52 2025 by rpki-client