Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: Z8KwAXXG2hqU6I3+Lohn5WPOkFMmWzOec6FlVzoPyJo=
Subject key identifier: 80:66:8D:91:2A:33:5C:9F:81:94:FD:15:38:48:03:69:C8:13:12:8D
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0194BD8578A932EEDC41AB23BC33391A140E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (hash: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: 4ntU/JBrt22fSj+1DvJ7XKWYTJjq/cRbCUb1DfOXVm4=)
3: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:78:a9:32:ee:dc:41:ab:23:bc:33:39:1a:14:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=80668d912a335c9f8194fd1538480369c813128d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:fa:15:a7:64:fa:40:7f:df:e1:ea:1d:57:
fc:4f:3f:21:e6:64:12:d2:b0:17:05:6e:17:28:b8:
63:27:ba:da:c6:0d:3c:46:85:6e:8e:6a:57:0a:a2:
cb:7a:dd:04:71:b1:71:2e:f3:29:40:8c:aa:c2:aa:
32:a5:28:80:c0:62:87:71:20:db:5c:3c:77:3f:23:
83:69:dd:88:6f:77:66:1e:f2:2a:50:6f:23:7c:aa:
f4:f1:7b:ff:f7:b0:b6:04:b2:fb:a3:66:1a:73:3e:
34:44:1d:e3:56:20:05:0f:6c:15:cb:dc:32:82:ed:
29:74:ba:4a:2b:5c:e5:04:bf:34:1c:3b:d5:2a:62:
59:83:50:26:3d:9f:d9:f3:1a:a1:2a:77:8a:91:98:
ef:9a:98:d7:3c:0b:e0:50:5e:d4:89:e2:0a:ab:4e:
0d:40:78:22:2c:e6:4b:21:36:11:13:9e:44:f6:52:
b8:a3:67:0b:e8:8b:0b:b0:d8:39:10:f2:c2:03:cc:
12:09:81:35:51:b3:3f:ac:43:c0:52:c1:07:96:6d:
a5:8f:b3:e5:5b:60:38:68:db:05:3c:cd:bd:8f:63:
f4:2c:77:6a:57:1e:83:8e:5c:8f:f1:ff:d5:a3:0c:
c7:5f:cb:7d:7c:42:dc:64:f4:85:d1:c4:e4:ac:3c:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:66:8D:91:2A:33:5C:9F:81:94:FD:15:38:48:03:69:C8:13:12:8D
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:74:f5:c2:c0:3a:83:d9:a9:4b:cc:89:7c:a5:35:2d:1d:a7:
be:24:35:25:23:f8:8d:b1:df:4e:8c:e8:bb:d2:96:04:a5:49:
f4:13:88:39:fa:29:0d:ef:fa:da:8e:d6:3e:3a:e2:28:bb:53:
29:ac:2d:37:ee:8b:16:3b:44:3a:60:3a:6b:53:63:f3:e0:b8:
4c:d1:b5:74:3a:d1:7e:c6:07:ad:3e:b2:2e:83:00:dc:d6:82:
55:17:c7:50:98:67:60:b2:ac:3e:43:f3:e2:d2:b6:e0:bc:bf:
cc:27:37:1e:62:e7:c7:8b:6c:3f:7f:8c:f1:b7:8e:93:77:bf:
3d:b6:c9:50:1a:6d:0a:20:4e:fb:77:f7:79:0d:c4:58:63:fc:
c3:05:1d:ea:c2:2e:28:f5:50:df:c1:d1:9e:b4:e7:8e:39:61:
f8:a4:c5:1b:b5:b9:3c:51:68:d4:63:b4:e9:f5:15:ed:d7:4d:
1b:91:66:4d:c6:9d:71:c1:8e:df:ba:5e:7b:ef:86:bd:46:fc:
4e:81:6e:e7:20:92:47:07:95:86:eb:d8:cc:61:eb:89:4d:1b:
c6:b5:19:85:14:c8:46:34:12:e5:d1:79:d4:9a:1e:d5:03:6e:
38:8f:05:bd:24:af:b2:a3:ac:77:40:1e:84:73:90:8c:4e:5d:
ed:54:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:29 2025 by rpki-client