Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File: cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier: mBqFCnQ8YTEFj3boowACXBHiJr8b0RByKuHgFfuL998=
Subject key identifier: 41:14:C5:4D:9A:63:09:69:15:80:C6:03:E4:8A:FC:2F:96:40:EB:F6
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer: /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial: 0195E046C37740A03E3F424C8F9D146415F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number: 046B
Signing time: Sat 29 Mar 2025 05:01:28 +0000
Manifest this update: Sat 29 Mar 2025 05:01:28 +0000
Manifest next update: Sun 30 Mar 2025 05:01:28 +0000
Files and hashes: 1: Komd5Ms6qIcTUPazhp2KYBREj_I.roa (hash: CnW97+An2rd0iCGWkOmUW+VoUsOuuzcBgbeTYXyF6OA=)
2: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
3: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: lFd8kC3lRQag7acI6KVjsnC8tkXyToUAjta8e/MlFuo=)
4: dnWQJFvh8VovqX-ZW_3OjmXqCdM.roa (hash: YDFL0RIOKHZxm2CVCgnm9Jc0jri7btWi5/0UvmlJY+o=)
5: mUEBMB1gf8BpmkORtWka9GBSSbY.roa (hash: PBzOt+zbxQGmJ9tBRqgYaqkGg70HiRnIKjw3qGAY5rw=)
6: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (hash: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:c3:77:40:a0:3e:3f:42:4c:8f:9d:14:64:15:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Validity
Not Before: Mar 29 05:01:28 2025 GMT
Not After : Mar 30 05:01:28 2025 GMT
Subject: CN=4114c54d9a6309691580c603e48afc2f9640ebf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2f:2d:25:55:db:17:4e:57:46:29:c6:9a:6a:
4f:b2:23:b8:18:00:ff:b8:61:30:85:e2:39:1d:f9:
75:cd:f3:30:8d:6f:52:77:75:78:73:06:ab:87:94:
02:1c:c4:15:20:89:50:95:bd:13:05:a4:5d:4d:3d:
a3:1c:f2:7e:19:4c:70:42:b2:9b:6f:e8:0c:f3:bb:
52:9a:91:45:aa:7b:05:88:6c:8e:39:51:7a:2b:a7:
be:ce:f9:7d:d5:92:d5:59:f2:02:d5:e7:22:f8:42:
08:39:16:7a:7c:aa:c2:c0:3e:ed:1b:17:d7:93:7a:
5b:c1:9a:89:9e:14:f1:6f:c7:27:94:1e:8c:0a:63:
a5:99:c9:7a:fe:aa:8a:99:e0:3a:48:b9:f4:bc:ad:
11:50:bf:8c:08:e8:9b:cb:b5:d1:52:c9:47:0a:26:
86:e2:bb:b2:5d:d2:9f:1e:a6:3b:89:06:97:1c:80:
e7:90:d6:b8:c8:4e:65:48:ed:47:86:a1:70:fd:46:
7c:45:13:5e:e6:11:29:80:61:da:3b:1b:af:c5:52:
37:1f:a2:e9:5d:34:aa:3c:bb:8b:9d:82:9c:2b:26:
0d:49:05:45:cb:06:bf:9f:90:5d:b0:4c:a5:e5:ab:
59:b1:3f:07:50:4e:45:cb:c3:39:ae:05:4c:28:3e:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:14:C5:4D:9A:63:09:69:15:80:C6:03:E4:8A:FC:2F:96:40:EB:F6
X509v3 Authority Key Identifier:
keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:39:38:b0:7c:c7:c4:3e:27:6c:16:c9:73:a0:0c:9c:66:64:
b2:ab:da:3f:4a:2b:e0:45:3a:57:87:e4:c9:64:74:d2:9a:23:
b0:b9:3f:2c:7e:a9:04:bc:ca:55:8c:f1:cd:7c:6b:98:42:8c:
1d:70:f4:c3:98:11:c5:c0:16:52:a7:78:f3:02:e8:dd:f6:89:
38:fe:06:ee:cc:b0:46:ae:1c:f4:df:ab:69:7d:97:b1:32:90:
eb:aa:0f:30:7d:c7:a3:68:4a:70:04:62:28:fe:9e:20:23:d5:
46:78:86:23:b3:f5:75:ab:71:63:7f:ca:b2:ec:2c:55:97:d4:
17:b9:f6:9f:16:65:bc:29:21:69:3b:af:fb:89:fa:5e:5f:bc:
42:6d:0d:01:44:f6:31:47:70:0f:a8:ee:90:9a:d2:f6:7f:4f:
e5:19:58:7e:ef:58:e9:7e:d6:c3:78:19:4f:bb:76:21:88:a1:
08:b5:b8:53:fe:6d:9d:0c:23:5f:f0:31:c8:8b:44:ad:9a:e7:
08:cc:5c:ec:b0:d5:72:b5:50:04:ec:06:8e:ee:bb:f9:d5:08:
bd:8b:11:e1:c8:52:64:a8:6d:b6:8a:7a:d8:e1:c0:e3:fe:cd:
81:aa:f0:3d:f5:68:ab:d8:c8:c7:a5:0d:f7:e8:6c:44:ac:fc:
11:91:fe:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:48:10 2025 by rpki-client