Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: LNAliKEzU0u/L7e+Gi0dApS3RihhrPPOpl1cuihnaqY=
Subject key identifier: B0:B3:47:87:3A:18:10:86:67:70:12:DC:73:E4:15:85:C8:24:40:A9
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 0194BC72BD5B3C25113577FB449A42F57F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: 9y5JkXut3ff76CJHdzsWrSBp5ufoFJDKwO+uGjcsBJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bd:5b:3c:25:11:35:77:fb:44:9a:42:f5:7f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=b0b347873a181086677012dc73e41585c82440a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:ba:7c:44:1a:7d:d9:99:a0:31:6e:07:74:
6e:3e:09:8d:88:c7:7b:7a:ea:7e:2d:77:21:80:bc:
7c:b9:40:7e:87:a8:69:11:b3:82:7c:ba:ae:36:1b:
28:89:13:cf:1f:63:81:79:11:94:c9:17:17:ea:6f:
35:a1:90:c5:4e:51:da:02:f3:a2:a7:37:aa:ca:b2:
bd:1b:31:39:7c:43:e0:5c:af:4b:c8:52:e0:e2:f9:
1a:e0:a0:67:e5:4d:cf:a2:0d:17:a9:c4:f1:91:b7:
6e:1f:38:e5:db:ea:4c:77:aa:6a:bc:14:c8:71:8e:
42:17:89:6f:5b:2e:c8:c5:45:7f:50:52:07:5d:38:
6a:30:03:69:24:ca:91:51:5c:7d:ff:ba:cb:c8:a4:
9d:97:6c:fa:9f:68:de:3e:71:e4:7d:06:91:05:8c:
87:4f:c3:d5:03:41:87:e7:41:08:22:e5:ab:9d:17:
d6:c3:8a:70:3a:15:8e:ef:63:f0:6e:f7:fe:5b:ae:
c8:f0:78:5a:f3:d2:ae:98:1b:85:73:de:30:12:31:
3d:f1:e4:2e:75:4e:44:7e:f8:d3:93:fe:c6:97:12:
da:27:23:ea:b4:01:28:a0:b6:c0:0e:cf:83:cf:61:
11:4e:ba:9c:12:70:3e:11:a4:b6:d7:be:3c:a0:8a:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:47:87:3A:18:10:86:67:70:12:DC:73:E4:15:85:C8:24:40:A9
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:38:8c:8d:c9:3f:ac:bb:74:a0:6b:ee:bb:33:a1:70:89:
0f:c1:82:d4:6b:18:18:2f:9f:84:74:e8:42:ef:df:70:55:4d:
eb:a4:83:d5:b3:e0:f0:53:e3:f6:0a:cf:f3:16:aa:30:94:cb:
17:c0:db:ca:aa:53:a5:69:0b:e6:5e:7e:23:57:6a:c3:2a:6b:
b1:df:b2:36:5d:79:fd:2b:9b:04:9a:cf:f1:20:18:e4:cf:cc:
e9:52:0c:ee:a2:36:69:f9:9b:a0:35:6a:c0:5c:0c:c3:9a:8f:
a6:81:17:48:c5:94:09:24:b2:35:54:e8:2f:58:35:2e:c6:8c:
c2:58:66:c1:8d:79:0a:f7:c7:1e:2e:b8:ac:d3:98:ad:7d:37:
1f:68:9b:37:78:45:01:44:c1:77:70:33:1f:bb:68:11:48:0e:
74:34:6c:0d:a4:1e:e7:98:68:44:8e:1f:ed:02:88:4c:76:4d:
68:56:5d:72:dd:59:ce:bb:32:ae:9f:69:ad:68:f0:87:56:e7:
0e:66:e7:c6:54:41:e9:6e:80:c4:e4:90:77:d3:9d:e4:75:5e:
de:79:67:c8:ae:74:16:60:00:1d:16:1b:55:e5:41:a9:ad:a1:
f7:05:9b:b5:09:35:89:40:ac:39:01:5c:b6:65:72:b2:5f:fd:
93:dc:42:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:35 2025 by rpki-client