Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
File: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft (raw, json)
Hash identifier: dYgY6qMsIVxyCZ3UhDd82O6mP82XfyBJ+YKn6rdHHYY=
Subject key identifier: 13:EC:3C:45:2E:CE:2F:BD:A6:97:4A:F6:61:F5:F0:E0:35:6B:CF:33
Authority key identifier: 72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
Certificate issuer: /CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Certificate serial: 0194BD178F7C4D3E6E4B8BE591C07E2A48F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl (hash: BUIqWE5L+3LAcZXL0QBdQM9ZcIJl2Mn6ffw7CvFQY7w=)
2: wfmRA1o816NK2nebior9nQRqs6I.roa (hash: WsRrqYQ4pFa/JlBicKV1hWW2cLlAeaKvafPxPghqGUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:7c:4d:3e:6e:4b:8b:e5:91:c0:7e:2a:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729fa13095d3e7f09fd8f61ac5084c3bc5194a0e
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=13ec3c452ece2fbda6974af661f5f0e0356bcf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ef:94:c6:9d:99:42:0b:9e:65:4a:7c:39:ad:
25:92:8d:e7:3d:9a:ce:37:6c:3b:4f:b9:04:3b:34:
ec:c5:75:fb:8d:d8:9e:a9:dd:ae:c1:c6:85:9d:7f:
ed:d2:a0:ff:18:d6:17:41:fa:87:3c:76:c2:38:ce:
ac:32:3b:0c:63:4f:fe:75:53:f4:f4:1b:3e:b0:b3:
57:97:4e:e0:72:b4:7c:75:bf:9b:9d:94:eb:a8:1b:
8b:98:f6:0d:6d:3d:a7:83:60:ea:a0:46:4e:02:70:
33:b4:db:9e:9d:fb:3c:a2:0d:18:1f:3b:57:c6:b0:
c4:3b:25:2f:fe:b0:ea:9f:83:6c:2d:13:94:61:c5:
d2:ca:ff:9b:80:99:f3:48:ac:57:5c:af:bf:f1:c9:
e9:c6:da:d3:bb:08:47:0f:aa:84:dc:49:b1:e7:e8:
82:c5:c7:3b:0f:17:05:46:d5:e0:2a:0d:04:21:95:
8a:0d:b1:ac:8a:66:0a:77:ff:3a:bb:2a:6b:42:75:
4d:6c:1f:85:aa:58:f6:b2:29:96:c5:e2:58:e0:48:
95:b5:a7:fe:3c:38:f1:77:52:ea:c1:f9:86:0e:03:
eb:c9:6a:4e:aa:9d:4b:86:a8:2e:68:a1:d8:c8:74:
bb:aa:89:8d:bb:48:55:bb:ee:d8:63:d5:3e:93:00:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:3C:45:2E:CE:2F:BD:A6:97:4A:F6:61:F5:F0:E0:35:6B:CF:33
X509v3 Authority Key Identifier:
keyid:72:9F:A1:30:95:D3:E7:F0:9F:D8:F6:1A:C5:08:4C:3B:C5:19:4A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/5d5593-77fb-44a5-a60c-a7b5f95358bf/1/cp-hMJXT5_Cf2PYaxQhMO8UZSg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f7:32:0e:76:6e:34:50:43:f5:cf:0b:84:e4:46:77:98:d5:
67:7e:ed:2b:1a:26:cf:9d:cb:2c:0f:16:53:cb:f5:d7:68:32:
8e:cb:d4:7c:42:a0:cf:14:4b:36:49:bf:c2:7a:8d:f8:4b:92:
b1:42:a5:98:c6:4e:d7:07:01:01:3f:5a:a2:a6:45:fd:89:bf:
2f:05:3b:08:6c:55:8a:08:5d:3a:c3:70:ab:9b:98:17:6a:a8:
f1:3c:2f:9a:62:ed:cb:7a:be:b0:11:51:1c:35:bc:24:e4:a8:
b2:59:fa:ff:46:17:97:78:8c:9e:5a:75:24:71:60:cc:6e:54:
84:43:4d:6b:a4:cb:86:2e:79:3d:18:96:59:fa:b6:f4:c3:29:
15:05:8a:4f:a2:2e:ee:13:3c:01:8f:07:3a:84:06:6b:a0:a4:
fb:0d:20:bc:28:e8:c5:cf:7c:39:d2:25:8b:c0:5e:4a:3e:a4:
97:ac:1f:02:f2:f7:49:63:c9:8e:72:be:cb:8e:31:ce:8a:56:
73:52:6c:66:45:eb:58:de:ce:d2:35:47:46:50:52:6a:cd:ea:
64:9d:cd:68:c8:a5:6a:1d:28:79:f6:f6:72:5b:aa:17:2e:bf:
00:09:ef:95:0e:5d:3f:36:1b:31:b5:2f:04:bc:b0:f9:5e:31:
b6:7a:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client