Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: EX2nKs5UNq4TbFT+2v12rR23JDPjcjny/uxLz78PTCg=
Subject key identifier: 3B:25:C1:F1:DE:84:7C:B1:C7:05:5C:C6:94:3F:43:FE:FB:F6:CA:56
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 0194BCE0A2C2BCB88578EF2DEA6DE610725E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: CPaGYIEhk1yjK/Yc9lArGUs6lpT/ynXjjEGKB5ZQe2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:c2:bc:b8:85:78:ef:2d:ea:6d:e6:10:72:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=3b25c1f1de847cb1c7055cc6943f43fefbf6ca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:50:46:d1:8c:64:31:f1:be:2e:88:69:e5:
22:20:25:aa:92:22:36:9b:56:9e:87:4b:33:a5:34:
71:10:a9:60:89:35:2a:6e:00:4d:14:55:70:1b:df:
e7:4e:46:73:1b:48:0c:e0:1f:57:26:2b:0f:78:20:
b0:b7:1b:ed:c4:ef:15:27:c2:ad:16:62:6b:d4:0e:
60:ca:d2:5a:93:87:1c:63:bd:49:28:93:98:54:cf:
7c:85:39:41:d8:b8:c6:d4:32:38:0c:75:33:8b:1f:
f0:1b:45:90:c3:62:59:8c:e6:f0:00:48:ef:2e:39:
d9:2a:aa:73:6f:fe:6d:4c:00:60:21:1d:4a:7b:df:
c5:08:11:c6:56:4f:84:d9:16:23:7f:49:aa:7c:08:
f7:6a:e2:28:26:8b:01:bd:91:f5:52:78:46:6c:d2:
9b:67:5a:0f:47:52:e0:83:aa:cb:c5:00:09:70:f7:
e4:78:53:ea:87:1a:c0:80:83:9e:e8:f8:7d:96:c7:
5f:9c:54:3e:27:ae:48:07:30:f5:5e:7e:f7:1f:c1:
d2:f8:5f:25:55:e8:62:98:e5:41:d8:e8:63:84:36:
93:e4:25:e1:66:03:a0:c8:7c:1b:b7:5d:c3:d1:72:
73:36:bf:55:2a:69:d4:26:0f:ed:97:f4:a2:c5:a1:
78:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:25:C1:F1:DE:84:7C:B1:C7:05:5C:C6:94:3F:43:FE:FB:F6:CA:56
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8c:86:28:08:40:a1:bd:34:28:71:7d:20:75:0a:59:53:f1:
1f:d3:02:0a:dd:e1:fa:31:c3:d2:21:34:bd:0e:f9:2b:39:e7:
f2:ca:28:73:28:ad:01:62:23:ab:57:4d:c0:86:a5:0a:6f:c9:
be:00:16:00:61:48:d3:85:6d:a9:90:e1:58:12:8d:7c:cd:93:
a5:18:34:2a:19:3c:c5:38:d0:cc:e5:b5:a0:31:a9:f4:a4:b2:
1a:3d:18:bc:98:aa:6c:68:63:bc:92:c4:02:f0:99:18:87:67:
be:1a:c0:dc:27:d8:fb:a9:ac:aa:b4:80:ee:b3:b1:b0:1b:71:
e2:7c:0d:18:0e:d0:0a:1c:f5:99:54:cd:c4:80:a6:37:b1:fc:
0e:f3:14:2f:22:b5:e6:8b:ee:35:25:a4:c6:76:8f:1a:6c:09:
ca:9e:9b:85:be:4d:d1:39:25:17:fc:28:8c:57:d3:7c:b7:d4:
61:28:75:d7:ef:3a:8f:46:1f:90:13:66:01:e3:3e:1e:8a:cb:
42:85:a8:90:8c:84:4e:c6:73:1d:ab:a0:17:32:c1:c2:16:b8:
92:b3:28:91:bf:68:03:ab:82:75:a9:15:46:3a:39:4c:23:7d:
e6:a2:1c:6d:50:d1:be:eb:9f:80:ca:17:04:a1:41:8d:0c:94:
7b:15:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:31 2025 by rpki-client