Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: obZ3/b4IC/gdRnynw61C/yninPjMD9fbdIHwSKJP4s8=
Subject key identifier: 57:5A:DA:EE:96:27:A9:8D:65:35:85:8B:CA:87:1C:23:8A:1D:00:0C
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 0194BBCEC93502200D7F6B3358D055EB843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 05C5
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: cvBWIa3HOJ0y44PZWGQfi91kN1Pgo9Bc9aKHY27nTcM=)
2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c9:35:02:20:0d:7f:6b:33:58:d0:55:eb:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=575adaee9627a98d6535858bca871c238a1d000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:d9:b4:41:15:30:fa:b4:15:a5:a3:f4:47:
9a:51:cb:76:1c:66:de:04:c1:d6:a7:c6:6d:54:13:
e1:6c:45:17:1d:83:3e:ef:78:a2:94:7e:1b:ec:09:
6f:91:70:5e:f1:42:81:ce:74:74:46:51:8d:4e:91:
a1:3b:7b:c0:7d:8f:4d:41:29:89:34:20:9c:05:31:
df:2d:c1:e6:2b:03:6a:29:f5:46:53:10:98:7b:b7:
ed:fd:91:b0:ad:87:ad:32:f2:67:30:6f:89:c6:c5:
d4:92:29:cc:17:20:be:32:e7:c6:5c:9e:3c:4a:37:
02:4c:45:df:0b:1d:f1:85:dd:05:ca:ec:ae:9f:10:
23:19:a8:06:f6:b9:96:1c:aa:51:b8:6e:59:b4:f5:
a7:08:ae:40:2c:7a:2b:f0:1b:fe:d1:8d:0e:70:f5:
4b:41:90:c9:eb:72:11:59:3b:17:46:b0:a3:3f:d2:
b3:fe:a9:34:47:11:37:e4:c1:04:ae:b2:f3:af:57:
37:07:80:62:10:a7:9f:90:69:d6:6f:6a:97:18:43:
89:03:e3:0a:cb:48:57:ff:5f:34:2a:95:9b:b7:6f:
14:c4:69:83:b2:09:0c:57:2f:02:18:67:31:c3:8c:
6c:0a:51:7a:a2:05:60:8f:39:c0:94:39:45:05:89:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:DA:EE:96:27:A9:8D:65:35:85:8B:CA:87:1C:23:8A:1D:00:0C
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:4b:1f:7d:de:22:b5:9c:80:5b:ec:f6:6e:c8:97:50:cd:89:
64:22:89:22:b3:ce:80:e2:b0:24:a6:37:34:79:42:7d:d1:92:
19:c6:97:31:be:ca:78:5f:93:50:49:e0:c0:80:b3:31:29:4f:
85:33:82:90:ce:a1:f3:e7:1f:38:96:c8:57:7d:90:80:44:da:
b1:3d:e6:11:5e:2a:71:c3:eb:5c:d2:5d:84:7d:c0:94:40:22:
58:81:db:a7:6b:f8:48:2a:62:00:85:ad:07:c6:5d:c0:55:83:
1b:9b:32:68:0c:c1:37:2d:88:04:96:a8:3f:69:08:49:80:3b:
cc:96:40:11:59:7c:bf:34:25:c4:06:8e:e6:ef:25:84:87:b3:
fd:04:5f:1e:24:26:46:51:1b:2b:bb:21:7c:8d:85:9b:30:5f:
73:bd:8d:5e:52:83:74:e5:a2:3b:89:1e:1a:ee:03:37:d3:dd:
3b:f0:c0:44:78:0e:73:2a:74:de:9b:9f:d6:fc:23:1d:92:29:
5a:a8:47:00:dc:4f:94:94:9b:06:5a:ec:bc:23:90:41:85:df:
2c:6f:4b:84:4d:7f:ad:08:49:b2:fc:39:4e:1c:af:38:d7:52:
63:b1:e6:b6:08:cb:79:f6:40:5b:93:ea:15:65:2d:c1:11:e7:
28:6b:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:01 2025 by rpki-client