Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
File: CbARCuS4F5SlCIMfy17cyNX9Lxs.mft (raw, json)
Hash identifier: AZsjMpuxtgfm72qg8+5RjlLWzVz4pkM30z6UENTF1wI=
Subject key identifier: E3:19:82:49:7F:F5:C3:12:08:AD:E0:71:D6:C3:D8:7A:EB:45:92:78
Authority key identifier: 09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
Certificate issuer: /CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Certificate serial: 0194BD4E8A4F25C6965268BD041A53BC5CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: CbARCuS4F5SlCIMfy17cyNX9Lxs.crl (hash: oSLj5iHRX+65ymy/V3rx8/OvP4Yrqpg01KsB9XXrPZs=)
2: zyLhO2pA8EoiaCGmhzCvFXO3PZQ.roa (hash: zOCqTwjJOxNebqI94cAaf6aPymCO5NPJ+zXjaPobnkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:4f:25:c6:96:52:68:bd:04:1a:53:bc:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b0110ae4b81794a508831fcb5edcc8d5fd2f1b
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=e31982497ff5c31208ade071d6c3d87aeb459278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:e7:99:b6:df:ea:ed:bf:0c:31:6e:aa:69:
87:c2:a6:03:09:16:3e:1b:1c:ee:d5:47:30:10:86:
b4:af:9d:87:c5:2b:1c:e5:4e:3e:0a:65:6c:5b:e9:
88:71:fb:e0:a0:2c:48:c5:e5:76:23:b7:14:ae:07:
69:7c:be:71:ed:1f:4f:72:22:b2:a6:1d:6d:d9:15:
92:9d:8f:ab:a9:8d:09:54:2d:c6:c0:eb:ae:5c:1d:
99:4b:03:36:c4:73:85:fd:cc:74:1f:90:3f:f8:b3:
05:ec:be:68:6b:51:05:9c:6e:19:ea:ff:8b:4f:34:
fd:11:76:78:ca:d4:70:53:34:d0:90:8a:dd:f8:1e:
4a:32:7d:05:64:f0:26:8f:74:32:c8:b2:46:4a:2e:
c0:0a:1f:06:a5:d3:8c:ef:11:fe:e8:45:cf:1e:a5:
2a:7b:71:a8:6d:37:39:f4:b4:19:ee:5a:83:c7:56:
f1:94:ec:83:90:b6:46:98:95:7a:4a:6b:f4:fd:ff:
b5:6b:fa:d6:be:d3:98:a5:98:f5:73:d9:94:f4:2a:
93:61:6b:48:40:e9:4d:5a:04:0a:9e:16:81:9b:a9:
8f:9f:94:41:47:f6:eb:cb:16:cf:46:9d:e4:35:6e:
11:c9:99:68:aa:c6:6d:f2:2e:79:e2:bb:05:ee:11:
98:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:19:82:49:7F:F5:C3:12:08:AD:E0:71:D6:C3:D8:7A:EB:45:92:78
X509v3 Authority Key Identifier:
keyid:09:B0:11:0A:E4:B8:17:94:A5:08:83:1F:CB:5E:DC:C8:D5:FD:2F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbARCuS4F5SlCIMfy17cyNX9Lxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b3ce1b-f1f7-40cb-b3d0-6d20f5c197f6/1/CbARCuS4F5SlCIMfy17cyNX9Lxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f8:16:f9:c1:92:03:7a:5f:b5:95:aa:32:65:2a:8c:70:5c:
43:66:1d:28:29:a9:1a:a0:a6:6e:28:48:da:61:41:26:47:d1:
dc:59:9b:67:ec:fe:37:00:f2:f1:8d:fb:7c:fd:64:85:67:4d:
5a:09:7e:db:c8:90:23:6e:93:e0:ab:1e:77:77:b6:72:f5:7e:
c9:b2:5d:a2:c6:59:93:d1:74:63:c5:72:86:c1:64:b7:7e:29:
99:c9:61:c1:e6:ae:60:6f:3a:0f:0f:04:56:44:33:c8:a4:bc:
ad:84:a9:52:c5:9b:ec:8c:f9:08:38:7f:b6:15:89:88:e8:39:
c8:e4:65:34:c7:b9:15:d9:ed:dc:6e:f7:d7:28:38:15:59:98:
ca:09:5e:18:a7:81:3b:e0:fe:1b:e2:fa:b5:51:83:a3:04:eb:
1e:ab:41:1c:de:50:b0:7d:3a:ab:ff:84:88:8b:f9:7b:6e:49:
03:93:80:79:9c:6f:73:d4:ce:e3:a0:df:d5:9d:8c:33:f3:af:
92:98:ca:f7:d8:04:f9:63:f9:b6:1c:ce:0a:64:04:94:41:0c:
69:c4:c3:ea:62:49:f3:a3:e1:be:af:c4:5d:6d:b6:be:26:8d:
e8:8f:16:4a:c9:8d:27:5a:17:bd:28:00:9b:6a:4b:84:bc:0a:
3a:22:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:10 2025 by rpki-client