Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
File: cxkAeiit4HgdMS2NSUcts2dnBBY.mft (raw, json)
Hash identifier: cM55/oDtzCEPlj3xddyCUvF1E+dliWCZvlQkDXaCok0=
Subject key identifier: F4:76:E9:4C:CB:30:A9:D7:11:01:F2:BA:33:17:D3:96:70:67:65:99
Authority key identifier: 73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
Certificate issuer: /CN=7319007a28ade0781d312d8d49472db367670416
Certificate serial: 0194BC72F1819462D8A66037BCDC8956C1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
Manifest number: 06A6
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: cxkAeiit4HgdMS2NSUcts2dnBBY.crl (hash: E+NJsw0qaltq7LjyW57V5gZZDmAf4A8/76EnNiYD25Y=)
2: rOIGMeXF9bxOY5fu4vCOE7NrCP0.roa (hash: 1nU5+mzZGJaibKrLnnLB5qj48GydY1KP7W2pluR6Ujw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:81:94:62:d8:a6:60:37:bc:dc:89:56:c1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7319007a28ade0781d312d8d49472db367670416
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=f476e94ccb30a9d71101f2ba3317d39670676599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8d:11:db:a7:85:48:f4:4f:c1:ed:b1:76:a0:
4e:3c:e3:21:06:40:7c:5d:aa:9c:90:07:b9:7f:82:
60:14:bf:e5:5b:5a:eb:05:3a:ce:92:fd:22:7d:87:
c1:5f:8d:8f:ab:47:cf:df:93:ba:27:b4:37:68:24:
88:14:71:19:d3:a2:53:37:cf:a4:42:54:ca:47:f9:
5a:0c:f4:e3:99:ff:1d:cf:53:b3:5b:cb:93:0a:e1:
8a:8b:ed:81:be:9c:0c:94:6a:dc:c5:a1:57:10:d0:
c4:49:68:66:44:45:4a:01:0c:a3:f7:39:fc:35:25:
e0:e3:02:c8:56:45:8c:ea:72:76:cd:c5:16:79:14:
5d:53:97:f6:56:6a:03:c5:46:0e:da:29:bd:d5:0a:
1e:0b:0b:10:d5:b9:74:b3:5f:9e:9f:d1:8d:1b:b0:
fb:99:c3:e6:e0:9c:d8:43:9e:db:cf:46:12:a8:11:
92:b7:b8:1b:80:bd:58:b9:db:0e:c4:28:5c:44:6d:
43:a0:1f:91:6c:d7:c8:3b:6b:bf:ec:0c:97:42:62:
c1:34:54:20:7d:20:ad:9e:da:96:69:00:1b:be:d4:
2b:a5:69:d0:d9:83:6b:d4:8a:c9:03:e0:57:4e:b3:
4d:ac:d6:ab:41:33:05:bb:b3:a6:46:27:19:a5:3b:
c3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:76:E9:4C:CB:30:A9:D7:11:01:F2:BA:33:17:D3:96:70:67:65:99
X509v3 Authority Key Identifier:
keyid:73:19:00:7A:28:AD:E0:78:1D:31:2D:8D:49:47:2D:B3:67:67:04:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxkAeiit4HgdMS2NSUcts2dnBBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f8c7e2-3282-4ebb-8508-9f9494966c54/1/cxkAeiit4HgdMS2NSUcts2dnBBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:53:4e:42:24:1f:33:39:27:a2:9e:d8:8d:dc:74:c7:45:28:
c5:74:2e:db:4c:21:67:ef:40:fa:2a:68:a0:1a:32:b1:c2:bf:
16:bc:b3:fa:fc:f0:72:ed:f4:a1:c4:7b:9d:31:ed:80:44:f4:
06:75:89:ab:aa:dc:3b:0d:87:20:84:6d:2b:01:5c:b3:63:c5:
b9:12:a7:27:ad:f5:ee:74:37:bb:3a:ab:e4:6c:b3:47:2c:f8:
f8:1c:e2:c0:c5:17:c8:d7:ea:f2:5b:2d:bb:37:e3:5d:80:d9:
4e:c8:cc:4d:70:24:73:2a:d7:79:ea:82:70:ba:34:bb:b2:77:
ce:12:09:df:d3:e0:02:fa:8a:cc:16:18:45:b9:c6:55:f3:c2:
aa:86:b1:9b:cd:f7:14:4e:39:26:b9:b1:20:f8:53:90:1a:42:
5d:7d:0b:3a:80:a3:9c:85:84:36:25:91:64:a6:26:84:74:59:
36:52:66:09:01:a2:ea:13:df:02:81:1f:1d:14:ac:b2:60:45:
09:32:97:31:26:70:55:0b:e8:77:e1:4b:04:9c:6d:70:fd:c0:
60:9d:8c:d4:15:3f:5a:1b:8c:8d:f5:82:4f:05:d2:ae:41:37:
95:89:06:fc:59:d8:40:f9:b3:dd:00:e8:1d:db:c6:c9:db:58:
89:ea:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:26 2025 by rpki-client