Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: cjE178JJmsnAv9zuesBYdWN9pSzrnW+21djBn0l8zYQ=
Subject key identifier: 6F:38:54:1C:E8:60:D1:9F:04:B5:A0:0A:60:1C:23:B4:B0:45:0B:29
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0194BCA9D7C0C23F5D96DB74736DEDC41193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: pZyOC4OZAvFpChWwOXyKhC5aUrAJGMVjLT2DpsqhUUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:c0:c2:3f:5d:96:db:74:73:6d:ed:c4:11:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=6f38541ce860d19f04b5a00a601c23b4b0450b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:2e:27:64:db:a6:ac:55:f5:23:fc:a7:be:
9d:62:a8:21:5c:32:6c:89:3f:0a:0b:51:8c:c4:d8:
b1:a7:b3:f0:2f:ba:76:4c:ab:15:8f:02:f6:25:6a:
05:6b:30:27:24:00:ac:eb:87:f5:a1:1f:4a:86:8f:
9f:ef:ba:f3:3b:12:39:f4:cd:a6:86:28:5b:47:52:
63:fb:c5:da:9a:4c:0e:28:66:d6:37:87:5b:10:78:
99:1d:cd:f4:f7:75:cd:05:28:ac:75:58:77:05:a4:
f7:92:3a:60:38:84:1a:b0:f3:c4:e1:63:ad:80:1b:
26:2c:ae:43:a5:90:0a:18:05:2e:e1:53:87:dc:6b:
1c:69:5d:dd:32:3b:f8:32:b0:8b:41:f8:f8:3a:b7:
1c:b8:5b:33:08:c6:2a:07:1f:4c:c8:e0:5a:91:11:
ed:14:2d:34:2b:a8:6c:9c:81:ee:49:f4:60:54:9d:
c3:52:bf:7e:aa:36:a1:41:3c:fe:26:96:d1:c1:3c:
70:60:fc:93:32:b9:c1:33:01:f6:91:f1:45:b6:92:
e1:8d:26:7e:e7:bf:3c:c4:6f:da:eb:bc:c1:97:44:
12:10:12:e7:1c:cd:6f:7c:ea:23:41:46:dd:98:06:
84:47:1a:76:e6:38:c8:28:5e:b6:94:a0:27:e7:ce:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:54:1C:E8:60:D1:9F:04:B5:A0:0A:60:1C:23:B4:B0:45:0B:29
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d1:02:77:46:8e:c5:12:dc:1d:bf:9b:b5:8f:52:a7:c5:0e:
0f:6e:7f:34:94:fe:04:bc:c9:f9:10:3e:ce:31:69:6f:ec:72:
cf:68:80:d6:ef:07:0d:13:93:ea:ee:0a:43:65:e9:03:e7:94:
f0:28:bd:36:91:f7:5d:b2:f5:1a:1a:31:be:fa:89:ff:b3:52:
73:1b:23:4b:d1:3a:8f:69:85:5b:93:8c:35:f5:32:f6:f5:a9:
eb:95:12:e2:f6:c8:8e:56:48:c9:b0:6d:31:8f:55:c7:06:6c:
f6:b9:8c:bf:b0:55:12:d8:8c:c2:9b:1e:76:06:16:af:de:df:
e6:ac:0d:78:41:23:77:e1:d2:2a:c3:e1:7e:0d:fe:1e:c7:90:
27:e1:87:8a:b5:02:4a:e7:ab:a7:ec:aa:df:38:18:1e:87:11:
f4:a6:d6:b3:d9:69:79:a3:32:d4:aa:82:c3:92:e9:a4:a1:69:
25:93:d5:dc:66:33:36:28:94:7d:20:4d:01:81:e2:d8:6b:90:
16:c9:26:8e:5c:a0:dd:14:b2:de:92:0d:1a:94:42:c5:5f:cf:
82:74:cd:18:d6:51:e0:fa:7d:be:9e:b8:2f:35:11:f7:63:cd:
ac:a2:e7:4f:a6:c7:61:7a:a8:6b:b1:55:90:dc:ec:9f:61:3a:
e0:36:9b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:37 2025 by rpki-client