Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json)
Hash identifier: oVCX/BjyB40oRs9UDjsCK5gkXICssahDgkGMV4CwEfw=
Subject key identifier: DB:0F:8A:A2:07:C6:A7:85:2D:92:3A:BE:63:A1:3F:BD:58:DB:F3:1D
Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Certificate serial: 0194BC04A40F4D6C027B088BD34453609C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: qWGQOK0yqgSD9Ffvrr971/d/+SCEwKcaV95LJNKHAwM=)
2: w5pXk-zMDjFo7rYudSF_ATInnUI.roa (hash: 33j8kQlj8EM4Xb9f4KytIpk1E+D5CzmOoXGUrxjI1vU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a4:0f:4d:6c:02:7b:08:8b:d3:44:53:60:9c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=db0f8aa207c6a7852d923abe63a13fbd58dbf31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:6f:24:4b:e2:cd:ed:da:61:17:54:47:f9:
9e:e4:52:01:52:23:cb:b0:7d:51:4e:7b:98:e2:6e:
ac:6e:b3:aa:4c:40:64:f5:39:a5:a2:2a:2b:d2:bc:
67:8e:d1:9f:1a:a5:cc:6d:1d:c3:d6:3c:c3:e2:a1:
70:d4:58:ce:aa:b4:d3:43:8d:2a:b6:cf:2f:06:ca:
58:a7:e5:f5:5a:31:29:f0:8a:cc:e3:4f:41:f4:17:
ec:0e:23:ad:5e:3e:df:3c:18:f1:a5:50:f1:f0:7c:
95:ca:01:3b:59:44:bf:a9:fb:30:04:f0:58:1b:bc:
ea:b4:02:56:e1:a3:72:9c:6d:3b:49:10:86:4c:8f:
73:78:c0:28:b2:2f:39:5c:c5:e1:fe:93:25:b5:a8:
bf:50:31:e4:20:42:62:c4:6a:06:fc:99:a4:cf:64:
17:98:37:31:4e:24:b5:22:a3:61:1e:37:01:10:ee:
b8:1f:b6:28:2b:36:2c:a2:a9:65:1e:6a:32:8b:7e:
c9:34:2d:e4:1c:2b:85:9a:ae:ba:7f:3a:7d:b0:98:
c4:23:ec:1c:89:94:24:33:d8:49:a2:47:6d:c0:0d:
5b:4f:2e:c4:ce:7f:57:35:c7:ad:19:b3:b1:16:e6:
d6:10:ee:39:30:c0:8d:ba:e5:84:e1:38:3d:08:18:
ee:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:8A:A2:07:C6:A7:85:2D:92:3A:BE:63:A1:3F:BD:58:DB:F3:1D
X509v3 Authority Key Identifier:
keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c9:93:f8:f5:c9:13:c5:b4:d5:7c:cc:b7:6f:f4:c2:ef:ac:
76:ea:eb:28:1d:23:20:0a:ed:12:c2:e3:16:6d:a5:f1:75:ea:
78:bc:c9:30:97:c7:ad:ca:99:a2:69:57:fb:26:bd:57:f6:a7:
17:ac:df:73:0f:f3:94:ee:06:6a:71:4d:9f:2c:04:1c:95:9c:
3f:ce:02:7f:7c:89:10:36:77:05:fa:c2:da:13:cc:ee:90:b0:
d4:d8:4e:67:b9:c6:28:a1:00:9f:57:6b:83:e9:33:aa:95:2f:
aa:8d:e8:b1:63:f1:32:c3:55:e5:ca:f8:d4:12:c1:ba:4d:08:
17:e6:18:90:74:b7:d3:f4:4a:34:bb:ef:65:cf:da:ce:42:35:
34:b2:46:50:95:17:09:91:d3:22:b2:b7:39:c5:de:10:d3:e8:
64:ed:51:7c:e8:36:ec:c7:1c:ab:13:fb:5d:3a:3e:5a:bc:04:
ab:fa:9a:a0:c2:14:22:53:03:a6:1b:d6:2a:4b:84:92:0b:77:
9e:90:54:35:d1:3e:32:df:7e:3b:51:3e:59:b0:b6:56:d5:ac:
78:bf:d9:0d:f6:70:7a:04:fe:8d:f4:29:76:01:2a:16:6e:bd:
cb:01:09:a4:f8:fb:a9:1c:cb:60:a8:80:47:d6:71:d2:cb:74:
13:ca:64:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:47 2025 by rpki-client