Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File: CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier: KvWYkxZoKBPgrJdLU8j1/wybE1l4BxblfCU7erPFp0w=
Subject key identifier: 53:43:25:3F:EC:FF:C1:00:03:D8:AB:B9:8D:40:DA:72:3B:EB:3F:67
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial: 0194BC72937188E52A0DAB25FCA783D7EFE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number: 1088
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: cG89niEbx52RlQ999LuAnjywfJf9CV5eQiJV/tTXmEw=)
2: DgOe6d2o2BQOj9Wt3sGLRcqwsJY.roa (hash: 4FSuJ9FPuzzlW3Hsq3b3yqhIsDO/q6s/Z+iendZviDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:71:88:e5:2a:0d:ab:25:fc:a7:83:d7:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=5343253fecffc10003d8abb98d40da723beb3f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:fb:5f:8c:8d:39:2f:7c:06:99:29:35:61:
70:56:fb:93:d5:01:47:c8:89:31:14:46:6d:5b:66:
55:09:29:52:51:7c:47:46:49:72:08:12:97:0f:e5:
5f:23:18:da:d7:d7:13:e2:a4:40:57:44:ad:97:5f:
71:52:9c:fd:04:fe:86:92:61:0a:60:c8:f9:e0:47:
82:89:8c:3c:6b:20:92:37:2f:a4:28:d0:55:fc:0f:
2c:ea:43:e0:16:03:ba:8f:16:4b:49:5a:d3:52:ec:
5a:58:5d:0a:c0:a7:0f:4f:e9:af:de:2e:67:40:3e:
e0:30:11:72:5f:a0:7b:8c:d7:5d:b1:18:e4:64:33:
38:c3:7a:4d:94:6a:1e:42:2e:9b:16:cb:42:95:2b:
78:0a:de:15:f7:e0:44:12:fc:0b:1d:28:82:d7:6c:
b9:9f:14:0f:cb:47:04:1e:fc:50:10:9a:90:99:f6:
a8:e1:57:3c:65:21:4e:ab:be:da:5a:eb:a4:11:80:
8a:c6:5f:56:1e:f6:c2:34:1a:03:c0:a9:be:90:3f:
d4:e7:86:5c:70:a4:3f:99:17:44:03:3d:95:36:74:
09:41:33:b1:8c:41:d9:8a:b4:7b:3e:36:2f:d2:bb:
89:12:74:6b:14:d9:6e:05:67:0c:3d:20:54:92:c9:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:25:3F:EC:FF:C1:00:03:D8:AB:B9:8D:40:DA:72:3B:EB:3F:67
X509v3 Authority Key Identifier:
keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1a:13:97:69:7b:bb:5f:d1:35:9b:83:7c:51:bc:1a:a6:0d:
e9:33:6e:59:49:e6:35:ca:ec:a8:52:e9:ae:25:b9:98:f0:1a:
df:d5:03:88:20:ef:f7:09:10:70:31:7e:35:71:24:c0:ca:34:
bf:c3:b1:3c:92:46:b8:ea:f8:b6:0a:d7:bd:be:0c:eb:69:5d:
ad:de:62:72:42:79:a8:1a:ce:35:1b:82:c7:80:96:d9:6f:59:
7b:53:d1:b8:73:45:a7:4e:4f:0c:e8:e8:4c:e3:3c:a8:a5:b9:
29:60:24:29:de:01:74:fc:33:fd:8d:ce:fd:fd:1e:71:09:d9:
17:39:d7:75:a8:c9:0b:30:8c:60:8c:a7:08:06:2d:74:0a:7b:
92:c4:f2:9e:f4:93:2f:52:71:58:18:c6:a6:b6:b4:c0:9c:1f:
17:5f:be:64:df:f8:9c:fa:98:c0:e1:08:cc:7a:40:49:75:75:
8d:64:77:cc:81:54:5e:b1:6b:db:ac:2d:9c:66:59:f9:a9:9b:
71:fb:eb:6f:0e:74:a9:33:e2:bd:45:8d:ed:e8:63:47:7f:95:
0e:d3:f5:e9:fd:d2:76:92:c6:b5:88:f4:c2:bb:13:4a:57:43:
44:b0:d1:51:f8:08:1f:92:95:6b:61:44:1a:01:3b:0a:a5:c8:
79:32:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:34 2025 by rpki-client