Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json)
Hash identifier: gajcOAT0T5E7PxnXxlHPLqtcJGKlNJ2vfskBriJzN+0=
Subject key identifier: 57:60:3A:4A:56:0C:F3:E4:50:2D:D0:E5:40:12:60:D4:C7:67:E9:03
Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48
Certificate serial: 0194BBCEAE7F9AC079D061CFB73E1F9D6FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
Manifest number: 0D3B
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: q2l63hMlQXPs54xMu86t04IbdEGZiYUMbN4hh+hp6A0=)
2: v9E0vcAK8UH-k8j4nX2V4G3hZDE.roa (hash: SIVhM870g8NlUd563qHaX2WqydoLuYqlZFbTgzV+HW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:7f:9a:c0:79:d0:61:cf:b7:3e:1f:9d:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=57603a4a560cf3e4502dd0e5401260d4c767e903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:e9:da:19:a9:8d:bb:49:7b:b5:db:90:40:
9d:f8:60:d1:c9:3b:52:b1:8a:cc:e6:6c:46:24:e8:
76:cf:b3:8e:ed:2f:5c:19:33:82:3c:2c:b1:f3:f7:
ab:3a:e9:6e:4d:14:11:9b:67:86:2b:82:b5:91:bc:
73:7a:e7:47:41:4c:0f:92:53:d7:a3:73:40:1d:bb:
d7:6e:e8:30:ef:fe:0b:63:18:90:8a:6b:18:52:68:
2c:e2:d6:f2:c7:16:79:2e:ff:66:12:6a:5a:a1:10:
0a:52:f6:72:ad:b3:97:cd:d0:24:a1:8b:8e:4a:22:
3b:f3:7c:9c:0a:b8:27:c9:0a:88:b0:9e:67:24:ba:
77:01:37:cd:88:18:e3:63:6c:e5:68:44:60:5a:fa:
18:c3:e5:00:51:0f:7d:e4:8d:58:3a:57:f8:35:4e:
ae:23:cf:fc:ee:d1:90:16:d9:67:57:81:4c:11:f4:
69:fa:b5:fb:b6:fb:d5:d4:74:36:e5:61:77:aa:0f:
f1:78:fd:cd:0a:7b:b9:02:8d:30:4d:74:96:b6:e4:
e5:68:d7:d5:2f:6e:02:38:77:3e:37:68:d5:ab:d1:
b3:0d:1a:d9:82:ca:7c:5a:b1:8a:76:50:b0:45:fe:
1d:e4:26:f8:0b:2e:82:ed:4c:4a:3d:63:5b:2b:92:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:60:3A:4A:56:0C:F3:E4:50:2D:D0:E5:40:12:60:D4:C7:67:E9:03
X509v3 Authority Key Identifier:
keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:27:bc:12:bc:02:df:7e:34:13:f5:25:d1:54:22:d2:4a:c6:
47:e4:f8:f3:cb:36:4f:79:ed:30:7d:21:c9:8d:3b:39:b4:d0:
a8:e1:b6:73:52:85:19:9a:01:25:96:ca:92:21:30:e8:e7:13:
89:3a:8c:b9:33:a9:c7:45:80:59:d6:93:c3:b5:54:22:e1:34:
5a:7a:e6:a0:1e:f6:8e:d1:44:79:f0:6b:e5:76:15:53:81:3a:
f7:ea:84:a2:e6:46:9c:37:b9:d9:89:2e:3d:32:1a:20:a1:64:
78:75:c5:80:e6:b7:55:fa:5c:22:21:22:38:52:c9:50:17:7a:
9d:2a:9a:b1:04:84:91:16:0a:33:5b:0a:dd:2f:01:6f:db:b7:
f5:11:7b:da:b2:c5:b9:39:cd:6b:d7:db:2d:56:61:39:1d:ed:
3d:e5:2b:a2:5f:b8:e7:bf:3e:ed:b9:e7:44:25:86:b1:27:b9:
fa:e8:a6:e5:bd:ce:20:36:f6:70:ae:ed:e0:11:9f:38:e5:5b:
c1:89:f7:11:84:c6:85:a7:2c:3d:b3:c2:81:40:7b:44:25:bd:
a8:f9:91:0b:47:12:41:31:a0:b4:2c:00:a2:2f:51:0f:77:91:
68:52:1a:f4:17:32:29:93:45:a0:f1:38:00:3e:99:46:32:4e:
f1:c0:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:55 2025 by rpki-client