Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: T5IVtFcSa4o4qzfdRh+Yzt4AcZHu4vRZxsY4EoJMkIg=
Subject key identifier: 51:E9:73:DA:9A:39:D3:1D:2D:3D:87:46:FB:70:AF:DB:6F:E0:29:C0
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0194BCA96E57E93549C989EE58D899048280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:07 +0000
Manifest this update: Fri 31 Jan 2025 14:00:07 +0000
Manifest next update: Sat 01 Feb 2025 14:00:07 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: MO++P+YnwP5Gl9atWuQQ11rfdytJQKbS1UNhDhJvRK8=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6e:57:e9:35:49:c9:89:ee:58:d8:99:04:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jan 31 14:00:07 2025 GMT
Not After : Feb 1 14:00:07 2025 GMT
Subject: CN=51e973da9a39d31d2d3d8746fb70afdb6fe029c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:5a:e1:99:dd:c1:1b:0f:31:d8:af:9e:64:
ca:f7:97:1f:90:a7:7b:d5:df:7f:6c:a6:1c:5d:b9:
b4:29:ef:76:37:a2:8c:78:b5:d3:de:3a:57:51:fc:
b9:05:33:d8:bb:05:b8:e9:89:0d:d0:ab:fe:02:ad:
30:f8:db:f5:e3:a3:6c:f1:65:38:b9:7c:3d:33:2a:
13:d8:7c:6b:96:22:69:c9:3b:7a:ee:39:e5:0b:f0:
af:ee:ad:ab:bc:51:79:22:23:57:0b:a7:a5:bd:b6:
c6:d1:23:a8:cf:82:72:29:e1:12:e6:ba:00:34:23:
b5:d0:72:41:34:d1:e7:e8:ef:3c:94:d2:00:99:5d:
59:4a:1e:98:65:8f:3c:47:98:4f:70:85:1d:cb:97:
48:80:b4:c7:96:2d:9a:27:ab:1a:72:10:09:53:fe:
6a:5f:76:ef:62:07:46:93:97:83:60:d8:8a:4d:5b:
b3:fc:cc:2b:b8:6f:b0:64:aa:97:2e:77:e3:21:3d:
bc:a7:25:66:2e:e5:ec:b2:01:54:9d:dd:70:9a:45:
c4:13:cb:e6:4e:ec:7f:9e:e7:89:ec:b9:66:30:a7:
c0:5f:c0:e4:2f:72:e4:9e:d8:53:bc:14:05:24:b6:
73:9c:e7:16:3e:aa:fb:81:8e:c5:e0:df:19:16:95:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E9:73:DA:9A:39:D3:1D:2D:3D:87:46:FB:70:AF:DB:6F:E0:29:C0
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9d:7f:c0:90:cd:3e:b8:7d:ae:1b:65:4e:ad:8d:7c:94:de:
d0:07:a5:68:ca:1c:52:3d:20:43:7c:29:0c:17:2c:5f:c8:b2:
d7:d3:44:5b:04:d7:e1:82:4d:d7:0e:2c:6e:3e:2e:40:6e:7e:
09:b4:94:86:b0:95:59:13:9c:8d:bd:89:70:0a:9b:eb:ea:6a:
7d:5a:3b:0c:30:d4:01:b7:fe:df:72:48:a2:bc:bf:e4:41:33:
10:88:9e:6d:ff:bd:2d:18:aa:64:be:05:bf:65:6d:d4:ac:b2:
41:0b:43:4c:3d:3f:b8:32:e8:85:53:07:a5:bf:ee:08:79:6a:
83:72:dc:cc:59:4e:ce:ac:1e:4e:a4:91:c6:f8:bb:e5:cb:ff:
20:47:25:99:35:3c:5d:83:1c:fe:da:4d:e5:86:0a:20:66:33:
70:43:38:cc:ef:94:86:1c:45:00:e1:c9:17:db:94:17:76:77:
9b:b3:7e:32:4c:01:18:14:32:cc:94:52:43:7f:0f:de:3d:ef:
46:b4:dd:25:31:0e:d8:b0:36:3b:be:24:76:0b:5a:bf:35:18:
d5:0f:6e:a1:94:3f:ea:2c:6c:b1:26:d8:9d:fd:5f:a6:93:8d:
0a:a5:64:85:d6:88:f8:6b:5a:4b:d4:4d:42:2e:74:15:47:c6:
ed:05:30:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client