Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: IjD3QG4yFsB+EBw6ikXIhql1CBgGP5nTkF9Pwm+9MkM=
Subject key identifier: 3D:A5:29:F2:E9:D3:C5:F1:9F:51:53:2D:0F:42:40:C5:46:AF:F7:C7
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 0194BCA9EBC66246746EB522051E083D4C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 0F74
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: C4ktMElPH_Y9hantOtDslxS5_ps.roa (hash: taGnemnzByTODEvwUDuDFxekEx3bxhbaSwujT2jyj3I=)
2: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: ZAiIVyUt0HmdGP0J9Sxvu1zBu0Ftp1yBIKTi8Tk3R+M=)
3: HAJWh3LrDWFhQmNkaZPy7PkBF8Y.roa (hash: HYyoJkCf2U2oDUS8V6J5Rth/Sd3VOYz/xlBZk8PgMpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:eb:c6:62:46:74:6e:b5:22:05:1e:08:3d:4c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=3da529f2e9d3c5f19f51532d0f4240c546aff7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:da:e5:10:9b:a4:1c:28:aa:2e:ed:b0:4b:
70:3d:e0:43:24:52:38:c1:35:68:7c:34:17:1b:82:
bc:01:fd:fb:cb:33:2c:34:4c:ef:e5:a2:75:f5:f9:
58:20:15:6e:fe:15:98:3b:4f:bd:16:99:df:03:b2:
25:be:a2:98:0a:d1:2a:d2:0f:0f:11:14:b9:13:18:
f5:37:ee:d3:7a:70:0f:cb:96:b0:43:95:a3:72:90:
e8:fc:d1:87:1d:10:1a:e2:6f:8c:eb:91:7a:4f:d7:
cf:e8:92:10:f6:fc:19:14:67:3c:0d:cc:38:8e:57:
52:f6:f1:66:d3:13:bb:ee:60:77:e0:fc:c9:f5:62:
40:64:14:2f:da:c7:8d:6e:c2:5f:90:16:84:f3:23:
55:53:44:96:5a:28:25:5f:e2:96:95:a8:ea:4c:1e:
57:5a:1a:c2:51:b3:6d:10:9e:dc:3b:64:4b:87:4a:
eb:b3:18:8e:5e:56:b5:64:33:43:a2:ce:84:dc:a8:
e8:0f:16:e9:43:9c:bc:67:40:0e:8d:84:f8:12:cd:
1d:40:19:7b:54:01:0b:20:05:3d:32:59:35:47:0e:
11:9c:f1:e2:5b:25:7b:3f:48:75:e6:da:98:ab:02:
05:e5:23:50:06:62:4e:ce:75:86:f8:a7:60:69:a4:
d1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A5:29:F2:E9:D3:C5:F1:9F:51:53:2D:0F:42:40:C5:46:AF:F7:C7
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ca:bc:a1:19:fe:24:9e:e5:bc:80:44:72:05:ac:d2:02:a6:
95:3b:f2:98:80:6d:23:04:7b:47:d2:c6:5f:40:c3:44:47:82:
81:ba:86:58:e3:ee:70:07:29:c6:1b:03:e9:8c:f5:7c:26:f4:
ca:7c:95:dd:a3:70:00:a5:45:8a:4c:14:61:c4:28:77:c0:26:
bc:29:00:d7:a4:40:8b:6d:bc:ab:7c:f7:92:7e:66:ad:b2:7b:
a4:74:d7:dc:b0:98:5d:f2:01:df:e1:9a:75:59:b5:57:ca:fa:
7d:6f:b0:2e:d2:d7:2c:e9:f3:f2:b9:9b:f9:64:3f:d8:86:2f:
b3:50:a1:6f:ff:16:70:d8:20:8d:25:36:53:96:2d:fd:f6:5a:
58:4e:c6:a8:63:00:72:ff:95:83:48:97:3f:49:a3:14:06:8c:
ba:1f:5b:d4:f0:a4:a9:7b:fc:82:e4:de:72:c7:e2:45:c5:f6:
c3:99:af:65:92:fb:4c:42:e6:58:eb:f1:95:e3:da:4b:6b:b3:
ec:f4:2a:2f:10:11:28:8b:8a:9e:2e:e7:85:ec:c4:39:f6:38:
37:3e:a5:37:1b:12:8d:c0:75:0f:e4:47:02:57:e8:2b:7a:2d:
58:6a:b2:70:03:5b:46:ad:d4:03:c0:73:34:ed:dc:34:d8:9c:
60:5a:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:12 2025 by rpki-client