Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: iBU1TYDeR+SyBfleVM67t1K5HpO3/6hHQ/ce9AyaCG4=
Subject key identifier: BF:CF:9A:97:43:95:49:9D:3D:A7:BC:23:1C:AA:CE:ED:6E:80:DB:3A
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 0194BC3C5D8103A6B519D2083619E13BDE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 11B7
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: k3xNxpv/XGJgz1kydhCpml9TPd4UOL8bPaV5U6MfbMg=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:81:03:a6:b5:19:d2:08:36:19:e1:3b:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=bfcf9a974395499d3da7bc231caaceed6e80db3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:4f:8a:4c:03:52:40:96:98:62:ff:19:f9:
61:a6:90:bd:73:ea:2a:84:62:54:c4:6f:9d:a3:13:
a0:eb:aa:88:8d:81:39:a0:b8:9e:ee:90:20:c2:b0:
91:5f:78:5a:0a:c9:d9:7a:5b:b3:82:de:4f:a7:46:
0f:ec:df:6b:ef:9c:13:3a:c8:75:df:a4:db:6b:08:
d1:ba:ab:ec:b3:bf:f4:3b:9d:3b:10:c0:25:e1:4f:
5e:5d:c0:20:a1:a9:7b:45:47:0f:17:20:f0:10:0b:
62:bc:c1:a6:78:99:0c:05:0d:ea:a9:3b:76:be:3f:
04:87:e2:17:04:d7:fd:5e:99:a6:f5:8b:4f:63:30:
56:6e:6a:cd:42:aa:4c:a0:ef:7e:fc:66:0f:07:79:
2d:19:52:8b:bd:0f:31:d4:5e:1c:68:f0:e9:f1:ac:
82:da:96:5a:62:b6:67:9c:21:16:b8:42:ac:c7:89:
2c:ac:11:9d:35:0c:2c:c0:14:72:70:5e:d5:db:a1:
74:e2:38:43:25:19:f3:72:b1:68:7a:2b:36:23:9e:
aa:ed:ee:24:99:12:05:08:f4:d9:e9:68:f6:85:60:
af:d5:e1:0f:c7:34:a2:75:1d:b4:16:d6:ff:69:9e:
e2:bf:1d:92:30:45:1b:63:a7:8c:d3:f9:50:72:4e:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CF:9A:97:43:95:49:9D:3D:A7:BC:23:1C:AA:CE:ED:6E:80:DB:3A
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:f9:17:ce:84:e4:a1:cf:ea:cc:d3:3d:87:f0:24:d7:82:
ae:96:65:27:e5:34:54:ce:ac:32:cd:27:5b:4b:b1:a4:be:0c:
ea:d8:a6:00:b9:89:6e:b9:0d:25:bb:de:f8:5f:a1:0f:83:4f:
57:4a:66:2d:35:52:b7:b7:b3:88:84:47:83:03:7e:6e:c2:1e:
d4:f0:32:8e:5d:ff:29:c4:6e:2b:5f:bc:2d:b7:93:b0:36:14:
55:06:cc:c1:ee:2b:3a:aa:21:42:e6:63:2d:5d:20:69:63:08:
da:79:5b:74:23:a0:61:fa:0e:a4:d2:63:58:12:55:fa:ba:f3:
7d:22:61:9c:3c:53:a2:6e:7b:7c:69:7c:25:8e:27:99:4d:2b:
b5:6e:16:1d:56:90:b3:f4:aa:c5:c9:1a:22:9d:18:d1:07:98:
2f:89:63:ad:95:06:9b:a7:01:e8:be:1e:da:76:1a:e7:39:a5:
26:4a:f6:dc:a6:51:b7:41:06:a7:ef:1c:83:50:59:ac:41:2c:
ea:62:56:9f:e3:a0:f7:26:28:db:9a:e4:3f:20:0d:38:91:b5:
50:0b:8b:ae:c4:72:d6:51:74:54:f8:da:a3:0c:12:85:aa:51:
40:fd:bd:4e:05:6f:f8:3a:ab:28:4c:9c:59:df:d6:b6:96:5f:
86:5e:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:00 2025 by rpki-client