Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier: mXYgozv2DUQaRrNPnald1PfLjDLWdfyo1GWMhEkNfXY=
Subject key identifier: 90:22:A6:A1:74:AC:E5:2B:E4:11:5B:0F:07:FB:F2:F1:25:2E:72:81
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer: /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial: 0194BCE08A7EDF42390CF5139094B56D7782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number: 13FB
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: AjEb4v2mv1L4fsvtdArkMg+mkHcnxRrfEjztMibl8g8=)
2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:7e:df:42:39:0c:f5:13:90:94:b5:6d:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=9022a6a174ace52be4115b0f07fbf2f1252e7281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:68:7d:9e:ac:eb:81:1d:a1:c9:bd:59:73:6a:
a0:dd:f0:a6:ef:06:53:cf:51:f2:0e:c4:3e:bf:60:
89:c0:16:0a:58:aa:f0:aa:2e:66:d9:55:35:5d:bf:
dd:5d:da:9e:80:80:18:68:d1:a2:02:4f:77:7a:91:
b3:9e:c3:d4:bc:07:31:31:fb:ea:30:ce:af:97:5d:
ae:f5:f8:2a:88:2a:b7:18:53:00:8f:53:7f:15:bd:
e5:bc:7c:98:04:c6:53:6c:5d:b2:23:41:7f:0d:6c:
b5:75:38:ec:37:43:ab:74:cc:5e:73:6d:76:ad:c6:
64:82:ea:6b:c9:b4:fa:fe:08:39:f0:83:04:79:97:
bf:89:a4:5b:cc:49:3a:6a:65:63:4a:81:4f:44:1c:
db:f6:37:04:2a:e5:58:d5:1c:ba:1e:51:fe:71:28:
2b:fe:35:60:48:38:33:58:e0:7e:e3:53:37:e2:2d:
2c:c8:4e:70:ca:67:36:db:45:56:30:c6:b3:fa:22:
70:a5:48:90:b4:fd:0e:33:27:6f:62:df:83:16:d4:
2a:fc:67:8e:80:c8:ee:da:e8:52:f0:84:69:7c:a9:
2a:04:03:2f:cb:46:cb:cb:94:26:b7:e8:49:7d:05:
9f:5a:fc:57:b1:b5:0b:8b:ae:5e:ee:a9:df:b7:d4:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:A6:A1:74:AC:E5:2B:E4:11:5B:0F:07:FB:F2:F1:25:2E:72:81
X509v3 Authority Key Identifier:
keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:13:cb:ee:80:55:5d:e5:74:eb:6a:79:71:cd:2b:f3:97:73:
8c:46:ed:99:5f:79:41:68:6d:7f:b8:b5:94:a8:5c:ae:b7:fd:
f3:61:76:a7:18:d6:83:85:30:47:ae:ac:ba:c4:03:fc:26:a6:
2f:cf:16:bc:21:2f:5b:d9:99:92:3a:e8:1f:cb:2a:60:36:9a:
7a:bd:b8:55:b6:f8:c1:3f:19:b8:eb:8b:9b:6e:65:e2:5f:3b:
21:05:4f:2a:38:2c:7b:f8:90:ff:e6:22:81:a5:32:f5:12:5c:
a5:91:4f:ed:6b:81:2b:5d:1e:31:f5:20:71:3a:c1:58:98:6c:
b2:02:2b:80:be:d2:fb:30:62:db:05:7f:ab:06:06:71:ca:13:
23:96:72:b2:4e:af:5a:b3:4a:d1:2c:3b:5b:2e:84:ad:13:42:
71:3c:9f:07:f4:5b:1a:05:71:4e:b4:a3:41:56:d3:07:c9:a9:
c1:39:cf:b3:66:4d:1a:d9:ed:9b:6c:70:38:1d:65:d4:5c:f1:
1c:84:78:cd:ce:a8:8f:26:9f:e5:90:b2:b5:0a:1a:cd:67:25:
d2:3e:6a:6f:14:b1:d6:62:8a:16:3a:b2:88:a7:92:dd:73:20:
9f:c1:f1:8e:6e:1b:26:38:29:f6:55:be:45:b4:dc:66:ee:28:
0f:0f:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:18 2025 by rpki-client