Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: ElCfTC8wNbvM0OpXqbE59bvSCl+s+tOv2MKM42XfSdo=
Subject key identifier: 03:1B:DC:DD:DA:7C:B5:80:8A:8F:CE:6E:D3:0C:AA:F6:8A:36:7A:C0
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0194BCAA254DD35B0C718551F11BD3D8D065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 42O1iZoBGp1jOHPAyMXxvPvoDeU.roa (hash: ILpdVDwxdnANxNv1MRsqh9OtUODOvMq2wiyDKUplG4U=)
2: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: Rdnki3UEE6A1W/vM2t7Vq3tf8sW4V8ZckFz9WqrS+t0=)
3: wvbzAT4QZZepRUfQ4T7Iln3TOeA.roa (hash: CXPLC9jAIGl4uvFvse6iFeGoldePjaK1avRNgTMwS+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:25:4d:d3:5b:0c:71:85:51:f1:1b:d3:d8:d0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=031bdcddda7cb5808a8fce6ed30caaf68a367ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:c9:5d:83:87:de:b7:77:ef:df:bd:97:6d:
9e:16:6b:cc:34:2f:b7:51:1e:5a:aa:56:cb:8b:d1:
06:1e:85:ff:0e:25:24:99:f1:9e:c6:df:34:e8:c7:
72:41:54:72:9e:c9:09:71:7b:d8:26:cc:a5:9c:22:
7c:9c:c3:7e:02:8b:16:3a:0f:45:42:f9:53:0c:ef:
b9:48:8a:09:d0:56:bd:05:65:ec:2e:e6:2d:35:48:
4d:11:c4:76:ce:3f:0c:8b:12:97:92:60:d0:26:9b:
63:27:1e:37:d9:2c:15:3a:ea:c4:eb:ee:f4:9f:ad:
b2:f1:cf:a5:d5:6a:31:7f:d8:a2:03:e8:30:1f:52:
94:79:88:d8:fe:4b:3c:26:ce:ef:d4:52:8d:be:a8:
b2:80:15:6d:f1:25:84:5d:2c:c9:21:a9:f3:55:08:
53:2d:a4:f1:3f:cd:15:4f:f3:e7:8f:92:57:b0:05:
53:84:88:61:04:ac:1c:66:43:56:0c:d0:e1:56:59:
ca:17:52:56:45:79:af:b6:b5:9a:36:e3:36:63:44:
55:d1:50:05:e5:3b:50:be:3f:a3:58:ec:b2:58:6b:
ac:c4:d5:6e:9c:0c:a4:cb:48:4d:e8:e9:e1:6b:4e:
ea:a2:98:87:e4:d7:60:d6:2d:42:06:df:e5:11:c4:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:DC:DD:DA:7C:B5:80:8A:8F:CE:6E:D3:0C:AA:F6:8A:36:7A:C0
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7b:c8:d3:73:44:fc:8f:bb:29:4e:4f:57:0f:4c:db:9c:e9:
96:19:5b:0c:8f:6c:6d:62:45:8f:cd:ee:5c:83:34:da:45:1f:
46:98:6d:72:9c:0d:91:0e:7c:96:27:39:e0:45:eb:7c:71:18:
4d:cd:55:03:6c:7a:3b:c2:be:6b:32:af:25:22:31:5b:83:47:
e3:22:f3:f9:45:d0:b8:80:cf:0c:74:79:a3:a7:cf:28:6e:4f:
e5:7a:e8:f6:f7:9a:73:d4:52:18:45:86:6c:8a:9e:12:60:dc:
10:b2:51:6f:54:61:c7:bf:87:bf:27:89:3b:00:fc:b3:7e:95:
53:52:8a:9e:f0:6e:ae:d7:6c:9f:3f:1a:bd:5e:d2:98:4a:49:
18:50:c0:65:d6:5d:c9:8a:df:10:93:71:88:ed:9c:1a:c7:bd:
ce:d5:c9:9d:e5:9d:75:59:58:7b:fa:6c:ef:5d:f1:ba:ef:b2:
13:44:e4:a8:8a:b5:bb:ce:71:e4:b7:f8:6e:15:c3:03:36:06:
40:2a:46:23:1c:2c:b8:0f:64:a0:6a:0c:77:b0:02:b3:83:e4:
d1:f6:e5:07:91:99:14:db:26:e9:b4:c7:ec:ee:31:d7:2a:71:
d4:68:80:98:9a:79:04:3e:a6:30:3e:82:0d:58:b6:56:6a:eb:
ca:9a:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:38 2025 by rpki-client