Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: GLTfwPL7y6aIgmFK76Lyh7uvqdOHKOO47F4dWmrUvVc=
Subject key identifier: A8:5E:F3:EA:40:81:68:5F:DF:05:CB:59:B4:06:45:B1:D5:A7:39:90
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 0194BD8550D49693CA9850A3E577FDF41C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0B0B
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: zUyVR2g9IhqUK9DLR9miIpHbwcNRsMEezweijTkS7Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:d4:96:93:ca:98:50:a3:e5:77:fd:f4:1c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=a85ef3ea4081685fdf05cb59b40645b1d5a73990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:5d:e3:bd:7b:fd:cc:9f:8d:91:ab:c8:20:
f5:a6:4f:0e:2c:d7:d0:60:ca:a5:ea:d4:5c:47:e2:
f2:17:42:6c:89:b8:7d:10:c5:24:e9:69:a4:a2:a6:
8d:3e:83:7b:75:8d:4b:de:57:a7:12:6f:92:6a:0d:
2a:15:d2:bf:a4:ee:aa:52:2a:19:8c:fc:9b:21:46:
c3:d8:5c:89:7c:6e:3a:52:3d:14:25:a1:c3:0d:d5:
44:e3:46:c8:66:1d:2b:04:88:24:15:55:bc:8d:f0:
6c:3f:5a:5e:b3:98:e1:e3:ca:83:0e:72:06:cf:7d:
04:74:dc:5f:24:99:40:80:75:75:83:9b:67:41:54:
15:2c:10:3b:19:07:ba:6d:52:49:22:70:6d:ea:e5:
72:ac:35:dd:93:08:9f:f6:65:f0:3f:1f:86:43:ff:
1d:c6:67:d7:c9:7e:e1:2f:f9:2b:54:71:a8:61:d6:
fc:20:19:d8:7d:21:61:1d:7e:52:76:2b:83:7b:fa:
d4:93:85:8b:62:a0:a2:30:28:c4:f5:53:46:e5:50:
97:99:ce:28:6d:da:76:c8:98:10:7e:2e:26:58:3c:
8e:02:cf:4e:bf:38:f1:70:21:9c:7b:22:e7:e8:01:
04:09:0e:37:55:87:3d:14:b0:8f:46:7f:9f:58:10:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:F3:EA:40:81:68:5F:DF:05:CB:59:B4:06:45:B1:D5:A7:39:90
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:87:c0:20:75:15:d2:12:9b:19:23:b1:2f:85:8a:4b:8b:35:
ff:1d:27:de:0c:11:82:d2:9a:5a:0d:5d:ca:f0:8c:07:f9:1f:
7b:92:68:09:d4:00:a6:08:ae:55:6d:f6:cf:55:59:df:57:a2:
c7:43:5b:b5:79:22:f4:cb:2d:97:23:a5:18:1c:23:0a:45:1e:
40:5a:36:dd:05:a3:04:32:3a:e5:48:2e:33:2f:11:ff:f5:fe:
12:f7:8e:3a:2a:b2:ee:95:45:ea:f5:d9:7e:d0:80:f3:95:39:
10:8d:f1:2d:38:a0:0b:12:1c:0d:fc:85:32:7f:91:8c:41:b3:
6a:45:bd:41:6f:4f:69:d8:8f:87:47:de:45:ef:9a:15:19:e6:
3b:a2:59:a6:26:8f:cf:90:19:b1:cc:db:1e:e5:0b:0b:df:f0:
64:11:8c:8d:d3:f9:a3:0d:cc:47:9b:97:ad:96:1e:5c:0d:f8:
bf:de:48:11:4b:35:fe:d9:e3:57:8a:e0:ca:0d:dd:d7:a0:bf:
76:60:17:78:31:51:41:a7:aa:e7:86:99:87:2d:a4:4d:fa:19:
ca:d9:48:05:8a:01:1f:a5:9c:70:4c:e4:5a:ff:4a:5e:7e:1f:
de:fb:e1:bb:f4:f5:90:49:2c:01:b3:d3:73:22:e3:1c:b4:d5:
36:7f:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:16 2025 by rpki-client