Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
File: cvpBoKemgQK1OrMXQtthJC91kIw.mft (raw, json)
Hash identifier: /tqo0Sdr2dMSPSvpsexDp6DBzkTfaKb1sPajlt8iwAA=
Subject key identifier: 10:0D:72:8C:28:5C:B8:DE:22:7B:76:EF:F9:B0:6D:92:E7:E2:5A:96
Authority key identifier: 72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C
Certificate issuer: /CN=72fa41a0a7a68102b53ab31742db61242f75908c
Certificate serial: 0194BC3C3EEE40FA7CB780E5C953F34E4A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
Manifest number: 1274
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: LPL5COduulE_WMolEzZwrGXijT4.roa (hash: H3PvlGhuhwCJd5x48Dt0jme9fPhyxLV/+QRuAD/R+ek=)
2: cvpBoKemgQK1OrMXQtthJC91kIw.crl (hash: HXIn/767aWf8+HqO1IlHymdPnDO2wSumojyEbLqq4eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:ee:40:fa:7c:b7:80:e5:c9:53:f3:4e:4a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72fa41a0a7a68102b53ab31742db61242f75908c
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=100d728c285cb8de227b76eff9b06d92e7e25a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:6d:41:7b:29:f2:f5:14:04:32:f7:0c:25:
fb:a1:ff:90:c3:f9:9d:6d:09:32:bf:4a:cd:f9:05:
3c:e5:c3:1e:08:00:b0:a6:68:d2:19:43:c0:b4:08:
8e:f8:93:f9:f7:df:b8:5a:ef:7a:d1:91:b3:fe:92:
46:67:18:eb:38:a5:a5:52:99:23:df:59:60:2c:40:
64:3c:14:6c:6e:e7:e6:8e:64:75:68:87:f0:50:73:
cf:84:b0:21:25:54:98:b0:a9:47:e4:0e:fa:a7:3f:
90:18:28:3a:68:7f:bb:d6:ef:ce:90:7b:80:25:46:
f2:3e:99:9e:df:bb:65:3d:29:2f:11:07:c9:95:73:
e6:25:22:2b:8b:05:49:96:6a:13:e3:de:70:cc:eb:
11:e9:56:8c:37:79:5d:8d:2a:c0:c5:70:e2:4c:5e:
f9:84:d5:73:b9:08:ab:a1:1e:ad:41:71:0d:7c:97:
03:f7:0a:d4:4e:95:fa:fc:0f:d8:36:f8:1b:16:6a:
f3:88:e0:d7:f1:77:82:5a:33:be:a5:ea:27:42:70:
e8:c3:ae:5c:0b:f6:56:20:66:95:43:3b:24:33:d9:
64:02:9e:38:ad:3e:66:c2:d3:11:69:91:22:5b:da:
3a:84:94:f4:ad:b6:41:d7:01:66:f9:e5:aa:38:a0:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0D:72:8C:28:5C:B8:DE:22:7B:76:EF:F9:B0:6D:92:E7:E2:5A:96
X509v3 Authority Key Identifier:
keyid:72:FA:41:A0:A7:A6:81:02:B5:3A:B3:17:42:DB:61:24:2F:75:90:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvpBoKemgQK1OrMXQtthJC91kIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a90db1-d2f3-48d1-918c-fcebdc0dfc3f/1/cvpBoKemgQK1OrMXQtthJC91kIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:44:19:6c:95:85:e0:20:ef:f7:2e:83:d6:d4:62:b8:d6:
a1:4d:fb:59:53:3c:54:28:d9:47:e4:5a:5b:ba:0f:4b:35:fa:
4b:13:56:dc:20:5e:40:f2:2d:92:ba:6d:68:67:7e:62:a0:a7:
37:af:0d:dd:6b:84:40:00:b9:04:28:b1:a3:1a:a4:71:1b:9c:
6d:fa:5b:39:11:11:b3:79:b3:aa:1b:ee:2a:a9:9f:2a:a6:fc:
05:95:93:e8:1e:74:fb:68:8f:92:bb:3d:a5:f7:43:ff:19:a2:
42:0b:76:f6:cd:39:19:95:9d:a8:04:99:18:0b:db:ac:ea:e4:
80:86:7c:b2:96:1f:e8:34:90:70:f0:6e:c6:ce:89:06:2f:09:
a0:71:09:84:92:d3:57:b3:39:17:67:04:08:76:38:a5:24:32:
c2:e8:68:2b:fe:64:d1:25:59:af:4d:83:40:3b:90:85:d9:40:
23:df:ee:25:f0:38:44:39:b6:13:dc:9f:20:22:8a:2f:f7:3d:
31:54:d9:42:15:78:ad:22:2b:3c:3b:f7:d4:28:65:69:77:e6:
2a:c0:70:17:04:6d:2f:e4:21:84:85:47:35:f7:de:84:53:05:
e2:23:b9:08:1a:1a:38:46:84:99:db:63:f0:25:e7:29:10:bc:
e7:78:69:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:54:26 2025 by rpki-client