Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: 9AqkVUd/wqbo4T5vpeEiYw3v/IGdgZ+RGfKNd10p4bI=
Subject key identifier: E0:76:F3:C3:4E:69:80:A4:A2:E0:88:2E:0F:08:92:27:CF:6C:86:61
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0194BCA97244055937E3BC7E77A82606B269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0840
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: 8W82X8wmX+Y11Fq3pRWG0iLgH8ib5IaMMu9uRtrz34k=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:44:05:59:37:e3:bc:7e:77:a8:26:06:b2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=e076f3c34e6980a4a2e0882e0f089227cf6c8661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:fb:b5:84:fb:21:53:58:8e:5e:a6:90:fc:
be:50:23:4a:e9:df:26:6f:b1:cc:90:1e:4c:e8:d9:
6c:4f:a1:27:85:06:b1:f2:61:b9:8e:83:65:7a:56:
88:8a:40:79:79:bd:94:96:1d:64:27:85:5f:f1:b0:
ee:6e:e7:05:f2:fc:37:a0:bf:1d:7d:40:d6:16:10:
f4:f5:82:30:f9:a8:31:25:ea:ac:bb:cd:cc:96:9b:
ee:26:d8:07:10:89:33:0b:94:21:9a:a2:c4:b7:25:
cd:b9:ba:ca:7d:ee:23:97:32:24:89:a2:13:3b:8f:
88:8e:03:d1:12:7e:0d:b3:8e:b9:0a:b8:2c:df:d5:
8d:4d:2a:a5:ec:03:aa:f9:2c:54:63:ca:18:08:a1:
0b:cc:eb:54:29:44:1a:db:4a:98:0b:e1:e9:48:97:
5a:9d:1d:89:d5:dc:19:21:b0:b5:ef:df:1a:56:17:
d5:2e:7e:5f:96:b1:b4:19:ab:f2:60:e0:c3:10:12:
fe:46:02:02:1e:8d:9d:74:17:50:c8:c6:2e:01:8f:
c8:a1:a9:e5:28:8c:d7:5c:47:b5:d1:8d:c5:a3:b2:
80:c8:29:c3:df:fd:d5:54:eb:14:26:bf:bd:83:9c:
4e:70:8c:fd:e0:83:b7:1a:e4:8f:c2:2d:45:37:20:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:F3:C3:4E:69:80:A4:A2:E0:88:2E:0F:08:92:27:CF:6C:86:61
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:84:87:df:00:c0:ba:88:22:8a:77:8b:fc:28:86:c4:de:b4:
78:1d:9b:8b:58:b4:92:90:c7:9e:68:57:04:3d:a3:3c:f2:26:
ff:e4:53:7f:d3:09:80:df:a4:3c:04:5e:22:13:ed:24:0b:d9:
f6:03:2e:82:fd:62:09:37:c2:40:21:02:68:2b:cd:22:af:a0:
1a:57:83:5d:27:24:bf:1b:49:a9:65:f9:86:a0:e7:04:1f:fe:
0f:3f:dc:e6:26:65:3e:f7:fb:21:96:15:09:c1:4b:53:8d:2b:
8c:14:8c:26:f5:d0:3c:eb:d8:2d:81:05:ee:3f:44:5f:1c:e0:
32:a2:42:eb:51:da:db:e8:1d:8e:c4:34:a1:6c:38:f0:76:33:
6c:89:3f:f4:f7:bf:9c:c6:bd:33:f3:89:c8:c1:53:2f:12:6c:
40:c1:33:75:38:af:d5:c1:b6:1b:c1:ea:07:ef:8c:e1:d3:4b:
6e:5f:c2:e4:d7:ea:16:b7:39:d6:66:d7:08:a0:60:cb:4a:e3:
46:26:83:d4:c3:9a:c4:b4:48:d1:4c:02:69:2c:59:28:38:01:
c2:10:37:75:c4:cd:11:4b:60:a2:51:2c:2a:44:07:0d:5a:b9:
d6:fa:28:fc:33:c6:4b:a5:ed:5d:34:e0:68:ca:92:da:18:f2:
2f:cb:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client