Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: 8RihwY7IllzfOnRi0uwIrxRijQnpjm8o8pD4Qzku6HY=
Subject key identifier: DB:B9:7F:12:42:15:1E:C9:02:CA:BA:C2:E7:D5:19:FE:88:56:EA:0D
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 0194BD1818A4B3ECC578145E0E708E1DF63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 01B3
Signing time: Fri 31 Jan 2025 16:01:00 +0000
Manifest this update: Fri 31 Jan 2025 16:01:00 +0000
Manifest next update: Sat 01 Feb 2025 16:01:00 +0000
Files and hashes: 1: AZt7Se6557jhGabESg2f7LNf6s4.roa (hash: 1ba1sNNM9lYSgyXFdL1/tvNcApCQY3MX2LcXuVatgJo=)
2: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: QrGtMjwbpt66rjgGC1mXXFUwJpLemnLKrZHlkW5qoY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:18:a4:b3:ec:c5:78:14:5e:0e:70:8e:1d:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Jan 31 16:01:00 2025 GMT
Not After : Feb 1 16:01:00 2025 GMT
Subject: CN=dbb97f1242151ec902cabac2e7d519fe8856ea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:d2:df:22:36:3f:ea:b8:06:90:95:c3:32:
e9:f5:06:8d:54:dc:7b:c0:81:f6:37:b4:f9:39:0d:
b3:e8:7f:e4:bd:ec:4d:2f:82:ee:de:f7:aa:78:4b:
f5:28:c9:88:f1:9a:a7:d4:6d:48:02:f7:70:d0:95:
be:4e:b5:45:51:26:99:d1:c1:14:85:17:ce:c4:79:
b6:2c:a1:0e:25:5d:06:d5:70:02:6f:16:12:86:ab:
f5:2f:42:54:ff:97:69:0c:22:0b:e9:1b:87:c1:a6:
73:ed:1c:ce:29:29:e9:b5:1b:bf:a6:6a:47:70:fb:
5f:13:1f:c1:2c:c0:19:05:bf:01:a5:ba:31:8b:90:
b8:a4:1c:7e:df:a1:ec:2c:6d:2b:9c:f8:e5:4e:0a:
47:f4:ef:f0:71:67:c5:11:1e:ae:86:04:7e:1e:82:
f2:16:ff:1e:12:bd:fa:f6:f3:87:9b:35:63:92:b5:
99:1d:e4:43:4b:49:6a:cc:90:86:7a:99:d0:48:48:
e3:ae:97:6b:56:ee:be:a1:8f:0a:0e:f4:76:72:b6:
a5:27:28:b0:10:ff:6e:be:a9:19:8d:2c:a9:96:57:
3e:ac:95:db:f8:0d:b5:17:f3:9f:0c:88:42:2f:86:
6a:f0:62:bb:e1:44:7e:91:3d:88:e6:21:c6:4d:56:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B9:7F:12:42:15:1E:C9:02:CA:BA:C2:E7:D5:19:FE:88:56:EA:0D
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:a2:9e:ef:39:f9:98:d1:93:8f:66:25:39:bc:fe:5a:cb:
e3:35:10:e3:20:f6:7f:0a:79:2f:0d:62:94:41:48:fe:8c:cc:
9a:1f:c0:63:cc:85:b2:4c:79:de:07:2b:20:c0:18:1a:09:fb:
e0:4f:3e:c7:40:d3:b4:0c:c1:29:a2:12:85:8e:3a:0e:04:25:
c5:f6:08:62:55:65:0f:92:cc:6d:d3:ba:4b:91:c0:56:8a:3c:
4a:10:53:d4:aa:1d:97:07:52:3b:b5:8b:91:95:76:f1:0e:7c:
92:9d:5c:77:9c:6e:5c:8b:ab:33:ca:c1:ef:8e:fd:71:c9:96:
60:f2:9d:d9:9e:df:b6:cc:63:81:40:7e:b6:8f:69:8b:42:db:
fb:d0:96:ca:40:90:00:19:15:3c:48:5e:2f:52:ed:71:86:50:
2c:06:94:35:32:9e:f5:94:f7:a6:34:d6:cb:d5:86:fb:4f:45:
c0:61:63:af:80:af:a5:ca:7f:5c:30:6b:ab:40:12:0f:68:11:
d0:1c:b0:2c:73:06:3f:24:68:ff:6c:11:d6:6a:76:30:1f:b0:
d2:32:d2:d4:c3:f7:df:f2:9e:7a:0c:fc:e7:cb:21:3d:01:32:
48:b3:a8:7b:a4:c5:1a:27:3c:b9:75:ce:86:ab:f2:75:38:24:
e2:e7:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:27 2025 by rpki-client