Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: lKvSQ7TO2TSQwNvscKNka+ZtM0MPo8rp3xBzR6PS2GQ=
Subject key identifier: 5A:59:5A:06:D8:ED:26:4C:F1:16:E6:AE:89:CE:B9:21:C7:09:25:1B
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 0194BC3BFFC7495E9728EDDE1996F2B2DC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: tBqGpP0aQXihgtCQwlQyojXG5i7lHGNTNkIKlWubUR4=)
2: N8mV9awJGr3UBaDAWnXM1NPXyUc.roa (hash: 5KuYdG2Ow7cPaLHbUBJMTGl3M9OgAqQXRYGIUhdM/VU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:c7:49:5e:97:28:ed:de:19:96:f2:b2:dc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=5a595a06d8ed264cf116e6ae89ceb921c709251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:f1:23:ce:bf:64:13:cc:3f:f5:ec:8a:80:
08:cd:19:78:9e:9b:50:fc:5e:b3:7e:e6:10:bb:2d:
31:f5:fb:8b:21:09:e0:4e:44:8f:d3:e6:14:72:d5:
5c:21:7e:53:00:87:ea:a1:0e:05:70:eb:97:89:95:
1b:71:52:79:e6:c0:fd:6c:81:fb:1b:7b:2e:7a:86:
87:cd:99:d4:f1:ec:09:58:48:15:70:14:86:f0:ae:
cd:95:73:cb:ea:0a:ea:3a:7f:d5:1c:33:9a:5f:22:
9f:d2:9a:9c:b4:af:4d:73:51:d2:b4:54:55:a1:ec:
f3:b6:14:c6:1d:03:6d:07:de:58:49:ff:38:95:59:
cf:b7:78:76:76:ca:ac:4e:78:b1:e5:77:7c:29:f4:
2e:28:cb:4f:85:79:81:47:4a:3a:12:69:56:f5:27:
a2:1b:e0:90:cd:9b:d5:9f:17:81:f2:b8:c3:f7:da:
05:c1:80:b1:8b:41:21:22:77:c0:ff:ad:e7:35:a7:
2a:58:81:04:ac:e8:24:d2:af:44:bc:ef:01:14:a9:
f0:1a:84:e5:f7:78:bb:89:be:2c:8c:f7:50:1c:f2:
89:67:ff:fa:88:3c:45:a2:6f:85:9d:8c:4f:ef:7a:
bb:98:de:0b:b0:d2:0d:00:e5:44:61:7c:cb:a1:e7:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:5A:06:D8:ED:26:4C:F1:16:E6:AE:89:CE:B9:21:C7:09:25:1B
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:73:94:6f:d3:3a:70:67:bc:cb:0c:4b:4d:bb:6a:b3:30:dc:
5e:20:ea:54:20:80:fd:d2:fd:2d:e4:98:06:46:00:f6:66:3d:
2f:de:6c:9b:33:32:fe:94:38:6c:60:49:4b:36:6a:0a:de:1a:
6d:74:a6:bb:d9:c3:44:d5:20:f4:32:04:97:61:84:09:88:0e:
21:64:cc:74:8c:3c:cf:87:87:f4:07:53:87:26:cb:3f:2f:02:
93:1d:2b:b6:15:4a:74:28:b4:12:c0:95:dd:00:c3:03:db:47:
ba:87:57:c3:82:35:11:13:df:13:ef:43:6c:58:f9:e9:99:60:
6e:1e:7f:20:94:9a:18:ae:74:b6:f3:ad:c9:f4:4e:93:4f:21:
68:08:62:bb:49:50:30:70:4a:55:de:61:42:4f:89:3a:cb:80:
47:5a:72:34:24:4b:76:91:b4:d3:6a:a2:fb:53:36:cc:4c:74:
7f:b6:94:56:1c:c2:ae:fa:ce:6b:64:cd:00:84:29:55:36:67:
39:77:2a:3e:36:61:32:db:5d:76:15:57:0b:5d:39:88:a8:3e:
c6:93:0b:99:2b:bf:d2:8e:ce:e2:54:4f:4b:de:1b:cb:05:0e:
00:7a:57:94:22:03:64:83:ba:2e:3c:f2:68:ae:40:a1:c3:5c:
65:86:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client