Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: wLJbgJFMHU0BrvXtth3lGas3GFdNcXfMT9jpzi51CAI=
Subject key identifier: B7:97:1D:D9:BB:E7:CA:C4:F3:94:48:3D:4C:E5:22:8E:99:1D:BF:AA
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 0194BD854125F87C7177468EA27919B91FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0DE4
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: jP2O1w1aDwOe0O0/jb+X0qHaG1FjBNROx4yUJkA90aw=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:41:25:f8:7c:71:77:46:8e:a2:79:19:b9:1f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=b7971dd9bbe7cac4f394483d4ce5228e991dbfaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:a2:15:6c:81:80:74:b6:6b:07:4f:16:84:
63:07:76:a2:12:a6:75:e7:0c:55:a2:e1:d8:5c:d5:
ed:86:fc:0f:f8:31:86:87:2f:aa:9a:12:68:85:51:
55:79:b2:ab:35:59:22:9e:bf:00:93:76:be:e0:20:
56:fd:28:79:84:9b:79:f6:95:f4:7a:af:04:c7:8e:
1e:29:23:93:92:a3:3d:13:8d:44:ff:a2:f4:a2:26:
97:35:e9:7c:98:eb:b3:f6:d6:14:b9:07:ae:36:f7:
af:f6:53:70:a5:1c:4e:f7:ce:9b:72:7a:6c:0a:f9:
d4:65:66:3d:25:4b:4d:68:a0:69:3f:e6:b5:e4:6d:
08:2a:ef:ce:8b:3e:c7:46:53:8e:cb:81:b1:c5:64:
ae:28:a4:76:af:93:8c:1f:07:f1:75:24:8b:8c:ac:
47:ec:a0:0a:22:b0:1c:f5:fb:16:22:06:c9:a7:41:
dd:69:74:fb:56:79:c7:ba:ac:9c:10:b3:2b:af:19:
a8:ce:43:ab:3f:31:8b:f9:29:82:e3:46:84:d8:75:
ed:fc:c0:54:83:13:5f:32:e5:14:b1:01:de:49:2d:
a5:ac:70:fd:5d:78:d9:b2:c4:fe:2d:43:73:2d:c3:
d4:38:d4:bf:b2:4c:7c:c0:90:0b:64:af:0b:ab:ce:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:1D:D9:BB:E7:CA:C4:F3:94:48:3D:4C:E5:22:8E:99:1D:BF:AA
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:de:9c:57:6d:42:ef:66:12:72:ff:e7:c3:0e:29:d8:15:
9f:57:64:1d:ca:98:51:c4:5b:4e:24:3e:b4:46:00:cc:25:38:
3e:58:94:4d:7e:bc:f4:57:48:4e:48:7c:b7:f7:69:b3:4d:84:
1c:62:e9:be:6b:78:76:f1:af:20:c8:b8:dc:88:d2:64:7b:a8:
0c:05:74:26:78:4d:8c:88:4d:1b:7c:e5:5b:a5:ef:f0:6a:39:
6f:7b:e9:0f:2d:bb:76:cd:ba:32:19:4b:9e:5f:78:08:ce:79:
40:39:0c:d3:ba:7c:fe:90:c1:51:41:0b:9e:dd:b5:80:12:23:
c7:c0:f6:58:3a:3a:48:ee:dc:b9:18:25:b6:ab:fe:1c:ac:4a:
7d:9f:e3:2f:2a:35:73:ad:cf:d5:ea:52:e3:b9:10:1c:1b:b2:
05:da:9b:e0:81:8b:f9:96:ce:d5:e6:84:f9:0e:08:a5:ba:29:
43:b0:24:6d:54:eb:a4:70:c8:35:b6:6a:ac:90:b5:08:5c:8b:
61:c8:f7:a1:4c:bc:60:5d:2c:e1:1c:70:9f:58:0f:f4:05:21:
32:47:3c:d3:66:74:ee:a4:2e:7d:39:8b:23:2a:0e:1c:73:52:
b6:61:7f:9b:86:48:c9:f2:6e:7f:04:43:02:5a:d9:d2:0e:20:
5d:55:71:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:34 2025 by rpki-client