Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: IBxSGlJY55A1uegu9oWDN9TeXe6uDt14Pi7HfLqrz7M=
Subject key identifier: DD:9A:62:42:BE:2D:CF:EF:1A:31:55:13:B6:9F:17:50:11:B9:32:79
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0194BD85899849CE0E3EBCDC89BFE123C911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: zpkXrBQJxgbdHbdrH1TBn3n/NW29owLqHlT4NMy2//I=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:98:49:ce:0e:3e:bc:dc:89:bf:e1:23:c9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=dd9a6242be2dcfef1a315513b69f175011b93279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:cf:53:16:87:f3:e5:99:02:28:71:e4:0c:
0b:93:6b:d6:f9:14:e5:4b:c6:c9:e2:6e:da:ae:29:
70:46:df:be:b9:7a:76:17:6a:ca:b2:b2:e7:62:20:
69:49:b2:80:15:91:16:71:5f:05:b2:be:16:b0:21:
d0:49:d5:40:95:51:7c:ca:83:a4:a5:58:50:61:b5:
8b:7c:e5:17:ae:ed:6d:e6:d2:ae:02:69:12:c0:a7:
8a:3e:90:87:b7:e1:69:92:c6:c5:bb:68:11:51:5b:
0d:8e:4a:1f:18:68:75:dc:0d:60:05:23:02:59:81:
ae:9b:14:f8:b2:b0:2d:0c:f6:ee:23:90:da:56:bb:
07:6b:cf:ac:28:00:33:a8:cf:60:1d:e6:3d:f5:24:
af:30:5e:57:2e:f0:a3:72:b1:91:c5:4c:73:19:9c:
e2:d8:43:92:01:a1:19:91:29:24:9f:c1:f0:37:3d:
fa:13:5c:d5:24:4d:ad:e8:55:06:03:3e:eb:10:1a:
90:17:6b:76:28:48:4e:6b:61:85:da:f0:ab:7b:3d:
ea:ed:a6:5a:39:b3:b9:3d:e0:2a:d7:da:c9:90:90:
aa:ce:e0:ff:7a:78:b7:8d:dd:95:93:b4:88:ea:ce:
be:19:d2:8c:e5:2d:21:3c:1a:d9:3c:80:06:ab:54:
c4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:62:42:BE:2D:CF:EF:1A:31:55:13:B6:9F:17:50:11:B9:32:79
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c8:38:3f:51:1c:c7:60:aa:5c:52:e8:d7:f5:65:2f:57:81:
69:ce:5f:37:69:8b:e5:db:58:08:a5:d2:6f:99:05:83:24:3f:
da:45:cf:6a:28:6f:af:36:5d:5d:90:31:21:df:d7:60:ac:b1:
a2:15:3f:d2:be:d1:31:55:c5:7d:7e:29:11:6a:25:28:51:0e:
41:e5:d2:03:6d:3a:21:ed:b3:03:33:14:81:19:bf:d1:53:6e:
dc:ff:35:75:e3:b3:90:66:77:f0:da:29:f3:30:71:0f:3b:ad:
ce:8b:67:76:d1:04:d4:a8:11:ae:80:3f:f7:86:48:95:4c:38:
ff:40:8c:6b:88:dc:06:f7:d8:2c:25:bc:78:4e:22:69:bd:d5:
28:2e:20:55:18:a5:30:16:c7:30:4a:8e:c8:9d:8c:ad:c9:1e:
81:91:82:30:fe:ce:18:d2:8c:b5:79:7e:b2:e1:46:7b:3f:0a:
0d:12:4d:c4:dd:11:cc:a6:77:a4:95:ca:4f:67:39:a6:47:22:
8d:bc:6e:e0:20:14:e5:c3:75:3d:1d:d1:c1:5e:f9:96:66:1e:
43:07:08:22:bf:80:8c:5f:ce:94:e0:b2:6b:44:c7:c3:c1:f9:
ba:21:f6:09:e0:39:56:ea:2d:b2:b6:28:87:8f:ac:62:57:92:
e5:0b:c1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:54 2025 by rpki-client