
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File: Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier: J4Dc5Wiq0fFg5SVQYUnUt3gYc6N9q95WBLTHRdX9N2A=
Subject key identifier: DA:5F:58:75:72:EC:29:D3:3B:8B:35:FF:E2:39:ED:48:D1:37:24:7F
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer: /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial: 0194BD4E3A138E39366ED6A17E7F94BE5ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number: 1273
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: 0wq7nKaScS0pbrNtDp5CCYa40I0.roa (hash: YLAnQ899fen9G75o1VQ4WG3xmrR1aE24+aqGBivGfPg=)
2: C61GwcJeRtAOI01pw_9OifWmDg4.roa (hash: 9PW5ZjiozCQ8wL+eGdZzyMhYF63EjKCPmt13mTOq/Zk=)
3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: XPCabvu0JHKwlqzPu7iIMEBPCWpyKFVlMu0NoQmP/XM=)
4: ItVJPK2mLPB9FvjsYvA3kQUwYMo.roa (hash: 1Z3qdwF8M3C1Jp6cQIQ9f/sPtjEFM+fpGWKdDGskejw=)
5: y9tjDMwj3FUxf0FE58l3CpQ2f7s.roa (hash: ER0udvIPerpU2WoViOM+UwzfexA+zzC+m8a4XFVRnXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3a:13:8e:39:36:6e:d6:a1:7e:7f:94:be:5a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=da5f587572ec29d33b8b35ffe239ed48d137247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:e5:c5:b6:ea:b9:79:1a:54:ec:67:f1:80:
45:ad:d1:14:1a:ea:d2:88:e3:9d:16:fe:ba:c4:9a:
e7:55:e3:1a:43:09:9f:0b:c9:5a:85:67:fb:f2:06:
ac:4e:e2:e0:ac:d2:0e:39:fa:45:4b:83:45:75:78:
be:a6:2d:d4:cb:b8:64:d0:75:d2:b5:3c:47:0d:fa:
84:81:16:08:f1:95:29:d9:54:21:a7:8d:ca:b6:92:
4d:ef:89:bf:c7:3b:4b:ee:c9:e7:97:e2:7f:fb:d1:
49:4f:95:f5:5d:46:66:0f:a0:7e:be:68:1e:4a:bb:
45:b8:bc:18:93:c0:ff:7a:8e:51:7c:d4:f4:a2:2e:
33:25:08:7f:ea:eb:c0:3c:d5:19:cb:90:66:4e:cc:
a8:43:e4:db:8b:e4:00:8a:a5:4b:3e:53:37:1e:65:
bc:10:81:6b:80:49:9b:35:df:19:94:4b:87:a7:61:
ed:8e:fe:57:ef:a2:79:9e:8c:d4:f8:30:6b:06:76:
2c:1b:1b:0c:bb:76:2c:9b:d3:d9:ee:f9:b3:a4:23:
de:74:51:fd:ca:8e:5e:c4:29:49:f3:23:3b:63:e1:
85:06:63:24:5c:26:2e:67:86:5a:e3:de:ae:ed:68:
8b:56:be:68:76:40:ad:f9:aa:bf:f4:3c:cd:38:82:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:58:75:72:EC:29:D3:3B:8B:35:FF:E2:39:ED:48:D1:37:24:7F
X509v3 Authority Key Identifier:
keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:14:c8:47:a5:90:5e:b8:67:f5:7d:a1:84:cc:aa:ff:8b:
01:f6:67:4d:32:42:54:93:b4:6a:e1:2e:76:d6:e0:91:c3:e6:
27:e4:05:e8:a8:53:ad:78:c5:46:b3:be:04:30:0d:dd:df:90:
aa:62:68:59:4c:00:56:73:56:02:76:3a:4b:41:0c:be:8e:e8:
e8:77:ee:89:79:38:7c:a7:2c:b8:be:30:de:e6:bd:87:f1:3a:
91:c0:05:e2:21:7d:e1:e3:9e:65:ae:cd:4b:4e:11:80:28:23:
4c:57:73:ef:8d:82:49:12:10:61:00:20:5a:f0:6a:f2:8b:dd:
52:15:99:e9:22:93:bf:f0:43:66:e0:b4:9b:02:d1:b5:e0:18:
8e:19:95:a1:e4:64:32:02:d9:29:c3:12:3a:60:83:61:58:7d:
5d:ab:aa:48:ae:c7:d9:39:84:e2:fa:db:b2:fa:d1:7b:e7:8b:
0a:d7:91:6e:02:f6:80:12:81:1c:21:32:d4:ea:76:54:b4:7c:
a9:5b:2f:b3:e1:9a:10:e5:53:fc:7a:e2:d7:5e:4f:3b:00:14:
c1:8f:f0:a9:3b:d1:18:b0:0a:56:90:48:f3:e7:3c:d8:96:8b:
84:bc:ca:a6:cc:39:67:06:aa:a0:4d:3b:03:4d:97:8d:11:2b:
28:23:3b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:49 2025 by rpki-client