Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File: cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier: u9PgHnboHf7rQ1nZY0oBj9hQNN8N/BXpxq9tLpRKM7w=
Subject key identifier: DB:4D:1A:40:53:BE:C8:06:C0:B9:FA:4B:2C:9D:20:82:36:74:2E:B5
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer: /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial: 0194BD4E7F15122E4637A3F443FF47801D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number: 0272
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: YGqpN3K7qoku4d1ucurJlG9A28g.roa (hash: vV+QkChEXM7aBJKALX0tUZfW7qPTcVJsY+rKECbz5Kk=)
2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: gg+ScvdpseFjUrlZdX8JzUr19F8HRK/P1jisW4rqXPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7f:15:12:2e:46:37:a3:f4:43:ff:47:80:1d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=db4d1a4053bec806c0b9fa4b2c9d208236742eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:03:83:1f:a4:1b:52:50:8b:9e:92:dc:17:
61:bc:df:dd:48:4d:a0:9d:c2:f0:b5:d9:c8:8e:a3:
2c:b2:e3:a1:09:d2:dd:87:39:e5:3d:c7:4e:df:bf:
ee:63:bf:29:c1:c2:13:f5:d9:c8:88:52:19:c2:d1:
a4:e0:1d:41:0e:9d:08:b4:bd:b4:1f:64:8b:60:36:
c5:6f:fc:ac:73:64:7d:c5:62:ef:95:aa:c8:67:28:
ae:35:f7:ec:23:d4:c9:90:69:77:a0:66:a6:85:95:
96:3d:39:b2:34:c4:2c:ad:d2:1b:b0:8c:bd:a6:8c:
11:04:70:9e:36:9e:99:2f:b2:ba:78:5f:48:ef:ae:
fb:d4:6f:4e:84:c3:ff:0f:c3:65:d3:86:2f:c2:08:
64:7e:3d:56:99:ee:f4:10:82:66:c9:6f:d6:6a:5f:
48:25:61:31:e7:e2:5f:cf:ea:b0:f1:ac:37:b1:42:
d4:8a:21:c6:cf:ce:bd:57:a3:91:e8:6e:00:be:36:
16:2e:6f:eb:2d:bc:e0:d7:7a:58:9a:63:d1:0e:32:
61:6c:e5:9d:10:04:97:be:18:16:f0:3f:4c:97:4a:
d7:15:3a:99:5f:15:0f:81:69:2d:bf:1a:85:72:f4:
1c:25:c9:f3:30:81:7b:48:ff:ef:12:7f:c6:19:54:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4D:1A:40:53:BE:C8:06:C0:B9:FA:4B:2C:9D:20:82:36:74:2E:B5
X509v3 Authority Key Identifier:
keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3e:4b:23:a9:23:ee:3b:a6:67:04:88:96:c4:c4:47:7d:a7:
13:bb:25:c6:a3:53:0d:0a:76:30:79:13:36:2e:9e:de:de:e2:
1f:51:ed:23:08:db:93:9f:20:4c:de:69:1b:08:dd:3a:b6:bd:
21:bf:05:28:3a:bc:f7:03:05:30:41:3e:73:03:b1:26:ee:23:
8e:01:cc:16:93:c1:b0:c8:fe:56:96:6d:5d:f3:d9:e7:2e:f9:
89:81:16:33:6b:97:b3:60:8f:7c:aa:16:7c:91:4d:93:98:d5:
60:55:f4:b3:ad:9d:1a:2d:01:0e:15:f1:42:d3:a5:2d:c8:9a:
55:27:7d:9c:70:2b:79:ca:3e:4d:d4:cd:cd:02:40:ec:17:e3:
d0:5a:bb:e1:c1:03:bc:f3:e6:ba:3c:70:d2:ed:eb:19:e7:ce:
33:db:5e:1f:39:a1:c5:38:d9:08:49:fa:a8:0e:a8:f1:fa:62:
c3:70:f2:cd:e7:b1:50:90:49:5b:39:ee:a4:d9:83:86:7c:29:
c1:f9:9e:64:7a:6c:20:8e:26:80:9a:01:85:ec:22:83:1c:30:
43:0b:b6:1a:97:dd:68:3e:b7:ba:61:e9:a9:89:fb:d8:c6:2d:
71:7d:ba:d0:98:41:22:4d:12:c5:35:e0:d1:85:5d:a9:dd:4f:
8a:f2:89:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:34 2025 by rpki-client