Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
File: _CgqeUs_erTNb-tsX9az0lavxGE.mft (raw, json)
Hash identifier: IcKWqd4h9Ck2NteiTPkYNx8hhs3TgTjd9FBfrEGIpzE=
Subject key identifier: 5E:10:8D:0A:DC:25:B6:C2:2A:ED:EC:97:A9:56:38:E6:9D:FA:88:9B
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 0194BD4E4B5D8BE902619E65BA4EA16BA40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: 1I8OPnDk25KUaKP9KE9gSOqXVLI.roa (hash: 0yrI/7HXUwwqDrYf/yalYH7CLKdk023DF4KCFCOKOCc=)
2: _CgqeUs_erTNb-tsX9az0lavxGE.crl (hash: o8VP8Sx0zk1vHAQ+sY9exDci3d0EMhFtr7ex509piUE=)
3: hwW7rl4dydXPDWLAf8zsSWJhDvg.roa (hash: OrollrL3LXZ0GIs6mD9MqV/PdNZ2gHOaykUK12v4KKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4b:5d:8b:e9:02:61:9e:65:ba:4e:a1:6b:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=5e108d0adc25b6c22aedec97a95638e69dfa889b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6e:93:e3:84:c5:d9:25:fd:6e:a2:5f:0c:97:
f6:89:eb:67:4d:55:5a:5c:99:a8:49:ef:d0:58:b6:
7f:8d:2e:8b:2d:23:d0:75:d3:d4:65:81:2b:38:dc:
79:46:8f:45:44:e5:14:9b:9d:a2:c0:96:04:78:0b:
91:d4:22:40:7a:e1:9c:a4:db:91:72:bd:98:bd:ec:
0c:8f:32:3e:a4:6c:5b:1d:0e:de:dd:a0:ce:4f:2a:
b6:b5:9f:0d:09:d4:e6:cc:82:50:b3:0c:2b:23:b7:
91:d7:3d:4d:37:34:e1:16:43:69:f8:ad:78:5a:c5:
af:c6:da:0d:fc:2e:5b:fd:f1:42:18:1c:9e:63:d9:
ea:7a:ae:4e:c1:3f:bf:e9:e2:b7:04:45:16:da:26:
68:20:c9:32:8c:3d:4b:6b:1d:3a:c8:d2:8d:e4:f4:
5b:85:e9:eb:40:02:dc:57:7c:53:56:6b:d8:95:b5:
55:c1:08:57:36:88:fb:df:3d:51:4e:b6:58:a7:c4:
48:d9:a8:3e:a0:8d:c7:54:6a:d2:e2:db:48:47:51:
0e:98:80:1a:3b:0f:9f:c7:9b:0d:9b:ef:7f:fb:b6:
f9:35:2f:7a:02:7b:77:64:ca:5b:10:6a:1a:3e:35:
34:34:fd:f6:da:2c:82:a4:82:49:5c:8f:c6:3d:57:
57:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:8D:0A:DC:25:B6:C2:2A:ED:EC:97:A9:56:38:E6:9D:FA:88:9B
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:47:19:9f:f5:2b:b2:6f:af:9d:bb:0b:ea:2f:7a:dc:28:
8d:ed:a3:72:b4:13:39:0e:17:0a:fb:b5:24:06:74:9b:93:25:
6c:e1:61:95:e1:3c:57:20:76:74:00:0d:d9:87:82:ca:56:01:
b8:0e:85:8e:07:94:a8:4f:8b:84:ae:d7:04:ee:e6:9b:22:36:
c1:14:da:9b:2a:be:b5:34:83:66:4f:fa:eb:1f:40:b6:36:91:
b2:86:82:61:2b:5d:62:2a:4f:00:c8:aa:f0:b5:19:d4:c9:79:
3a:34:fa:b7:6b:4f:eb:df:f3:28:c1:22:93:d3:4b:84:fb:fd:
33:b1:be:5f:d9:cd:32:24:81:13:9b:89:3f:aa:dc:b3:66:00:
75:9e:69:b8:48:f3:28:65:c8:c3:87:cd:66:00:5a:a0:e0:59:
0a:76:b6:8a:51:10:d6:5c:2f:60:9e:ff:64:fe:58:e0:6e:36:
fe:af:a8:a5:d7:dc:60:72:ff:9c:40:9b:50:2c:5e:2c:d2:e6:
88:8b:fb:fb:64:86:78:7e:99:2f:2e:9e:13:68:c7:d3:39:8e:
02:3b:52:f6:a1:a7:78:8c:2b:b4:8a:a3:f1:7b:7f:83:f4:f4:
cc:bf:f5:b5:df:7a:80:6a:a0:32:94:a2:da:95:d9:44:4d:a6:
1f:1a:11:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:39 2025 by rpki-client