Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
File: c9CjqymaZZjTK8dUUAIYiHlbPSs.mft (raw, json)
Hash identifier: qBHxECZuUkgjP3E87JudCL23quczBmY42yLdHD2xOAg=
Subject key identifier: AA:0B:AA:C5:52:BD:BF:57:A7:A3:E5:6D:02:B3:22:5B:D4:F0:62:8E
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Certificate issuer: /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial: 0196A5410F706B8C46EA5A35D5D0C1FF28F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
Manifest number: 07BB
Signing time: Tue 06 May 2025 11:00:26 +0000
Manifest this update: Tue 06 May 2025 11:00:26 +0000
Manifest next update: Wed 07 May 2025 11:00:26 +0000
Files and hashes: 1: c9CjqymaZZjTK8dUUAIYiHlbPSs.crl (hash: 7MBv4GN2Orm+Cwn8Om23AvotCfujgPrd/LnMKHRvm0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:0f:70:6b:8c:46:ea:5a:35:d5:d0:c1:ff:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Validity
Not Before: May 6 11:00:26 2025 GMT
Not After : May 7 11:00:26 2025 GMT
Subject: CN=aa0baac552bdbf57a7a3e56d02b3225bd4f0628e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:10:6e:5d:ce:47:91:b5:ed:b1:07:d6:3e:
7d:a7:5f:25:99:4a:81:f5:e5:24:c4:26:d1:47:83:
0f:11:f3:30:f8:67:01:b5:b3:2c:7e:04:bb:a9:11:
07:a8:b3:49:e8:8a:02:ed:4b:46:11:63:2c:b7:f1:
75:e1:3e:0b:ce:20:0c:0f:c4:03:99:b6:7f:d2:e2:
ec:12:0d:01:22:9b:4c:19:e1:1e:51:50:71:1e:72:
09:9a:4c:90:ee:d1:6b:7d:92:02:98:43:d7:ab:b7:
66:a8:3b:12:72:26:6c:44:dc:19:40:25:a0:88:c7:
16:9c:e3:74:44:9c:94:d5:6d:00:b3:8a:74:39:f8:
41:95:e7:c8:10:3e:b3:f7:76:f1:2b:a0:4b:9a:ce:
0d:47:c0:72:ac:35:9b:fb:22:6a:4e:8f:ff:04:aa:
b3:f5:b4:f1:7a:ed:27:1f:00:2d:3c:e8:65:c4:aa:
74:84:43:b4:f4:cd:20:42:a7:0b:76:b6:c3:2e:f0:
6e:ff:01:23:3f:96:57:d4:3f:33:24:59:9d:2b:fc:
0d:ab:74:7d:f3:4b:f8:98:c5:f3:8d:4e:46:42:f3:
40:d0:88:dd:02:c3:55:f9:31:3c:06:bc:87:b4:0d:
89:27:6b:c6:ab:43:9e:50:57:e1:66:19:7b:40:89:
05:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:AA:C5:52:BD:BF:57:A7:A3:E5:6D:02:B3:22:5B:D4:F0:62:8E
X509v3 Authority Key Identifier:
keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:75:b6:61:60:7c:b9:28:c6:9d:1c:dc:32:1b:07:18:6f:45:
f3:32:4a:fc:1d:39:ac:1f:7e:1c:c2:23:c8:3c:b6:70:0c:18:
f3:77:5f:76:16:b6:74:f2:2d:ff:e4:ac:be:8f:66:3d:22:8b:
92:23:64:c9:7b:61:2b:94:bf:df:c7:f4:ba:89:d4:58:08:b2:
01:04:96:27:89:00:e1:79:ee:f4:cb:b3:2f:7f:70:8e:a6:91:
b0:e7:ed:c1:a0:09:3a:29:7c:06:0a:6d:2a:1a:75:7f:fb:c9:
e2:d3:34:31:47:8a:84:6e:58:0f:d5:b8:a5:05:41:c2:2b:89:
02:23:97:47:13:a3:da:e1:43:31:eb:83:0d:86:53:f3:7a:7a:
fa:eb:e6:05:ae:03:05:7e:6d:73:f3:68:fb:ee:07:52:ad:d3:
ea:f1:2b:f2:c0:01:d4:db:77:35:f7:00:fd:80:1e:2f:79:07:
16:63:50:73:8d:0c:3d:77:22:d6:b8:71:5f:eb:85:c0:bd:d7:
89:93:2c:e2:a4:9d:ec:6d:4c:07:8d:7f:9d:af:57:e6:42:b4:
98:94:9c:1c:cd:02:1f:8c:1e:4c:df:62:3e:03:6a:5d:ee:32:
2c:53:56:8f:ab:b0:75:84:82:3e:2c:7d:8c:f1:d1:ae:6a:c0:
3b:0e:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:22:11 2025 by rpki-client