Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json)
Hash identifier: jquNO4sly3tt1vAFm2DO+qD5Hb73dxe9AU9IIb5K4YA=
Subject key identifier: F3:2C:99:38:45:DD:FE:E6:DE:11:35:D5:B8:2B:34:AD:74:00:F1:95
Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Certificate serial: 0194BC729D6BE34CF258D20D483D5B8B00A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: lezqDN9OMI8DkbibPCWg/i9JOuV7qBHXNX3eZ2yUH1w=)
2: mWwPnP2S4g9JhxWYKKryZjEy1Ao.roa (hash: HyXUe+PYjqIKyOZOZZRdFXR1ckNBvzFOngXjiDgbrBY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9d:6b:e3:4c:f2:58:d2:0d:48:3d:5b:8b:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=f32c993845ddfee6de1135d5b82b34ad7400f195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:a5:e0:dc:55:5d:9f:55:7d:ce:eb:19:56:
3d:a0:a8:79:0e:e1:08:48:7f:a7:24:bd:10:0c:86:
1f:f0:06:af:b6:cc:0b:c0:f6:64:7d:ef:89:c1:65:
9c:26:ea:84:28:71:eb:8a:fe:c7:0f:5a:7c:a6:ff:
4e:06:8d:a8:4c:d6:83:c9:66:2a:e9:46:db:fc:3b:
01:54:25:df:27:0e:23:0f:8f:2f:14:92:2a:13:da:
55:97:fa:73:90:a3:e0:e0:1e:1b:56:8e:de:9c:dd:
9b:98:84:4c:e1:9f:e9:a3:cd:29:59:d1:d4:ab:44:
f2:75:7e:7f:74:95:77:ab:15:25:c3:18:55:f8:9c:
28:e7:a5:64:35:99:74:a6:a4:90:dc:88:2d:82:c7:
e1:7c:96:f9:69:b2:0b:63:a5:c1:a0:7b:17:e3:71:
99:2e:66:cc:0e:44:7a:1e:81:89:82:57:c6:c9:f1:
5c:bf:5e:84:c7:86:01:54:9d:29:11:28:46:d4:59:
fc:c0:47:06:85:a3:12:d2:46:8a:b3:15:8d:fd:05:
c2:ad:1a:2c:74:ef:fe:e9:3b:2f:74:a5:85:49:6d:
83:2e:fd:9f:77:b8:2e:2e:a4:13:1a:2d:8f:7f:50:
22:6d:8a:57:2b:6a:0e:bd:3c:1a:b2:dc:76:c5:9a:
5a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:99:38:45:DD:FE:E6:DE:11:35:D5:B8:2B:34:AD:74:00:F1:95
X509v3 Authority Key Identifier:
keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0f:75:3e:a4:fc:40:16:63:7d:f7:37:28:cb:3e:d1:ca:89:
66:12:7d:58:5f:a5:a2:49:87:81:53:74:5d:5e:2d:cb:46:a4:
38:71:bd:a9:b3:76:32:a5:a2:ad:05:72:4e:14:4d:59:4d:fc:
b8:7c:c0:c8:1c:8c:66:66:03:0f:3c:1d:f0:ee:cd:0b:dc:2b:
b6:d7:40:ee:d7:94:8e:dd:fd:07:bc:1f:d3:eb:8c:af:bb:1d:
81:96:f2:f6:76:26:75:3d:82:35:f8:73:e9:f4:77:42:d5:ee:
af:09:d6:a0:21:31:af:d6:2c:af:a9:b3:d0:d9:2f:31:93:9f:
80:ea:8d:37:3e:fa:2c:14:d9:92:aa:b4:45:c0:ef:36:0a:dc:
cf:3f:f8:47:78:74:ba:83:ca:23:43:10:b2:c8:20:00:39:8c:
78:92:d2:08:2e:7d:02:bb:65:7d:dd:8e:44:d9:00:04:4f:7f:
c7:88:2e:eb:16:13:6d:37:7c:42:f2:7d:e1:47:0b:93:4b:82:
6a:a8:91:d0:10:89:9c:10:be:ee:44:b7:37:d9:a8:e0:22:75:
64:c5:a5:60:19:1f:90:6d:bb:38:96:76:c1:81:95:7a:be:f9:
c1:e5:99:00:c9:61:9c:28:c4:b8:5d:68:24:75:bf:c2:e2:b9:
df:42:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:21 2025 by rpki-client