Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.mft (raw, json)
Hash identifier: 0cSyuCcuHdxadwSAMEBhagkwO+fukg6YZP29TQhJle0=
Subject key identifier: 29:3A:8B:42:13:96:A6:FF:BF:EB:EF:BC:7A:B2:86:39:F7:A8:06:B9
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 0194BCA9E176FF1CA48D43FFB57F1D9CE4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
Manifest number: 13C5
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 4R0hMhGbrDC4YVyzf1jrL8oQuI4.roa (hash: TLs9gVQTwy70mjzgj5kCuIcV2uNBgbxlOI07lSwnnow=)
2: CxhwyW7wlyOBH7iSUO6m66ljwN8.crl (hash: KgmUJu4pEIYvQsGs08Q55xd+DNkr68vHrrcZcifnuAg=)
3: EQykPnpfewr1b15l-hwk9xTdlMw.roa (hash: YasKTltnNGPe2utrui5JMNFOct7fWRZpI6aF37DIbJ0=)
4: T_9WpBkHAHTCm2DhJxpnJct13AU.roa (hash: A7+idMA8AFyEFyFHRn3pgVSpJdABBz9NCqjgr/lK9WM=)
5: na0eTKlrRjXQp-041HQbfnQ_h5w.roa (hash: RrgHszkb5qGMG/z4dleXM0fBqUA1swkMInUx61RPN24=)
6: noPcixLpgkxwJ1ZxZM_fxPf4Csw.roa (hash: BthsLkB+ZFXPf15eE+Y7pQxlaiPPySEZY4ss84bAVsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:76:ff:1c:a4:8d:43:ff:b5:7f:1d:9c:e4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=293a8b421396a6ffbfebefbc7ab28639f7a806b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:a3:e7:d2:77:b3:3f:14:d6:ba:ff:0b:d5:
d6:91:99:0b:86:26:03:a1:85:60:e2:52:bf:e1:a4:
72:ae:f4:00:ed:42:5f:09:25:68:74:b6:d2:18:e2:
5d:ce:8e:af:4f:49:54:6b:94:a5:2b:02:38:7d:82:
1a:1a:b2:d7:05:d0:81:ce:07:a2:f7:ff:65:3e:70:
62:50:b3:c6:71:85:7f:91:6e:4d:c6:41:10:da:69:
f5:05:8c:f1:62:a3:ea:fe:5e:b0:dd:e8:1f:e6:ab:
1e:fe:03:a1:74:e4:57:d2:53:ed:9b:4b:0b:13:20:
0c:7b:28:f5:c8:d9:67:64:44:8a:3e:0a:58:32:3d:
21:03:c6:b1:fc:5d:38:75:bb:84:4d:3f:33:37:de:
de:4a:f0:28:f2:3c:cb:de:1c:d5:0b:01:3f:31:b2:
3c:0d:b7:93:6a:c9:35:16:be:c6:d7:99:e7:10:fb:
55:d2:5a:ac:40:2c:5b:42:47:8f:f5:2c:ba:87:60:
c5:4a:38:75:3b:ba:13:0a:cc:d1:9b:56:f7:08:81:
05:71:49:b4:d2:c2:b6:db:ca:34:82:67:88:e9:22:
b8:fb:00:60:3c:44:d0:7d:91:24:7d:78:21:02:64:
90:70:43:b3:10:17:fb:5f:9e:ba:03:81:c8:25:bb:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3A:8B:42:13:96:A6:FF:BF:EB:EF:BC:7A:B2:86:39:F7:A8:06:B9
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bf:59:10:68:d4:7a:79:eb:cf:9f:08:b9:1a:9f:6d:7e:5a:
c0:5b:88:49:4c:5d:58:d0:10:6f:d0:3c:f7:2b:f4:eb:7d:00:
55:47:21:8d:65:5a:19:e7:25:60:13:83:41:63:3c:83:c3:49:
92:71:1f:28:fd:47:ba:96:34:4b:20:13:75:8e:ba:77:23:86:
3d:29:f2:09:f6:fc:bd:1c:65:cc:f9:19:f3:9c:46:29:e1:81:
49:79:e1:bb:6f:8f:78:ab:e4:bf:9e:df:f6:7b:5e:d7:90:08:
ba:15:d3:e5:8e:10:24:40:f0:c8:ca:30:0b:09:c1:54:8f:7f:
68:f9:be:b6:58:9e:98:64:f0:0f:6b:2e:a9:2c:6c:25:26:13:
29:a9:3a:2b:3b:d0:54:2b:ee:89:df:25:a9:da:5e:d2:ee:a2:
1a:01:27:52:37:82:84:cd:c3:50:87:c6:f3:31:21:f5:d2:8b:
ac:dc:db:9a:e4:29:d5:77:4f:75:00:86:9f:ba:df:0f:b6:bf:
5d:73:1b:e8:1a:c9:d0:b9:69:67:a0:8f:47:ba:73:dc:e2:2a:
3b:43:25:f3:4a:ef:28:d7:c9:77:18:a2:a2:81:28:7d:44:fb:
06:22:1e:ba:e4:fb:d1:d9:c0:0c:7d:13:e1:1e:cf:3a:ae:17:
f2:31:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:39 2025 by rpki-client