Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: GWK9lhVaXlGi72bZUq2A1lpPFj16JpRPeekxzkcJKBE=
Subject key identifier: 58:D7:F8:42:21:2F:2C:05:6F:B9:9E:55:8C:21:91:F4:93:9E:F2:72
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 0195E07DB75100E3E125B6D3DEDF5338B286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 11A9
Signing time: Sat 29 Mar 2025 06:01:30 +0000
Manifest this update: Sat 29 Mar 2025 06:01:30 +0000
Manifest next update: Sun 30 Mar 2025 06:01:30 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: sgHitbrF6l6gMxsaDHRVCe6WSKHXID6AhdYX8YUYUlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b7:51:00:e3:e1:25:b6:d3:de:df:53:38:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Mar 29 06:01:30 2025 GMT
Not After : Mar 30 06:01:30 2025 GMT
Subject: CN=58d7f842212f2c056fb99e558c2191f4939ef272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:06:32:06:b7:28:7d:a7:ef:3e:b9:bf:15:
89:58:4d:ea:7b:a2:08:3b:eb:39:93:8f:69:a6:6c:
31:0c:ca:b6:53:58:fb:53:67:45:d6:71:e6:f5:40:
8a:a4:02:64:67:d8:31:44:f2:a1:4b:79:01:6e:ac:
01:31:c8:f7:78:a4:20:cb:c6:e0:9c:f0:cf:e7:41:
1c:8e:e3:60:e9:be:47:84:d7:e4:9c:33:a3:9f:bf:
eb:b9:94:6f:7a:99:12:dc:2c:8c:5e:e4:1b:b0:80:
8b:aa:e3:13:58:08:9a:73:aa:ca:b2:59:da:42:99:
77:54:43:36:6d:06:09:db:f8:0b:b4:44:54:2e:23:
91:62:59:2e:45:29:27:d1:ae:1c:d8:a9:92:17:8a:
b5:2b:64:d1:0c:7f:4b:3e:2a:82:70:7f:3a:c2:97:
54:fd:ea:a2:78:f5:b1:6f:36:22:cb:30:3a:76:3c:
bd:28:28:f8:f4:ea:7e:ba:17:9e:09:73:b4:24:fc:
f4:56:dd:cf:57:ae:48:cb:71:68:be:34:09:a9:5d:
3f:63:a8:b0:79:f3:49:88:85:65:b1:06:39:ab:74:
0b:5e:d8:02:7d:83:05:4d:64:0b:9f:73:01:c0:b3:
18:c4:21:48:b2:fe:f4:50:cb:41:84:5e:46:41:d6:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:F8:42:21:2F:2C:05:6F:B9:9E:55:8C:21:91:F4:93:9E:F2:72
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b8:14:62:fc:7c:d8:b2:ac:29:a8:11:dd:91:97:7c:99:7f:
b4:c3:46:4c:35:1d:47:9e:6b:09:48:95:cb:39:70:f0:84:a5:
73:ce:9a:84:51:d5:06:e7:4e:af:af:92:78:b3:9c:5d:73:9d:
cb:da:fd:5c:b6:a6:27:bb:a8:d6:ef:41:5d:e3:75:cf:c9:be:
e4:c7:8e:8a:0e:de:b7:c2:a2:22:e7:4f:b5:7f:36:d8:0a:a0:
86:9a:cc:e6:be:42:cd:f8:b0:e6:01:2c:8d:e8:79:9b:36:43:
ce:9a:dd:f0:2b:14:78:ca:0e:59:2f:38:c9:c8:6c:1e:ee:68:
b0:f3:51:28:32:24:14:2b:1b:66:f0:21:0a:5a:ff:fd:fe:ea:
e9:58:6a:f2:3f:1e:98:9c:08:6c:f6:be:2a:b6:f6:07:e1:e4:
a7:ce:b1:37:fb:71:5f:fe:0f:cd:08:a8:77:2b:6f:49:2d:83:
2f:80:eb:59:37:f8:b3:f4:a8:74:7f:dd:e6:58:fb:0c:ff:39:
0d:11:d5:0d:e1:fc:43:49:eb:5f:16:56:92:c8:28:f6:24:21:
93:c4:b2:01:a7:f3:08:dc:07:4e:d3:8d:6a:ea:5a:95:07:53:
19:7b:4c:97:42:39:31:47:3b:f0:d4:e3:47:73:b2:05:90:44:
a5:cd:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:51:47 2025 by rpki-client