Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: SdwCBDvclzhzFZsFT2a3G5AMTVwjGqozMg4dIbN+u6g=
Subject key identifier: F9:05:7D:CB:9A:ED:A8:C7:80:8E:93:5B:B8:82:CC:1E:E0:39:49:EB
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 0194BCA96DC5F81DD21339CD1FC301C394A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0B3E
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: 3J2b91XWRoEezj5DWc3m1Tob+Fg/v3xkNaqs0CZRvks=)
2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6d:c5:f8:1d:d2:13:39:cd:1f:c3:01:c3:94:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=f9057dcb9aeda8c7808e935bb882cc1ee03949eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:9a:00:df:69:84:7f:f3:62:89:b6:57:99:
f0:15:08:ec:fc:b1:75:db:dd:19:48:1e:b6:e7:57:
16:be:76:8e:3d:b8:e1:f7:92:bd:e8:3a:41:66:9e:
b7:ac:f6:68:bc:99:e1:fe:9e:f2:be:a6:dd:12:c8:
35:3d:bc:cd:7b:f2:7d:8c:60:11:30:30:c3:2d:5b:
d3:30:a2:65:79:16:52:fe:79:0d:b4:1a:42:f1:37:
4b:9b:b4:9a:8e:32:d8:d1:74:cd:4b:4c:83:30:a3:
a5:4c:f3:1a:c0:bb:be:cc:bf:e2:81:f6:11:55:d8:
8e:46:fd:38:3b:9e:bc:02:bb:7e:0b:a6:94:16:6e:
d6:0f:fc:cd:4e:cd:69:3d:36:ab:20:b1:1b:b6:2f:
a6:86:fd:25:2d:25:53:7d:9d:54:a1:1f:1e:2a:bc:
87:fc:7a:e1:b1:e5:a5:61:6b:4b:cb:70:5c:0a:5e:
03:22:1c:e8:7c:d1:f8:b4:c9:7e:2e:b4:3f:eb:22:
c0:3f:b9:a9:47:eb:9d:47:5f:e0:fd:47:d9:75:6f:
96:16:72:8c:f7:92:be:b8:0a:18:c2:17:ce:ad:1d:
6e:3f:4b:f8:ef:19:f9:31:60:ba:6a:bb:39:52:1d:
12:fd:a4:2c:8e:75:58:80:c1:47:4f:83:67:34:0f:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:7D:CB:9A:ED:A8:C7:80:8E:93:5B:B8:82:CC:1E:E0:39:49:EB
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c3:60:16:8c:c0:6b:4a:81:6e:2b:d2:ec:d6:75:51:3e:e5:
75:bf:5b:f4:f9:45:11:92:32:6a:8c:6e:d9:3e:04:fb:9a:91:
58:14:c7:37:0e:13:b0:87:53:61:f6:6b:ba:bf:f1:00:2c:9e:
24:3d:39:e6:fd:59:9b:43:7a:aa:73:42:50:78:38:1c:16:1c:
cf:60:57:03:31:77:7f:5e:65:64:38:dd:7d:f4:4b:03:c4:76:
e2:90:fe:e6:dc:1a:3a:55:1a:a9:a0:b0:cc:65:8c:70:bd:c1:
2c:dd:29:f5:bd:ff:6f:84:36:4f:c2:bb:3e:81:2a:87:85:95:
30:2e:8e:b8:8b:89:54:a9:d1:ec:1b:ae:74:1a:15:25:9b:81:
a1:95:9a:19:37:23:6b:6f:f1:b3:e0:a6:48:c8:b7:d1:5a:a1:
b5:f1:1b:26:33:f0:4a:87:63:d9:23:74:01:44:df:13:3b:5a:
52:57:04:7f:e6:b1:ae:5d:f1:7f:d5:c8:b2:08:fd:60:d1:e5:
a0:37:d6:4a:36:69:27:12:9c:59:0b:92:8e:b5:b4:10:c9:ae:
f4:1c:af:7c:66:32:cf:39:fc:fc:eb:0b:91:2f:3b:61:9d:bb:
f1:7c:d8:8e:4e:4b:8d:a1:36:07:72:fd:01:f3:c2:0c:28:a7:
75:88:3b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:13 2025 by rpki-client