Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: o8PblcTGXPCYxgFVDxeEVWPZbr/sM3aU6MtaKwG6m6Q=
Subject key identifier: 7D:62:6D:2E:A3:85:04:DD:23:92:FD:C9:17:A4:84:B1:1A:02:F1:48
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0194BCAA09B67AFADFD9E2B773AB1DCF6B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: UgHN4UAlgL4/XpRpVB17gg5Mobim/dUf3DWgKs3aoZA=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:b6:7a:fa:df:d9:e2:b7:73:ab:1d:cf:6b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=7d626d2ea38504dd2392fdc917a484b11a02f148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:41:0b:74:2a:01:88:92:42:2d:c0:f6:01:
d7:09:42:4c:a5:41:d4:b8:27:6d:3b:a6:4b:26:19:
9e:22:ee:1c:44:6b:e0:88:30:28:84:cd:6e:a4:c1:
3e:00:bc:96:a6:d6:a7:4e:34:8e:57:b9:d1:52:a3:
3e:07:28:db:af:cb:5c:19:2b:79:fb:ff:26:f5:f7:
21:15:a2:f0:4e:65:92:f9:bd:92:f3:fb:d8:b6:d8:
a9:a1:86:18:5d:24:de:0f:6e:90:b4:04:42:c5:d4:
32:4c:a1:f6:f5:99:e5:93:86:52:98:b3:b4:cf:8d:
53:51:2d:b3:41:aa:65:3f:e7:75:93:ef:ca:90:07:
d9:24:05:9b:c7:eb:cd:b1:38:cb:ab:ff:6f:20:d8:
dc:45:5b:fe:83:f8:23:62:01:b1:18:2d:6b:1f:6a:
5b:94:25:ae:b6:2a:ba:dc:4f:68:f0:d9:2f:65:4f:
a4:ce:0b:43:33:c2:42:fa:a0:e2:b1:51:37:8c:c4:
49:86:08:38:3e:db:09:e4:d7:bf:5c:b2:91:c6:95:
42:b6:d6:95:9d:81:df:ac:0e:4c:f3:67:43:1d:0a:
00:99:06:3b:70:ed:14:2a:80:dc:6b:a4:31:ce:9d:
7b:eb:ac:9d:90:8c:3e:ed:8c:e2:ea:ba:a0:f6:62:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:62:6D:2E:A3:85:04:DD:23:92:FD:C9:17:A4:84:B1:1A:02:F1:48
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a4:27:c9:43:66:53:b9:ce:3e:8d:34:b3:c9:ea:6b:a2:82:
f5:61:7f:ff:d8:f9:d5:aa:30:67:db:60:cd:46:3f:66:f3:0b:
c5:af:15:e4:56:1f:a7:d3:e4:14:19:17:cc:4f:68:c0:4c:d1:
f3:f6:c9:3e:bb:fa:0d:a6:fb:7c:9c:f9:ea:fa:0a:70:6e:45:
70:8c:85:a4:ec:3b:45:89:e4:1a:74:7a:bc:41:13:09:81:69:
36:fa:68:1a:a8:2d:23:3a:83:b4:fd:bb:f2:6a:b9:d0:83:88:
8f:b0:af:ae:64:c0:f1:a6:06:db:65:f5:44:dc:d8:b5:f0:75:
69:04:f2:a7:01:6f:4b:17:c1:3d:48:ba:a7:19:ce:99:de:c1:
61:8d:44:1a:f8:5d:8d:a1:e2:ad:ec:26:79:91:5a:52:51:79:
d1:8d:c6:2c:06:01:87:dc:79:80:ca:bc:2b:4e:c4:cf:5f:a3:
77:2f:ad:4f:1a:f7:f3:65:62:a7:b4:f3:4d:db:cf:d8:ac:9b:
67:9d:43:a0:0a:4b:90:eb:76:73:db:8c:2e:25:bc:c4:22:e0:
3f:d1:95:0a:8c:84:8f:dc:f4:0e:95:23:5a:ce:da:bc:08:13:
fd:84:f3:9f:a1:f0:3f:85:48:d1:26:63:de:ce:30:06:7e:5e:
18:38:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:36 2025 by rpki-client