Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: 9OU4HxYASFG8ezEwfCs2YWiljtbKEXPLEh2a5rGHWRQ=
Subject key identifier: 95:1D:36:48:97:44:54:79:9C:36:D5:C2:84:FD:F1:E4:BD:10:B6:D8
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0194BCE08D9AC7911FD0DDE5A275A5D247E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1067
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: npFdPYcdlJDDjDJJQW9Mt3DGqpJTWH7TURD5hQKZssM=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8d:9a:c7:91:1f:d0:dd:e5:a2:75:a5:d2:47:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=951d3648974454799c36d5c284fdf1e4bd10b6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:86:19:9a:63:28:3e:94:b8:72:b3:c8:01:
68:fc:61:fc:2a:1a:d3:75:16:f1:bb:e2:c3:fb:87:
d0:70:4c:b2:c9:49:c9:96:90:4d:73:50:c4:2c:81:
77:84:c2:9f:4f:41:ba:78:7d:dd:ce:d4:c5:3c:02:
7b:fd:02:ed:41:f1:29:59:ab:11:50:eb:9a:bf:c8:
b8:df:6b:de:27:d6:5a:3b:63:ac:c8:72:df:a2:c1:
90:66:65:7e:d3:7f:41:24:8b:8b:1b:08:97:41:24:
fd:20:d2:31:65:b4:33:da:9f:11:bc:82:c1:01:f5:
c0:79:53:33:c2:46:98:31:89:f7:19:c2:5e:af:33:
d2:b6:69:60:6f:01:fb:a0:f0:ab:77:9b:10:48:9c:
31:1f:92:21:4f:3e:1c:99:4c:40:fe:8b:ee:83:af:
6c:86:64:f7:ad:af:c3:5f:c3:e2:b1:a7:e2:13:13:
34:d5:07:f9:b6:44:1d:63:6b:8d:de:ef:b7:ee:c6:
30:6a:a5:3e:ad:de:35:65:40:62:9c:21:6c:0d:4f:
45:e9:b9:45:32:f1:b5:42:2b:99:af:af:19:84:50:
9d:2d:3f:a6:65:4b:39:3d:40:2f:f5:5b:ae:d8:56:
7b:10:bc:ad:97:9f:33:42:e8:fa:0e:69:93:3a:12:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:36:48:97:44:54:79:9C:36:D5:C2:84:FD:F1:E4:BD:10:B6:D8
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:f0:c9:27:03:d3:da:32:f2:93:7d:f9:38:6c:8e:c7:18:
a4:eb:be:c1:8e:68:88:34:b7:93:b9:30:67:f3:ec:63:5a:69:
c2:f8:5f:3e:d8:e6:ea:1d:9c:1f:1e:c6:4c:e0:3d:cf:b0:7b:
90:e5:4a:35:af:0a:eb:0d:a7:b6:7f:8b:f3:f1:02:ae:57:8a:
a1:ca:0c:19:ea:6e:47:57:97:2f:9c:d1:e4:df:df:fd:a9:2c:
17:4b:99:3c:82:d7:8b:66:a2:b1:1d:16:1c:2a:5f:4d:6f:30:
1c:f1:47:f4:4a:8e:f6:1c:a0:bd:ab:10:a0:07:05:20:4f:27:
98:83:c0:61:d6:92:55:9a:3d:d7:c2:d3:9b:1a:51:66:95:1d:
e4:18:5b:63:c8:72:5b:2f:46:56:7f:2f:83:89:f8:0b:57:cc:
ec:3c:45:5c:d4:fb:05:fc:e9:8b:c2:bf:6a:93:88:07:05:9a:
72:79:e1:3e:46:9c:a7:99:e8:c5:94:1a:ef:dd:b8:44:83:c0:
49:3a:37:b0:49:49:60:f6:8c:37:46:51:02:42:26:9c:2e:bb:
45:27:63:ac:f8:fb:39:3c:af:0b:a6:d2:02:d7:66:2c:bb:9c:
74:ea:3f:b5:d8:8d:e9:1b:51:2c:ee:74:9e:03:6c:ea:50:82:
f1:43:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client