Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: LDG9gcf6IhJQhbOjS0CfFTzD1ai9zBuVSJHpJiqGaOA=
Subject key identifier: 24:C0:40:5C:88:09:18:EC:22:F3:81:BE:62:2A:B6:BC:2D:21:FE:34
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 0194BD4E77537B418BC462A717BCC8F8A9AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: keszlIjRklrXSaGhKvSU7UFpT/yNdf08CVtcAYCmmFM=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:53:7b:41:8b:c4:62:a7:17:bc:c8:f8:a9:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=24c0405c880918ec22f381be622ab6bc2d21fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:88:7e:ff:54:02:74:13:30:6d:c5:3f:d7:
9b:cc:97:a8:2a:22:30:c5:5f:87:b7:8c:d3:78:2e:
ae:ae:1d:9a:d4:2d:1a:32:08:33:e2:1f:79:93:be:
10:d5:f1:e7:f8:46:3e:72:8d:33:bb:14:0d:0e:02:
c4:10:c9:80:4f:d0:eb:13:a7:68:a2:cb:df:a8:a9:
04:1a:40:47:a8:cb:82:b8:20:78:91:28:cc:d9:50:
e4:da:83:2e:bd:2c:bb:7f:60:81:2b:a1:77:3a:32:
c2:4d:2a:92:ad:ab:f0:79:dd:4d:87:eb:2d:6e:f8:
02:2f:7d:9c:47:43:90:5d:13:b9:c5:33:a0:47:db:
0f:c0:f1:15:53:68:3f:1f:bb:bb:56:04:1b:ae:d4:
07:63:cb:be:d4:10:dd:fc:4c:35:97:7a:a7:5c:06:
0a:31:b8:82:0c:39:6d:48:01:54:a7:c4:4a:c5:c4:
ef:47:88:73:de:1a:38:f8:3b:33:f0:7f:d9:a4:72:
04:3c:03:6f:6c:d7:d2:3f:74:28:a0:51:39:ad:c7:
82:59:34:01:27:94:41:f5:c4:0d:63:57:7c:d4:db:
22:cb:40:fc:47:41:18:2b:07:43:1d:17:e3:6c:e3:
a3:15:80:5c:13:b9:49:e5:bd:85:9b:c1:80:77:b6:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C0:40:5C:88:09:18:EC:22:F3:81:BE:62:2A:B6:BC:2D:21:FE:34
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3d:e4:4c:00:5e:7a:84:c5:13:8c:95:af:13:ed:13:aa:2a:
56:3f:00:18:11:70:6b:0f:3e:88:b9:fd:da:b2:b5:42:71:7b:
61:63:eb:ab:f9:18:d8:a6:7e:ce:c3:2e:82:7a:25:96:e0:58:
8e:eb:7a:ba:b8:6f:76:e9:51:2b:1b:0e:88:d8:dc:d0:fd:38:
d5:d8:6c:cc:48:9b:55:53:15:e1:c5:1d:5f:2d:6a:87:d2:bf:
f2:00:59:4c:48:31:8d:57:23:6d:4d:f9:0a:7c:32:5c:e7:34:
be:ff:81:52:85:f0:22:35:e0:d8:4e:9b:4b:7d:1e:98:7b:84:
36:b1:15:fe:43:f1:8d:2c:35:34:33:d7:8d:ca:03:3e:fd:ab:
23:ce:1d:f2:4b:f3:95:ff:4a:a1:a4:76:59:6c:08:5b:b1:23:
52:21:f3:2c:ba:da:31:e0:21:5e:c0:a2:34:8e:75:ad:e0:df:
8b:2a:eb:ae:bc:dd:87:76:ea:df:de:63:cd:a8:b6:88:f0:2b:
38:71:dd:d5:0c:e8:9c:24:3a:61:4a:94:f3:4a:01:d3:17:26:
e2:45:b7:68:50:05:b2:d5:ca:37:0b:35:c1:ea:76:fd:fe:1a:
09:28:7e:83:e4:08:5c:dc:42:cc:73:ad:d4:ed:f9:fc:9f:b8:
95:5d:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:05 2025 by rpki-client