Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
File: cPaM3tOePsVM7iIzJS7zk3upgo0.mft (raw, json)
Hash identifier: 4faJgb4cWAeAsHVdiON21FX4GqNVDHIa9JT4lbOG9Cg=
Subject key identifier: 04:EA:0B:D5:7C:C0:5D:0F:50:9C:AF:FF:12:6F:87:39:C7:37:12:A3
Authority key identifier: 70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
Certificate issuer: /CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Certificate serial: 0194BC04A3EBC1B642DC0D05B8E88D74EC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
Manifest number: 06A2
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: cPaM3tOePsVM7iIzJS7zk3upgo0.crl (hash: 22J+HQm8lUhgmDZPniMyzt/IpH3qpJ4IyIyWBu3GEkk=)
2: yzS5saqZmvfLrP5ZMitifKMGoG8.roa (hash: AF5+gCr6uoirpp1iHmwqxTO2TQvWrmslD/huU/aCXCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a3:eb:c1:b6:42:dc:0d:05:b8:e8:8d:74:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f68cded39e3ec54cee2233252ef3937ba9828d
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=04ea0bd57cc05d0f509cafff126f8739c73712a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f6:f3:d4:3c:87:fe:70:b1:79:62:64:6a:c4:
37:be:f8:f9:d0:32:49:7d:2d:4a:c4:36:c2:b0:38:
e5:d2:96:a5:91:e8:82:28:3c:b1:26:18:4d:a5:4c:
35:21:db:7f:5f:2e:26:4a:d3:36:da:08:13:a4:a5:
8c:29:7d:78:bf:47:49:dc:76:01:4d:6d:0a:0a:02:
44:3e:a4:ab:17:f0:a2:1e:6d:57:f5:3d:e0:77:52:
32:80:7b:fb:83:8f:0b:cc:4b:59:03:e2:46:e8:87:
3b:b1:0c:b2:7e:1e:f0:85:8c:49:01:53:67:83:2a:
01:63:04:cf:cb:6e:d8:76:c8:30:bb:35:c1:fc:b8:
da:e0:87:a7:7a:9f:f7:10:80:ad:0e:ed:ba:04:8e:
e5:c4:d9:33:32:71:ec:b0:86:b4:e6:05:5c:ce:d9:
10:33:75:9c:94:53:9b:e9:8a:3c:d2:29:54:9b:bd:
95:47:07:cf:91:cc:8c:72:21:39:91:47:0e:b3:c0:
b5:e3:c8:e1:7a:7e:23:0f:4e:f2:a6:c5:34:20:1c:
71:8b:f3:66:90:62:ea:94:93:86:5d:d8:2f:26:23:
50:8d:af:0c:8e:83:ca:c7:0c:cd:86:f0:fa:ef:fb:
07:29:ac:25:ce:59:82:a6:bf:65:20:bc:68:b6:dc:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EA:0B:D5:7C:C0:5D:0F:50:9C:AF:FF:12:6F:87:39:C7:37:12:A3
X509v3 Authority Key Identifier:
keyid:70:F6:8C:DE:D3:9E:3E:C5:4C:EE:22:33:25:2E:F3:93:7B:A9:82:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPaM3tOePsVM7iIzJS7zk3upgo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/cPaM3tOePsVM7iIzJS7zk3upgo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:51:3d:3e:eb:66:e9:67:92:94:10:6f:94:a7:13:e0:e2:55:
74:f2:cb:f0:01:1a:05:31:69:2c:46:63:9f:90:c5:78:97:6e:
bb:e8:6a:e1:50:76:23:5c:45:a7:f1:c0:b1:3b:54:70:cf:cf:
cd:22:1f:0d:2a:ed:fc:d5:07:c2:c0:8b:b8:26:7d:47:32:00:
12:3b:0d:25:a9:7e:6f:52:95:4c:8a:f7:62:96:4e:94:99:0e:
44:76:30:42:24:6a:a3:70:02:5f:b7:92:63:14:1a:85:9c:8c:
94:0f:56:4b:fe:64:e3:62:43:48:5d:b4:e5:4c:41:ca:04:54:
ae:29:c8:dc:96:3e:7a:04:ff:8e:72:99:ce:81:9c:0c:81:6b:
03:36:63:1e:9d:0d:17:22:11:82:f2:93:3a:37:1f:30:1a:f1:
5e:3d:97:57:16:f9:82:c2:77:0b:bf:d5:49:9a:4f:62:aa:c6:
94:11:5b:fa:ce:82:3d:bb:3f:00:ed:35:75:c2:40:88:81:9d:
d2:42:c8:b1:84:c6:e3:a0:b4:35:42:f5:92:63:fb:05:01:c5:
a1:ca:33:2e:c2:8b:25:14:a2:6a:fb:b6:f2:d1:d9:fb:ef:38:
4b:ae:9a:48:47:34:f3:05:69:4e:3c:50:0f:32:0a:1a:fe:15:
8f:c3:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:25 2025 by rpki-client