Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
File: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft (raw, json)
Hash identifier: gk/OOezd3+CzwV1jG9eWo7gALzHpIkot3vox2fyLNtE=
Subject key identifier: B2:78:27:88:D4:F0:60:CA:E6:60:48:F4:42:EC:BC:75:2F:36:B4:DA
Authority key identifier: 0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
Certificate issuer: /CN=0ac98267a5db26c65e41e646648f1016636e544e
Certificate serial: 0194BBCDF8DAA2859D509AA9CD6D1C8D76E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl (hash: Tap1v/C0A5hbZl6xda/QwYhMcRMvN9/pNAaVfD/mkx4=)
2: fDOjbGC7SXuBR1WvGEj8iP8Gi68.roa (hash: hI6uFXxiWou3BV634T4h3OJSDdh6qUObBj238tGqfTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f8:da:a2:85:9d:50:9a:a9:cd:6d:1c:8d:76:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac98267a5db26c65e41e646648f1016636e544e
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=b2782788d4f060cae66048f442ecbc752f36b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:eb:74:fc:8f:2d:f6:0e:cc:13:9b:1c:79:
99:81:f8:45:d1:e8:0f:d7:48:1d:52:64:04:7e:a7:
4b:40:e1:90:8b:14:e9:d6:6e:b3:31:a7:0f:ce:d1:
8f:13:87:e8:67:85:f3:4d:d1:c3:f3:17:81:ae:8e:
ef:68:6c:48:91:ea:50:d5:12:2e:e2:75:04:89:fb:
6f:f2:70:f7:c4:fe:1d:fa:d3:51:3c:c5:12:4b:81:
e7:e0:38:67:2b:70:f6:15:c5:07:e8:83:8a:5e:66:
66:d8:70:dc:d9:af:87:68:35:59:05:f0:6d:e1:1b:
37:1d:cf:ac:47:d6:e1:ce:4f:ae:2e:ab:4d:6b:c9:
44:0d:27:29:ab:57:50:dd:2f:a3:ca:18:70:3e:2e:
d1:a4:6b:7b:dd:7a:ba:75:70:3f:1c:47:f7:49:6c:
28:e8:76:2f:44:5e:af:7a:72:f5:b3:16:14:37:ec:
58:07:ef:01:28:49:ac:c2:d9:83:ba:48:2d:36:fc:
96:68:92:dd:c8:fd:93:7e:2b:ce:ca:0d:35:24:01:
24:f5:13:33:c1:e7:ed:34:09:db:96:78:51:65:ae:
cb:65:70:81:a2:23:ae:63:30:b6:95:c5:2a:38:58:
d4:a6:57:66:c2:39:42:ed:44:7f:11:10:7f:c3:28:
59:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:78:27:88:D4:F0:60:CA:E6:60:48:F4:42:EC:BC:75:2F:36:B4:DA
X509v3 Authority Key Identifier:
keyid:0A:C9:82:67:A5:DB:26:C6:5E:41:E6:46:64:8F:10:16:63:6E:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3799fa-9db9-4fc8-8fd6-2d9e99f4722c/1/CsmCZ6XbJsZeQeZGZI8QFmNuVE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:07:90:b8:15:9d:6c:6c:54:60:87:07:d6:0b:6e:ca:0b:
43:5d:02:e9:9c:26:da:9a:5a:e8:a5:dc:c2:3e:9b:c7:cd:2a:
ec:16:25:eb:39:9d:37:3e:41:cf:4f:2e:e1:a3:58:61:4d:d3:
2d:18:79:03:d1:aa:ec:b4:36:83:ef:1e:77:ec:2d:65:2f:1e:
91:de:fd:14:fb:4e:ad:89:08:70:0c:f9:59:7d:8e:7b:fa:39:
72:20:ca:c0:76:34:63:55:a6:26:ee:0f:b6:07:35:20:64:04:
c8:4d:64:bd:54:4f:7d:e5:5b:d3:5d:a1:1a:fd:99:99:00:91:
ed:80:d9:dd:e9:77:08:81:3c:e0:a8:47:58:25:6d:7b:fd:85:
24:d7:a5:37:bf:70:77:52:64:50:85:08:17:02:21:26:7c:f4:
f3:9c:93:81:84:eb:31:54:64:22:34:54:81:35:51:a9:f0:4d:
cd:77:97:1a:12:15:90:f1:4d:a4:eb:34:99:c4:35:a9:e9:64:
b1:23:7e:18:44:aa:1e:32:d2:ca:c6:bd:68:0f:e9:22:6b:9e:
7c:3d:df:ca:29:54:db:51:63:42:24:9b:4f:38:ec:ee:5d:5d:
12:b8:5a:7c:44:91:ad:fc:bd:05:6c:d6:cb:2d:98:dc:16:a4:
b2:2a:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:15 2025 by rpki-client