Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft (raw, json)
Hash identifier: XtivVdb8xn9rDj3s3qU67TyzlnrZNMcaiDLaBciQlpQ=
Subject key identifier: 67:1D:33:4E:E0:7D:9F:74:C6:A5:27:E3:96:A5:15:26:80:4C:48:3D
Authority key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Certificate issuer: /CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Certificate serial: 0194BC3C470A571EFA244BF52D4AF941456F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
Manifest number: 098D
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 5vM6DWCDq0zAAIqdgdL6q-vEnCg.roa (hash: ZbcmhEUHiVvPP/q8OPaFsh6YhizZSJj69o+H0dDocGY=)
2: CNx16XPAZx-QHVANkd2qjppUy-M.roa (hash: tg4m4urbGkAxgg6JgxNQ4p4V5XeLVLobwIMo7jTTB2U=)
3: CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl (hash: RK5r+oWow+gG02hsodD7N57DXS+Jprj8NxuPrt7icGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:0a:57:1e:fa:24:4b:f5:2d:4a:f9:41:45:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=671d334ee07d9f74c6a527e396a51526804c483d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:f3:8b:7b:b6:42:79:4b:1a:f2:14:4b:25:
86:1b:a5:34:81:cf:42:95:70:38:09:14:f6:ec:7c:
f8:26:2a:7f:0c:ff:30:fe:10:02:38:d3:8a:3c:62:
db:43:4f:05:38:43:c6:a6:87:50:f8:61:43:1a:2c:
2f:92:bc:e2:11:ea:5e:ea:a2:2d:19:5c:4a:d9:05:
80:16:f5:13:f9:e3:b6:e1:95:7f:1b:a9:e9:4f:16:
04:39:a2:64:98:28:44:6b:8a:05:42:ba:5c:7d:7f:
14:6e:dc:d8:f3:cd:cd:b0:92:70:72:7c:46:30:32:
0c:17:b5:5e:d8:d1:fa:4a:f3:9c:95:93:ae:2a:a6:
93:f4:10:ab:85:eb:54:85:52:90:e0:68:b8:f8:fc:
28:eb:fa:57:fb:77:2c:9f:18:48:84:76:cf:b3:1c:
90:d3:02:24:7b:27:dc:52:70:e3:39:5c:3e:6b:73:
aa:ee:e7:eb:15:a3:67:d6:c8:d5:70:39:f8:47:39:
9c:c3:ea:12:ad:bd:f3:cc:69:92:b8:f8:4b:96:1a:
29:63:a7:6c:8e:78:59:82:4e:6b:08:92:09:87:ca:
e6:0a:78:44:c5:17:d3:b8:0e:0c:b4:0d:77:47:6d:
b1:99:8a:cf:44:3c:fa:84:94:77:d9:ac:8e:7b:2d:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:33:4E:E0:7D:9F:74:C6:A5:27:E3:96:A5:15:26:80:4C:48:3D
X509v3 Authority Key Identifier:
keyid:09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:1b:45:e5:cd:f8:44:ea:30:f2:45:bc:47:08:32:99:21:
10:a2:ac:41:bc:a2:18:b1:20:32:0a:b3:0a:bd:3b:9e:8b:46:
09:86:e9:7b:c2:9a:45:62:aa:e5:78:93:51:38:34:a5:92:50:
17:33:b5:ca:87:4e:90:05:cc:eb:a8:32:57:a0:3a:db:1c:af:
4d:6d:0e:50:a3:46:b8:47:4f:03:fe:e3:48:22:65:60:17:f2:
30:56:01:05:da:7f:c2:b2:02:fd:a9:63:15:f5:e1:21:5b:c1:
8d:f1:75:84:67:be:62:27:a7:9e:53:07:2e:ea:e7:d8:32:62:
d6:6b:9c:ad:13:fb:35:d1:02:9b:b0:d1:59:93:49:51:32:67:
be:9c:4f:b9:2f:c6:16:bb:b2:c0:cd:5d:02:32:ca:c3:b1:c0:
2c:94:36:23:39:3b:89:06:de:bb:e5:59:a7:e2:2e:bf:30:5a:
5c:d5:d1:fc:7b:ec:5d:9b:a2:6c:a6:26:61:13:f7:0d:d5:57:
25:1e:e5:f4:ff:50:36:e9:9e:9d:d4:58:1d:04:90:04:2d:24:
95:fb:21:7a:75:f1:af:42:d0:0d:8e:ea:48:e6:68:e4:a2:9c:
6f:f7:63:bf:bf:4b:36:97:cf:2e:6e:6c:d0:5b:d4:bc:ae:97:
af:3f:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:31 2025 by rpki-client