Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File: cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier: 6KUdsEfDQ0GpWDboSmbmQbPGyVpgablfm3D4FXUA4jE=
Subject key identifier: 10:6A:A5:17:B0:D0:9E:C6:2C:EA:2A:7D:20:D6:DA:2B:D2:2A:CA:F7
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer: /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial: 0194BD8598A444AB13BB760AE03F105D87C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 36YhZqTcJtG6Opmx0kHYa10WpYUeWaYBoKgtsqn31IA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:a4:44:ab:13:bb:76:0a:e0:3f:10:5d:87:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=106aa517b0d09ec62cea2a7d20d6da2bd22acaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:3a:09:ad:3e:38:3b:90:90:04:46:c0:12:
4d:f6:11:e2:b9:ef:66:d7:9a:53:4f:33:19:22:ef:
b8:ed:27:bd:2f:df:ce:c7:79:ed:95:71:c7:cc:ed:
6d:c3:0d:82:b4:8e:6d:91:12:6f:15:49:72:b0:aa:
56:4a:47:97:70:c7:36:8f:43:34:93:e4:44:f4:89:
72:de:d6:f4:67:ba:3f:1e:68:cd:19:ad:80:33:ad:
34:02:02:08:69:f3:e1:07:6d:01:da:4a:5a:85:74:
dc:8d:78:07:30:84:fd:b3:93:58:13:e3:01:95:9f:
f7:c1:90:72:23:2a:96:af:75:28:80:c5:41:28:7a:
5d:a5:c5:6b:25:0b:61:03:28:35:38:fc:7b:64:4c:
6e:1d:77:04:9c:f3:86:9e:2f:27:dd:8f:c9:7b:75:
d0:4b:2c:e8:0f:98:f1:dd:38:0a:88:61:f1:16:72:
70:7d:57:52:ff:72:c7:bd:56:3b:de:6a:d7:63:cb:
77:5a:55:87:57:3f:91:66:46:cb:e7:62:16:8d:d4:
2e:55:39:36:cc:c1:41:92:4c:57:cb:c7:22:15:58:
fe:fa:89:4d:94:51:cf:4c:bd:39:55:88:12:ee:19:
2f:da:c8:19:7b:aa:2d:60:47:63:04:87:ea:be:d5:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:A5:17:B0:D0:9E:C6:2C:EA:2A:7D:20:D6:DA:2B:D2:2A:CA:F7
X509v3 Authority Key Identifier:
keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:62:cf:9a:c4:6f:6f:09:b0:60:79:bc:20:2a:14:ad:da:
0c:4e:9d:a7:f4:05:89:a9:95:c8:f2:2a:d0:40:77:18:44:35:
88:a4:af:7e:59:ff:cb:84:90:82:f6:bf:d4:13:8a:f8:1f:25:
be:79:11:55:d0:48:8e:12:6b:8c:95:70:10:c4:02:92:83:84:
71:40:d5:a8:62:d6:89:75:50:99:c5:f4:05:6b:e7:f4:e7:ee:
d4:03:af:aa:78:4c:84:36:08:82:c5:f1:41:35:65:16:4d:4f:
e8:58:1a:86:67:6a:4e:52:c4:2e:a0:1f:32:1e:bd:59:88:30:
b8:69:1e:b8:c1:9d:fe:e5:e0:21:f0:b4:34:c7:f6:6e:c2:fe:
ea:be:ee:7c:3f:ff:2a:81:5a:7b:cd:a8:81:83:04:35:bc:49:
ca:1b:e4:cd:dc:7b:27:69:92:03:8b:aa:2e:0a:85:a7:c1:aa:
ec:2e:f2:bd:60:09:fd:07:79:ab:06:a6:97:c8:cf:f2:1e:2d:
66:44:e3:4b:ca:6e:88:1d:bb:da:6d:9f:dc:23:25:5e:75:71:
bd:da:07:a5:f7:5d:82:72:48:12:ed:e7:73:8d:73:a2:8f:77:
9e:6e:54:10:93:cc:b1:d3:e2:8a:e8:ab:21:b2:8d:85:82:42:
4e:7e:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:50 2025 by rpki-client