Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json)
Hash identifier: y52vcgkug06ld3IzbajN1NiEbx2wGm/V1nN2qtCI7VQ=
Subject key identifier: 54:3C:A2:71:0E:21:64:21:C9:3B:EF:D6:FB:3E:6D:4A:34:B9:48:BA
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 0194BD4E86C00D0AD5615B667DD7F0596AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
Manifest number: 143C
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 3cfolha5-Y-keIgl3j-ukMRu5nQ.roa (hash: BQrU5Phy/xAtort4zjZjH8gAv4mg2agVu08FECKFlvU=)
2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: YICwTngMx1hSlLP0IRF5fGYTsVe6DcHp15Z7LN6Nabs=)
3: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=)
4: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=)
5: eeob2ee4lfFzOOMEsHvp08f6qTk.roa (hash: 0B+jfajS9x0UOg+XsVtGs3LZcCLSBc/7t9eJKjvj4DM=)
6: ftITG5X9Z2Cd2IsO4BPtjfRHZHY.roa (hash: LxwPLG9jtEbnCRf+96HNdNoDI0pRix6U46gnVGkNyLk=)
7: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=)
8: tbMl7oFKXcbypI4zCPH3_DIQ3z4.roa (hash: woX9zsT33PUAbbfirUNyi4tkHILBBLskTh8l2Lf5sLU=)
9: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:c0:0d:0a:d5:61:5b:66:7d:d7:f0:59:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=543ca2710e216421c93befd6fb3e6d4a34b948ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:05:94:7e:53:5c:f6:f0:82:0e:af:dc:a1:
5a:6a:1a:c0:9d:db:ed:a3:87:68:40:c8:c9:cf:19:
34:1b:79:6a:0f:6b:1b:a1:43:14:bc:3c:6a:09:03:
a8:6b:01:5f:f9:e3:f2:52:d2:ab:3d:1b:c6:f3:10:
bd:1b:3c:c9:8b:80:af:81:77:8b:04:05:6e:44:a1:
7c:67:ab:c1:54:f0:4d:b5:38:b9:63:68:7c:e9:99:
d8:8e:e4:07:35:2e:36:a7:52:0a:83:d8:ce:ba:db:
ac:f7:c9:f2:22:e4:fd:a9:62:cd:e4:ba:3d:f1:a6:
a6:b9:52:96:b6:a5:46:c0:b7:c0:e3:3e:50:e4:7d:
5e:07:15:97:85:07:d4:13:bb:f2:5d:4f:53:f5:fa:
a5:18:d6:5e:37:66:4f:3b:22:4d:4b:9e:b7:5c:e7:
a0:ca:7e:3c:dd:29:74:19:b3:77:9c:89:4b:65:4a:
13:e6:61:ac:05:d4:9e:dd:a6:fe:7f:05:bb:8d:ab:
90:37:fb:5a:ca:f3:fb:20:0a:03:57:85:05:42:c1:
99:5b:c4:61:bd:c9:35:e3:ca:63:11:b7:a9:38:16:
45:b1:32:fe:a5:fd:0e:bc:1e:1f:76:5d:42:5a:3a:
e9:a0:15:c0:67:3b:6b:47:16:f9:eb:a7:38:36:e8:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3C:A2:71:0E:21:64:21:C9:3B:EF:D6:FB:3E:6D:4A:34:B9:48:BA
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:78:2f:ca:55:28:a2:69:c0:ad:89:1e:ce:d9:b4:ca:36:1f:
4c:6a:b7:c5:af:e8:f7:55:f8:1b:b7:b9:47:fb:5d:bf:d7:fc:
af:4e:8d:47:64:51:c9:ed:e1:68:40:21:c3:22:9c:28:4c:79:
47:3d:89:6a:13:10:dd:43:1c:07:6d:0a:e6:1f:53:35:5c:c6:
9e:4d:ce:e1:b7:f7:eb:b5:04:5d:45:af:89:15:42:9d:d4:c8:
62:52:ff:b8:86:10:aa:52:2f:5b:76:10:98:b1:3f:a8:d2:b0:
79:d9:7b:02:f1:ba:04:bb:04:d3:4f:7f:7a:a6:1f:0f:7b:6d:
c3:2c:72:a8:e4:f8:6d:36:8c:84:2c:17:f5:69:f3:04:c5:4f:
46:60:2c:94:6b:45:3e:52:0d:bc:96:d1:d1:c2:4e:9b:42:60:
09:43:0f:ca:bb:d1:55:83:bb:4c:a2:a3:a8:05:09:5e:1a:31:
6e:77:8b:a3:11:39:c4:7b:68:7f:15:12:d6:08:2a:b1:b8:f4:
46:a7:e2:b5:7f:a7:a4:1f:aa:eb:9f:4f:db:85:ec:44:e1:60:
8e:37:7a:8b:9c:79:bf:50:88:ce:c5:b5:6a:24:3a:a1:8a:34:
80:44:89:9a:8c:1b:09:47:6b:71:8a:eb:6e:42:eb:70:29:16:
0a:c9:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client