Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
File: cimwOc-KrxQdbm1hbnwWkInLyzI.mft (raw, json)
Hash identifier: afdbrfY2Zl0PIji94XlaQk7hMf5z1ukhMoeZQ7kdqsw=
Subject key identifier: A8:F3:26:F1:7E:E1:6C:50:6E:8C:00:66:62:FF:2A:21:A1:95:18:B4
Authority key identifier: 72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
Certificate issuer: /CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Certificate serial: 0194BC72D90FE5D1FFA1FBEF60834D8A768D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
Manifest number: 0B67
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: _11c4KnryngFBZ3LrSwCjXVWAnI.roa (hash: 4suX3JVW+dbra41XqoLSgaNnHC7+X6k6GS1R8JLgxL8=)
2: cimwOc-KrxQdbm1hbnwWkInLyzI.crl (hash: 8iDrBtYfHAYra+3+YnLEhOjGVzIVTXHGBZJpzGw317k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d9:0f:e5:d1:ff:a1:fb:ef:60:83:4d:8a:76:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7229b039cf8aaf141d6e6d616e7c169089cbcb32
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=a8f326f17ee16c506e8c006662ff2a21a19518b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:4d:d6:91:17:07:3f:66:9b:3e:f2:ec:ee:
84:a3:46:c3:9d:40:83:37:0d:2b:e6:4f:41:3e:37:
b1:13:7c:bf:03:e6:27:c6:cf:5f:fd:dc:5f:da:48:
10:77:ef:e2:a8:c0:41:11:44:18:f3:cd:60:1f:18:
69:67:c4:85:a0:45:99:c2:7d:ff:a4:0f:c0:64:3b:
16:e0:04:9e:4e:1a:28:18:ef:6e:1d:f9:9b:fa:62:
cf:f5:8e:70:f9:d8:94:c7:b5:03:59:c4:47:de:24:
35:bb:54:6d:59:65:10:dd:73:57:01:cb:13:d8:d7:
c1:d2:03:61:20:9e:b8:ec:bf:bf:26:1d:e0:5a:e0:
13:93:6c:f8:0d:05:23:13:11:ae:b5:b9:d8:f1:20:
e5:8b:6a:a0:22:c9:13:4c:e3:95:3f:18:4c:b6:2f:
23:a7:fa:07:98:f7:00:e9:96:23:09:81:f8:2a:16:
3a:28:be:eb:19:37:b0:46:5f:b0:ab:e2:43:2d:71:
2c:cb:44:ef:b9:9e:63:76:c9:90:60:f9:d2:60:59:
3c:bf:66:fe:ec:d6:04:79:3e:2a:6c:9a:41:9e:a4:
55:dd:18:5e:4e:c4:61:5a:20:fa:a5:ca:9b:ee:c4:
85:25:ac:dd:2d:66:e2:69:74:f5:a9:92:0c:89:45:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:26:F1:7E:E1:6C:50:6E:8C:00:66:62:FF:2A:21:A1:95:18:B4
X509v3 Authority Key Identifier:
keyid:72:29:B0:39:CF:8A:AF:14:1D:6E:6D:61:6E:7C:16:90:89:CB:CB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cimwOc-KrxQdbm1hbnwWkInLyzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c40875-061a-42df-9c6d-87a6845f66f9/1/cimwOc-KrxQdbm1hbnwWkInLyzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:80:0e:28:85:6e:be:c0:85:ef:8f:f2:7c:c3:3e:66:9d:49:
8a:ed:6d:4d:28:89:ce:e4:e8:90:23:3a:41:e2:46:2d:be:c0:
9e:dd:9f:da:c5:c3:a4:9b:f8:1e:c1:48:0d:e7:5b:b1:15:da:
9c:ff:27:eb:53:ae:3b:35:ad:0a:b8:ce:57:80:f7:4c:43:84:
9e:16:05:28:40:fb:bb:f2:c5:c8:7d:ac:6a:37:58:db:d8:43:
0b:e8:90:4c:94:30:a6:98:63:56:6b:7f:9b:22:ba:84:93:99:
ee:15:02:9c:73:63:4b:49:e3:c7:06:e1:49:55:e9:50:ec:a2:
04:65:2d:d0:b0:6d:a4:35:ec:52:52:4d:72:1e:f2:0a:f1:71:
51:69:66:f3:66:ea:ca:6b:07:c8:fc:0f:1d:cf:d7:e3:8f:98:
59:5d:a2:55:47:9d:e2:15:e0:a5:d4:82:26:75:81:93:66:cf:
f4:73:91:30:71:77:19:ae:01:d3:d3:ec:dd:f2:f1:25:a2:8e:
9d:ee:19:04:d2:ee:65:8c:e9:f4:10:37:79:fa:80:75:c7:1f:
b3:b6:d3:f0:fb:ed:9f:c1:d0:d1:e4:42:ad:42:54:bc:b2:8c:
b9:18:f2:7d:ab:d2:6f:a5:e3:e5:18:26:c4:54:f3:ff:f1:ba:
3d:1d:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:05 2025 by rpki-client