Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json)
Hash identifier: UlyLCCbucw7fyZ61mNZ/di8phgXqpD6hpk0gX6TO6jM=
Subject key identifier: 52:15:5E:48:5D:5E:F7:02:59:44:DC:F0:52:65:05:D8:94:A4:E4:F1
Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Certificate serial: 0194BC72962B020FE55590AE240A799C2D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
Manifest number: 1172
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: RPutjTNxkntqx5PUd3w9054J1vQEvdqxKDdIs98jpFk=)
2: bPhuRniXhi6v8miKtxoaZnEn00A.roa (hash: xSundNXAHWzuOj0WfGOEO/7NeCRZEJh+UG6019ph0YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:2b:02:0f:e5:55:90:ae:24:0a:79:9c:2d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=52155e485d5ef7025944dcf0526505d894a4e4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:88:0e:47:c2:4a:ce:be:70:8f:3f:41:15:
05:8c:df:98:7a:11:61:0f:16:5f:2d:1a:7c:0e:47:
8a:4c:bd:7e:d8:6b:a0:4a:02:56:b6:a0:d2:89:59:
ee:f4:5e:9a:0c:27:82:56:5d:40:4b:e8:bb:c1:42:
f6:01:e8:0a:28:2d:b9:14:52:0a:84:d3:9f:64:10:
35:fd:be:1f:ce:9c:bd:2c:ac:5e:a4:f1:55:ef:e0:
e8:e1:1b:1c:2d:9b:dd:53:09:eb:f7:d0:f7:6f:db:
c5:08:c0:b0:6d:94:e9:4b:4f:74:2a:a8:d1:ff:d7:
ca:09:af:74:8c:6f:2b:65:ed:4c:f7:6e:23:fa:ee:
b3:26:c7:84:a6:89:c3:47:68:bd:b4:d0:b8:15:42:
02:32:49:ab:56:16:07:23:b6:04:2a:ee:4c:ea:1c:
64:26:07:78:61:fd:ec:29:84:03:b5:71:a1:a1:20:
e1:de:26:77:92:4e:8d:0b:e8:8d:9f:b8:44:1e:53:
8f:0b:47:22:71:c3:5a:b9:e2:f2:d3:de:f2:0d:1c:
79:51:c2:de:13:5f:fe:ea:25:f3:bd:0e:37:05:0b:
13:fb:af:af:55:90:33:9e:5b:6a:a1:59:78:7c:f7:
0f:dc:a4:52:3b:79:c3:f2:db:02:81:43:c3:03:de:
da:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:15:5E:48:5D:5E:F7:02:59:44:DC:F0:52:65:05:D8:94:A4:E4:F1
X509v3 Authority Key Identifier:
keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8d:58:56:7f:79:80:29:17:90:d9:ef:e3:25:b7:9d:79:fd:
05:5d:31:0e:94:fe:2e:bc:4a:5a:54:e2:81:52:b0:ee:68:56:
99:24:49:13:71:c4:f7:7f:d9:5b:45:60:1c:45:4f:26:93:c7:
18:6a:f0:1c:c0:99:ba:73:f0:c4:49:35:f9:ba:a5:f3:da:15:
38:10:03:f9:24:da:d2:9e:69:d4:62:45:cc:4a:4e:78:1e:c0:
ae:d8:44:3e:39:0f:0d:ad:f3:ca:be:1d:61:03:51:db:09:be:
9a:bd:a6:74:75:e2:d0:b4:7e:c5:4c:77:98:91:fd:4e:56:df:
60:66:7d:02:ce:1c:23:73:08:d4:df:46:c1:f4:bf:98:a7:f5:
a2:ca:fd:66:c8:77:77:d4:24:5f:90:1a:48:31:bb:9d:89:dd:
94:91:2b:c8:14:79:4c:03:f0:e7:07:63:11:18:95:25:31:25:
9e:fe:06:80:bc:92:b1:9d:7d:d4:3e:68:18:a7:9b:66:eb:57:
76:bd:b9:c8:30:ef:de:a8:3f:3b:bd:37:99:f2:76:f8:5f:9e:
f4:24:10:3c:33:85:25:13:49:69:e6:f2:b5:68:d1:dc:91:85:
5f:1d:0e:e4:9b:6f:14:db:e3:0f:46:ec:f9:3c:d8:ab:55:ba:
8f:06:42:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:48 2025 by rpki-client