Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
File: cpIiZWfact2GiDyt1fPeb_1bNXM.mft (raw, json)
Hash identifier: 5MpIqtPA4o0nOIYdbj3WBiygc1ZcI7ts1RoO+jbF3ek=
Subject key identifier: D0:E4:CA:9D:64:4E:49:66:35:C2:E8:96:A5:0E:26:0C:F6:82:31:41
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 0194BC04FF7C041A5730B4A8B9372FBEE4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: A2a55CFuU3rmZKWMjbnP0QRTKbw.roa (hash: h7ObFO2cHNspjyZ0BOSzsO0dobQTCK4BjzPiMYTX+dk=)
2: cpIiZWfact2GiDyt1fPeb_1bNXM.crl (hash: R7ic2jRoZhJtCGwyZSlRAx+Wz7oYL2qccAP9v/9lOCA=)
3: hOIlW-rpHRc2nOKpMGO_mfzaetg.roa (hash: VUIEi5LXdhfGKiMndwB/BQwcKviQdKt6bC3rAVXouZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ff:7c:04:1a:57:30:b4:a8:b9:37:2f:be:e4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=d0e4ca9d644e496635c2e896a50e260cf6823141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:ea:10:3c:9d:e9:93:b2:ac:f5:10:6a:74:
17:1d:22:d0:59:62:8c:dd:09:4b:8c:06:17:89:bf:
60:f7:a1:3b:13:bb:9d:e6:84:e6:b1:7f:8d:b6:a3:
34:7a:8f:86:7b:91:44:2e:43:9f:2b:b1:36:2e:9a:
e6:e2:17:23:a5:fc:82:a1:8d:52:31:ca:4e:d2:04:
a4:99:50:07:2b:82:d0:0e:9c:cf:84:e2:cf:a5:39:
80:ad:00:b5:69:fe:dc:e5:48:45:57:f0:53:0e:7d:
7e:ab:5a:41:c0:f5:97:66:e2:21:0a:0b:41:13:60:
41:19:5a:37:ff:1e:e9:52:7a:10:7e:d0:80:76:f5:
d8:63:69:38:27:0f:50:6c:51:e8:8a:e6:91:c1:4c:
da:60:63:e2:4b:ef:e0:da:d7:4a:2f:4d:07:dd:db:
c6:cd:57:5b:aa:c9:70:3b:7c:e3:5f:e9:7c:9c:c3:
90:56:a6:9c:9f:5c:32:b1:75:81:c5:c3:2a:a9:67:
cd:36:fc:93:99:79:6e:7c:ac:5a:9c:2c:2d:f0:10:
d7:87:f3:c8:72:8d:73:f7:5b:8e:e8:a7:5e:98:84:
9a:70:01:6a:73:40:f6:39:7a:a1:75:6e:27:2e:92:
5d:0a:ed:6a:fc:e2:29:f3:e6:d6:19:71:f6:5b:e4:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E4:CA:9D:64:4E:49:66:35:C2:E8:96:A5:0E:26:0C:F6:82:31:41
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b7:9e:63:24:8c:61:dd:a6:69:3a:1b:b6:7e:f8:48:d0:3b:
57:72:bc:88:e5:93:4e:c8:e3:d7:9e:9b:b7:6a:a9:26:29:02:
15:37:df:d1:67:61:48:b9:a8:a5:44:e9:98:5a:02:38:72:96:
3e:31:3f:3d:69:8e:bb:bc:b6:4f:4e:cf:57:1f:b1:2e:f5:f2:
9e:bd:be:78:80:9c:15:1f:2b:0e:7d:7b:66:ae:f1:6b:f8:26:
51:1b:8d:c7:42:3f:5d:8f:e4:dc:ee:17:89:67:5a:2f:9b:d1:
b8:bb:49:f1:56:f4:26:27:19:9b:5c:bc:37:0b:f0:3d:25:3b:
21:27:a0:af:52:dd:47:d8:24:d5:ed:bd:b4:14:83:47:2b:25:
0a:8c:a5:b4:be:86:e0:33:cf:da:f3:85:05:82:67:d9:05:e2:
c0:8a:c5:6f:40:15:d7:6d:cb:b7:57:d7:dd:74:f4:02:e3:3a:
52:95:ce:b4:39:0b:92:87:8d:eb:42:58:8c:a6:00:90:c6:f3:
91:ab:b5:24:60:b2:5b:21:39:51:f7:e4:7d:7e:41:c7:ba:01:
63:7e:7f:08:b3:0c:fe:37:bc:71:e7:3f:d6:d1:38:6a:c0:20:
f7:4c:f0:b8:d5:70:78:74:ad:2d:5c:ce:61:9d:c5:15:7d:fa:
5f:8e:06:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:50 2025 by rpki-client