Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
File: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft (raw, json)
Hash identifier: nsDObHXz5fhtoeM7oy2A4fjtpB5Ww7WvMz6OkoULbKw=
Subject key identifier: 95:38:FB:DF:BA:A3:14:24:27:23:EA:F0:1F:73:80:94:B7:FB:BD:77
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial: 0194BC3BFC21F3368500E4046D46112F51D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (hash: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=)
2: cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl (hash: 0Yy/Q6gE6m2pmZP+dn8qrbGsciW1QkYMZ2GeBmY5Pb0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:21:f3:36:85:00:e4:04:6d:46:11:2f:51:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=9538fbdfbaa314242723eaf01f738094b7fbbd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bb:cf:29:f3:1d:0e:8d:b5:18:14:c6:37:6f:
21:9f:cb:4f:6e:04:9e:2d:90:0b:43:c7:d2:02:1b:
e4:26:b8:4f:b6:7e:0f:d8:7f:59:78:91:25:08:12:
4c:5e:8d:3b:c3:df:51:41:67:8c:ee:88:06:6a:81:
04:b7:39:f5:33:70:55:66:b7:e8:5f:ee:e1:11:08:
d4:95:5b:9d:6c:84:e6:bb:8a:3e:14:5b:cd:0d:da:
63:a2:a8:61:96:6b:b2:ac:76:63:be:f7:3b:13:0a:
1e:69:67:b7:0a:bb:6b:02:63:7a:04:38:6f:c5:a9:
32:27:02:1c:31:12:28:06:2a:15:de:34:24:c9:a8:
e0:79:22:01:51:a8:48:6a:db:bc:db:ec:4b:c6:bc:
4b:28:82:e5:f3:f2:38:a3:28:88:7b:fe:a5:1b:32:
43:d2:b1:41:19:89:17:1d:d9:87:84:ef:16:c2:05:
5e:d9:c9:59:e7:8e:52:5b:50:f0:b5:2a:1d:b4:36:
c7:96:4c:7a:fc:70:8f:dd:89:1e:07:93:6e:60:78:
99:41:05:3d:1b:82:61:52:9f:2b:cb:9a:0f:62:fd:
c7:8f:9f:c3:f6:9a:1e:ad:50:49:83:b1:a6:c2:5f:
7f:b6:c6:ec:ed:8d:3a:11:80:d6:e9:da:5f:13:ce:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:38:FB:DF:BA:A3:14:24:27:23:EA:F0:1F:73:80:94:B7:FB:BD:77
X509v3 Authority Key Identifier:
keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ae:6e:dc:11:e5:c7:24:a2:ca:bf:1d:a1:b5:52:fd:da:15:
60:40:11:5d:cf:cb:80:2d:3b:78:4a:0c:15:6e:2f:2f:c7:47:
c9:38:98:95:eb:4d:f5:f7:59:54:a6:bc:dc:98:be:55:68:bf:
8b:4c:9c:3a:1c:48:81:7d:27:ac:67:75:55:90:9b:67:a7:f8:
c9:d0:94:5f:53:7c:b6:54:d9:42:75:ac:54:13:59:a4:65:dd:
d5:a3:3b:b9:e5:9b:b0:fb:29:a7:84:d4:c2:c2:af:f3:f1:44:
94:fd:4e:5d:88:4a:ce:79:57:d4:61:ca:f7:b6:fc:85:c6:07:
5f:51:62:18:cb:e1:9e:8d:36:4d:81:d6:08:0a:4c:be:34:23:
a2:a0:98:92:b0:53:2a:13:79:9a:a8:b3:6f:b4:ed:cf:ad:6b:
17:fa:41:3f:3a:b9:e6:f7:a8:e9:8a:af:71:39:3f:a7:c3:f2:
c6:dd:7a:58:25:52:b4:22:6f:37:58:2b:08:2d:84:dc:84:1e:
fa:12:83:89:b6:cf:c7:88:32:12:d8:a8:1e:6c:18:8a:3f:b8:
f6:98:bc:e3:57:1f:af:9a:64:2a:85:3e:ec:69:81:43:55:86:
b8:07:a1:61:32:48:20:a2:64:3a:af:4d:7c:ac:a3:d5:3f:d3:
86:1e:41:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:05 2025 by rpki-client