Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json)
Hash identifier: C9weEmOqsHmNKMWHq0Dolwv3FZM0I0iz0pHpcLLc5rI=
Subject key identifier: BE:31:65:A5:79:C0:DF:5C:BE:3C:47:92:68:72:29:5B:4B:C0:25:31
Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Certificate serial: 0194BCA9AF90F3DC74DBF813C089BDAA7EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: yFww20OkUrjJdWd8P3DcPrfu8gu+TckEfpVsOecXqdM=)
2: xnuUEnVXaSzz9cF5USCrsyD97so.roa (hash: j10VBwI4MUaDD8l8nXJ3vdwJpNrClSEXJCQ84BCSTro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:af:90:f3:dc:74:db:f8:13:c0:89:bd:aa:7e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=be3165a579c0df5cbe3c47926872295b4bc02531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d2:fe:c0:a1:dd:82:a9:99:05:28:f9:43:99:
b2:41:9e:ad:06:0f:b0:a6:08:dc:fc:8e:06:6d:97:
f6:71:e8:0b:89:db:c2:00:16:8f:fd:a6:61:08:ae:
ec:91:03:7a:7a:97:2a:21:13:7b:6a:11:d7:09:ce:
88:ac:84:af:a7:c7:ba:b8:e1:77:61:8e:78:4c:c3:
ed:aa:a6:25:98:ef:ed:62:3b:67:a7:b7:9b:cf:4f:
31:3e:0b:89:f1:b1:89:00:70:9b:c4:eb:93:d0:3c:
5c:8f:1d:bc:d6:a3:b2:0b:5c:86:36:a7:44:74:af:
f4:77:62:8b:42:ab:07:24:13:4d:2e:3a:d4:db:89:
fe:b4:5f:3a:af:6e:7b:fd:fa:22:ee:5b:2b:66:76:
f1:ae:17:94:df:1b:8b:e5:f5:b0:57:e3:e2:f6:83:
36:77:b2:3e:2b:75:9d:56:b7:7b:b8:b1:18:33:c6:
c8:51:0c:70:1e:d8:24:ec:44:d4:b8:d2:20:dc:fd:
eb:1e:07:83:bd:0f:b0:33:04:c7:67:86:42:7c:a1:
33:7c:b6:66:94:c3:d1:f1:6a:97:e4:ac:74:00:a9:
13:9c:62:d2:ad:6d:e9:f9:c0:bd:33:26:7e:5d:8d:
13:73:2a:92:19:67:47:a3:1a:9d:fe:db:ac:5a:59:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:31:65:A5:79:C0:DF:5C:BE:3C:47:92:68:72:29:5B:4B:C0:25:31
X509v3 Authority Key Identifier:
keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5c:ac:e2:7e:8f:dc:e7:38:d6:bc:52:27:0d:8d:c6:bd:29:
22:ba:8a:bb:3d:41:33:03:c1:3b:64:e9:38:40:16:9d:93:7b:
49:94:23:ee:06:48:10:3c:e0:d3:d5:d3:08:95:56:cf:1f:b0:
97:aa:1d:40:e6:48:18:c4:e5:aa:65:ff:d1:82:33:71:66:68:
08:bd:2b:f4:a8:88:4b:9d:04:26:94:0b:52:fc:9a:de:9d:f6:
3c:df:3b:12:b1:43:78:a6:08:e6:04:96:e3:8d:d1:88:c8:1d:
84:fe:50:ed:bf:5f:c6:4e:12:3e:18:3a:70:14:3d:eb:4c:4f:
22:cb:cb:d2:d2:f3:46:08:46:6d:1a:bf:8b:5b:59:f5:d9:00:
ae:7a:54:0f:20:5d:c2:f7:16:6c:89:19:98:a5:63:0c:de:8a:
de:2b:f0:b2:d3:da:c4:1e:2b:b3:c4:ff:64:12:db:78:a5:98:
41:3b:9d:d6:f8:f6:3b:b2:a1:0b:69:2f:2f:13:80:b7:33:14:
57:f3:93:be:d6:15:06:e3:9f:93:e6:cf:51:f1:d8:23:23:27:
24:d6:5e:9e:e2:16:48:e2:35:6e:d4:3e:c2:a1:f5:b4:f6:cd:
1b:99:79:2f:ad:f1:8e:a7:c3:09:1e:75:c6:95:f0:8b:c3:03:
af:33:c5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:07 2025 by rpki-client