Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: cDdjJT/Tjvokd8jVvPflcWLDiky4XEwGEQhYsrdw99E=
Subject key identifier: A9:FE:27:92:BC:D2:1E:A6:9B:AE:66:21:76:33:AD:A4:1A:B8:D8:94
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 0194BD4E9C368D1DA584035A654938894E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: hx19RTek0Ly6jmuG5foRl4ediPEOBjeaC5zcfyQ/88U=)
2: vAZb7s6D6Fuq3D4AHtKSkcv7tbk.roa (hash: dNxWOWstiC1jdikcIMTYHaBFr6iCMFTRh+rrcRXQbJw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9c:36:8d:1d:a5:84:03:5a:65:49:38:89:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=a9fe2792bcd21ea69bae66217633ada41ab8d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:10:8e:d0:e4:ba:56:86:a2:9c:6a:c4:d8:
f3:d5:33:3c:ab:c5:e2:53:47:42:03:d5:d7:f5:c1:
df:94:e5:a1:07:64:fc:bd:0a:79:48:90:f2:12:77:
65:6b:0a:03:e0:db:e8:94:6e:87:9b:ad:8e:4f:cf:
c7:d1:8b:b5:6a:fe:53:ef:e1:93:8f:93:8a:73:d2:
c5:07:9e:9b:59:2c:41:58:1f:fe:dc:fe:b5:8e:68:
18:66:82:8e:89:c2:6d:4a:37:8b:b9:c5:a4:6a:57:
23:1c:8a:3e:1f:a2:26:c2:f0:77:ff:5c:c9:d2:41:
c1:e6:5b:aa:c1:d1:cf:aa:d9:52:b4:98:60:a9:7b:
f9:25:b3:65:76:a8:6c:81:7d:92:9f:bd:46:a6:4a:
c6:14:ad:eb:2f:91:b9:cd:4f:d7:f6:09:2f:9a:89:
ad:32:0b:c7:1f:f7:4a:0e:2b:ab:2c:c9:7e:e7:8d:
8a:ca:03:b8:23:1c:f6:06:5c:89:a5:fc:cb:67:a9:
60:10:49:6a:60:49:f9:ed:47:85:40:73:d9:f1:c3:
6d:14:9d:d7:3f:4b:d9:50:19:b3:d2:ea:fe:f7:9e:
43:4b:b6:f8:54:c3:fe:7d:88:c4:cd:e0:be:0c:f6:
18:1e:4b:54:cf:ae:43:10:97:d2:32:0c:f5:a5:76:
7f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FE:27:92:BC:D2:1E:A6:9B:AE:66:21:76:33:AD:A4:1A:B8:D8:94
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:53:85:cd:ed:c3:b3:1e:94:fa:fc:e9:8b:32:24:9e:42:3c:
61:44:1a:27:b6:dd:25:e2:14:b8:ad:ee:16:77:43:a2:84:85:
38:d8:44:32:7a:87:7b:3d:6a:aa:72:a5:21:d5:96:9e:68:a6:
b0:aa:9c:c6:41:f6:3a:32:23:fa:aa:40:3f:3a:c6:76:2b:af:
83:71:e6:36:76:f6:b1:ad:35:58:2a:26:8a:24:86:b1:13:bc:
59:18:13:51:1b:7f:71:c9:07:f7:c8:fc:58:64:6d:2b:d5:c4:
b4:0c:cd:7d:68:6d:71:e5:d0:ea:85:92:65:5d:48:43:cb:24:
65:ba:b4:04:3c:d6:a2:de:e7:bd:41:1b:ab:d6:51:33:bc:bd:
6d:87:18:b9:b7:57:2d:16:ac:68:d2:84:90:82:01:d7:3c:81:
0a:e4:1c:6b:c7:83:3c:4e:3f:6c:8f:9d:79:3f:70:c8:99:7f:
c2:e8:42:6c:99:f5:ee:4b:d5:a2:59:eb:ac:c5:93:99:fb:7d:
67:66:45:ac:77:20:f3:5f:79:51:cc:62:70:6a:85:62:1d:b4:
4d:6a:28:ff:25:9b:86:4a:54:8b:0d:ea:16:01:b6:1f:c9:05:
f3:ef:46:ee:c8:bc:b9:10:9f:b5:ad:76:ea:8c:d2:52:6e:cd:
a3:84:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:16 2025 by rpki-client