Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
File: CDMy0vYHhPErstIQrsgKtBu_EVk.mft (raw, json)
Hash identifier: 9NzfHuKJMziZdK91ZcEJKA2P3QKoVlSR9Xzzfjnm5iw=
Subject key identifier: 5C:EA:B0:C1:98:87:1D:47:D3:C2:32:94:85:14:D6:62:47:CA:C4:94
Authority key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Certificate issuer: /CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Certificate serial: 0194BC3BC7E3C7F37C6E0F9FF18D55CD092F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
Manifest number: 0C1E
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: CDMy0vYHhPErstIQrsgKtBu_EVk.crl (hash: LJDZQFs8LMFpPwqjEJdjOec3Vs0DwunACmXC0QbjGC4=)
2: q4mxRw2cAHFj9M7Ih5d-g_-dD-s.roa (hash: 8Y6K+beCDjCkbb41/Xu0GZqKC19CcyaH+HxETt6eMGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:e3:c7:f3:7c:6e:0f:9f:f1:8d:55:cd:09:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=5ceab0c198871d47d3c232948514d66247cac494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:cf:24:66:a9:e7:2a:2d:c2:86:2d:20:c5:
67:7d:e1:c1:8c:c1:fe:9b:d8:42:38:25:8c:6d:9f:
8f:f5:98:20:44:31:91:f0:ea:41:5a:73:68:59:3a:
06:61:ab:ce:3c:41:65:7f:16:ae:6c:9e:a5:e9:74:
c9:29:ef:bd:fe:4b:c5:eb:81:6d:15:25:d7:74:64:
cb:30:e7:38:26:b1:ee:c8:9a:40:bc:da:3a:ad:e7:
a6:e4:09:ad:d4:13:5c:0b:89:56:ea:ec:0f:a0:09:
fd:4f:26:fb:92:e5:52:17:47:ea:bb:5a:1f:95:7c:
74:a6:c5:1a:49:47:ca:a6:d5:d0:f5:79:4b:dc:9b:
b7:a3:d8:33:e8:e0:40:22:c5:4a:0d:bc:10:6e:45:
23:15:c1:45:5d:1c:5b:46:c0:36:35:13:91:d1:97:
44:06:5c:dd:c0:ad:f4:58:61:48:63:12:49:fa:c8:
b2:39:d2:0b:d4:c4:8f:9f:16:0b:1f:87:6d:eb:44:
c7:e4:aa:45:bd:61:55:6d:36:eb:df:7f:96:2a:34:
d0:bb:a8:b6:bb:d8:66:51:76:6d:b2:a0:6f:ef:36:
92:8f:0e:aa:75:93:d1:2b:5a:29:7b:b4:62:cf:e7:
15:eb:e8:76:49:98:94:a3:01:1c:56:94:2f:4b:9d:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EA:B0:C1:98:87:1D:47:D3:C2:32:94:85:14:D6:62:47:CA:C4:94
X509v3 Authority Key Identifier:
keyid:08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:db:9e:4e:47:93:a9:4e:fb:81:63:8f:64:a7:81:9e:01:28:
c7:a1:4e:09:b8:c1:2b:ae:96:16:ee:4d:39:8c:45:70:09:55:
1c:b0:f5:07:33:9d:6e:e7:94:1c:8d:2a:df:4a:4f:d1:4f:b1:
36:de:bb:4b:5b:15:45:79:d7:ef:e7:38:d4:e2:2f:20:ac:4a:
18:91:75:ee:b8:95:0a:04:ba:f4:0e:72:ed:3e:c1:d6:1c:92:
eb:07:6d:f6:fd:48:72:6b:31:68:91:36:d0:3c:23:01:d4:4a:
1a:b7:2d:02:3a:da:b3:01:ec:1c:e1:95:9c:56:71:35:d3:17:
13:ee:52:ec:8e:2f:6b:b8:bb:df:8e:5a:13:9e:52:37:16:7d:
59:09:df:b9:fa:55:aa:f7:f9:31:85:05:8d:be:b8:c7:63:0e:
d0:d6:a0:de:c0:12:98:bb:3c:39:5c:ed:26:29:46:4a:9d:14:
d2:b7:da:60:46:9e:d8:56:f4:bd:7d:d3:10:65:44:5c:d5:ba:
c9:3f:17:cb:ae:b4:82:d4:b5:d4:a3:07:09:e0:5e:8a:8e:1f:
73:cb:2b:83:ab:e7:c9:17:0b:92:7e:55:36:c7:b2:c7:9b:23:
cd:6d:9c:21:f0:e8:77:de:c7:39:84:e9:67:d1:23:d2:97:d8:
3e:4c:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:15 2025 by rpki-client