Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json)
Hash identifier: 3SwXKVub5qCm9P+Zk/ATHNLr3liCPUT1rDL2I4ZM+Io=
Subject key identifier: C9:91:92:BB:0F:6A:D8:F8:3D:9B:86:EF:77:B7:B0:38:1C:5B:49:69
Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Certificate serial: 0194BD1751BCA912CC8E372B99F881F48308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
Manifest number: 03EE
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: m9hNHLsUHszAnHd9cUswLKCLIgQyySHeBfUHlLVxqhA=)
2: pV4EoMyLhIl8Wki8fRcVALT_H0c.roa (hash: wJ9IYCdBLmtOZE5zQTUngRrQwmEhQGL4Uh7Y6dIL3Jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:51:bc:a9:12:cc:8e:37:2b:99:f8:81:f4:83:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=c99192bb0f6ad8f83d9b86ef77b7b0381c5b4969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:bd:8a:b7:1c:37:9c:cc:f7:a1:1b:f2:72:
f0:4e:c7:02:f6:9b:0e:81:34:71:83:69:c9:75:16:
e7:b6:9e:ae:3b:cd:77:1d:62:36:a3:e0:03:bd:b9:
62:ea:c2:d0:3c:fc:7c:fd:16:c4:d9:38:a3:68:2d:
f9:40:fa:51:f1:03:8d:07:ef:98:91:60:b7:1e:4e:
31:b1:8b:ef:3d:3d:aa:a1:c5:e2:73:64:95:6f:37:
3c:92:7d:92:de:4e:db:c8:e2:59:66:0a:3a:c1:26:
8c:e0:16:05:9a:dc:1c:58:4e:c1:a5:bb:ee:b4:ca:
3f:08:18:4a:e8:ca:10:25:79:40:f5:d8:db:9d:3a:
5f:e8:de:71:58:42:62:40:59:11:66:68:28:ac:c2:
b3:8f:f3:9e:20:c1:a2:6a:cc:56:5b:ee:5f:fa:f8:
5a:18:ea:01:9d:01:06:83:dd:75:0d:e9:72:97:67:
05:ef:2a:68:46:f2:af:f3:12:3b:8d:e4:cf:a4:88:
a8:99:bc:76:50:29:35:e0:29:26:48:4f:20:fc:ff:
ec:a4:e0:f5:38:11:55:0f:bd:ee:14:21:1f:d2:20:
15:88:f9:98:3c:82:ea:d7:bf:22:4d:46:f1:f4:7c:
ce:39:3a:15:7a:6d:d3:e8:8e:0f:b8:2b:54:94:9b:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:92:BB:0F:6A:D8:F8:3D:9B:86:EF:77:B7:B0:38:1C:5B:49:69
X509v3 Authority Key Identifier:
keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:51:10:09:9c:cf:e3:7d:3c:31:d3:95:2e:c0:88:30:38:e0:
87:84:b3:4a:41:5a:fe:5b:7d:ae:9c:66:cd:12:29:ad:93:4b:
3e:3c:1a:be:83:0b:9d:23:43:8a:7b:ae:54:26:43:ca:48:42:
3e:c4:7e:af:73:ae:5b:18:0a:9d:78:2f:46:61:1f:4d:a5:84:
f0:72:4d:10:d8:c4:fb:db:29:c6:f7:93:2e:f2:12:12:5f:78:
a3:2a:e8:d3:97:3f:c6:2f:0c:2f:c3:0b:6e:bb:26:a3:88:93:
e8:16:41:f9:73:4d:30:73:0e:d0:67:7c:1d:31:b6:0f:fa:41:
f2:f1:76:9f:1d:50:72:b7:b8:b9:01:95:14:c2:0c:8f:9e:24:
71:66:bc:45:9f:d5:5e:25:bf:ec:be:47:d8:6f:80:ec:c2:87:
f4:06:e2:9a:d1:11:2f:f5:0f:74:1a:65:a4:80:ef:41:1d:f5:
79:60:55:91:71:af:b2:1c:96:3e:73:77:c2:42:0f:d8:8a:85:
a5:33:5e:30:06:77:75:50:bf:ac:5d:f8:9c:8b:85:d4:3b:50:
de:d0:dd:da:3f:80:40:29:66:a6:7a:15:89:cf:93:bb:e6:a7:
c9:9b:75:92:62:0d:06:05:75:9f:3e:9a:81:9c:5a:91:7b:0e:
0c:dd:0e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:42 2025 by rpki-client