Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
File: csoaXP9S6-LyK2adzCyQJ86guBw.mft (raw, json)
Hash identifier: qMf4n4fmAKv5orKKUYAHH4AYssNx79TSexHYTQSgU40=
Subject key identifier: 33:E6:54:16:B2:85:45:C2:2C:14:2A:AF:37:8C:C7:E5:3F:63:E8:D9
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 0194BD4EAA768818C2DEFD1F7BA0103EA36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
Manifest number: 1392
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: I_-FRfZa9GeQgym8xYKEVr-rfgA.roa (hash: AmRbI2XP8GOvp3frMOHSnlH48LSP6GLhPNS9PY26J8Y=)
2: Uex3x3CWB9WPAXdRNKBIFJzJsn0.roa (hash: 2qFFx/ZZv0i+OiRQdPCciM9T0PW45kAKmFf1AT14lvA=)
3: csoaXP9S6-LyK2adzCyQJ86guBw.crl (hash: ym8lQvnrd4wuAZjO1Iw3OJRvHwlW35tmIgQN28H4FF8=)
4: rH_6QZmVa4_yNlZ_JVuN0_Vk3Xs.roa (hash: Z/fYNuFHcmnLVDSA1WLLI385MQXDkqW9Tw7vDgNOnAk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:aa:76:88:18:c2:de:fd:1f:7b:a0:10:3e:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=33e65416b28545c22c142aaf378cc7e53f63e8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:f5:90:2a:25:dc:55:0d:f9:50:da:ba:e7:
bf:08:14:28:62:1f:b8:2b:5f:c5:b3:41:fe:b6:c4:
bf:f5:20:d7:78:3d:d3:cf:53:1f:40:26:c2:9f:2c:
59:40:be:53:13:26:6b:69:a2:a1:93:f5:51:57:42:
dc:fb:6b:13:6c:0d:13:41:a2:18:52:f4:14:d7:b9:
69:01:94:f7:0b:d5:14:01:8f:73:75:50:b7:3b:4e:
6f:50:78:68:46:1c:1b:b8:69:c0:49:12:8c:8e:62:
43:fb:ea:d4:23:c4:82:d5:d8:47:17:2c:7e:e3:b2:
f4:0c:ee:29:c9:e4:7c:ab:48:43:6e:94:e4:62:8c:
83:a1:eb:83:19:ca:28:89:76:19:12:76:c4:d7:c4:
51:b1:71:cd:e7:71:4c:b9:5b:de:49:27:5b:57:59:
3e:41:fe:08:c9:5f:91:6f:0f:1f:cc:fe:e4:81:b4:
2c:a0:d3:10:e9:71:13:9d:29:09:33:7f:b8:e5:bc:
15:dd:8f:3c:c0:69:c1:2e:50:54:14:47:7f:c5:62:
ee:c0:01:bb:d8:cb:e2:0c:c3:85:0e:b4:95:af:4f:
7f:11:d9:bc:20:f3:3d:46:00:bf:a8:7d:9e:a4:8d:
24:ca:a6:30:a6:33:6e:f0:00:74:49:1f:6f:0c:22:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E6:54:16:B2:85:45:C2:2C:14:2A:AF:37:8C:C7:E5:3F:63:E8:D9
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:44:52:dd:0e:25:92:45:1c:d7:29:64:a1:5f:30:90:9b:38:
11:9f:ca:3e:11:59:47:f5:7b:64:d8:b2:7c:30:8d:e5:91:29:
57:df:c5:45:0b:84:91:d1:a6:75:93:7c:87:b9:7d:34:09:72:
2e:b3:0a:4b:1f:93:61:ac:a8:25:55:a1:04:ca:d3:d1:a0:b4:
3b:c8:c7:86:19:ea:74:6b:7e:e4:5c:ac:a9:92:54:8d:4d:f5:
83:fe:35:01:30:3b:a6:46:91:93:29:fc:85:f0:f5:77:08:00:
08:51:42:45:d6:d0:bc:ad:f4:74:55:ec:d4:23:10:d7:0a:e4:
ff:73:9d:e0:4e:3d:e6:07:49:6f:fe:34:71:24:10:93:25:8c:
13:5a:7d:6b:74:22:a2:99:ed:b8:ad:b6:4e:e6:4a:de:ba:9d:
58:dc:ee:e0:88:55:b7:e3:4a:6c:c2:dd:6c:c2:02:00:a0:c8:
99:ee:03:30:f0:6d:98:c7:9e:9a:7b:4d:02:8f:c2:2e:93:18:
49:f9:6f:38:99:40:e7:81:95:b8:c8:65:3e:11:d8:3f:76:a9:
63:1f:bc:32:13:8d:4b:a0:46:81:16:d3:9c:a7:d3:41:75:35:
d1:00:e6:1a:6f:e6:f0:46:9a:12:4d:b8:6d:d5:85:a0:50:d1:
3a:e9:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:38 2025 by rpki-client