Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
File: cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft (raw, json)
Hash identifier: qy+hoLMekbfnHwvWdm5OuhDOjOZuvK3eufz1gwr63VI=
Subject key identifier: 20:98:7E:75:5B:E9:C2:51:0C:A2:62:71:5E:6F:84:94:8C:C8:4E:9D
Authority key identifier: 73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
Certificate issuer: /CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Certificate serial: 0194BC3C839E00738EA1864835326A8FF8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: 5j4kigVKwcUINFkbJ3xSgMqflUw.roa (hash: kVxN2YetN80jXaobnulfC7lyMJ7WxoaWB7joRYX4FHo=)
2: cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl (hash: fZgkCbscuF8dfvl6B1HFYIGRA1KUOdfcQrtGasFlNFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:83:9e:00:73:8e:a1:86:48:35:32:6a:8f:f8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73189d26bae7f85cb4e06ab5ab536de5a80c16a1
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=20987e755be9c2510ca262715e6f84948cc84e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:dd:df:69:5f:5e:74:a1:8e:21:ce:21:04:
ba:09:cf:c5:97:d6:54:00:f5:be:c9:c0:34:14:61:
4f:5b:61:18:1b:45:14:f9:71:5e:76:60:03:27:f4:
cb:ea:3c:53:0d:2b:83:04:4b:3a:68:e6:10:ca:43:
25:c5:f2:66:22:4c:29:d8:06:38:fb:e1:19:3f:7a:
cb:ca:66:db:7a:cb:cb:96:ed:a1:aa:a0:54:54:4e:
13:3a:b5:8e:d6:aa:e3:48:83:f1:f2:9a:37:07:f0:
86:7b:f9:51:78:27:a1:d0:a7:71:c3:3d:dc:6f:0c:
09:60:45:77:7d:91:a7:cd:71:be:5e:ce:02:8d:d6:
fb:cf:d6:0c:d9:28:df:b2:15:d8:b0:90:40:1d:74:
b0:e5:2f:d7:73:46:93:91:75:2b:ff:71:b5:18:36:
06:03:63:04:e7:4c:92:aa:6e:d8:0f:63:2d:8a:31:
91:96:34:fe:22:84:30:2e:60:5e:1e:8d:22:be:35:
09:1a:27:f7:30:0f:68:ad:38:3e:b4:16:84:24:34:
81:a5:89:57:f7:bb:e6:53:7b:ec:21:02:af:f6:78:
f4:83:b5:38:63:1d:44:70:59:fb:2e:c0:f4:4d:4b:
d9:89:f0:62:46:a3:74:1a:2e:e5:d7:e0:7f:64:25:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:98:7E:75:5B:E9:C2:51:0C:A2:62:71:5E:6F:84:94:8C:C8:4E:9D
X509v3 Authority Key Identifier:
keyid:73:18:9D:26:BA:E7:F8:5C:B4:E0:6A:B5:AB:53:6D:E5:A8:0C:16:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxidJrrn-Fy04Gq1q1Nt5agMFqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/360a9d-b121-45ae-830d-066b63237d85/1/cxidJrrn-Fy04Gq1q1Nt5agMFqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:94:dc:8e:48:97:d7:29:97:24:42:d3:92:e4:b8:bc:70:4f:
da:ff:1f:20:00:e0:51:74:0f:00:eb:40:36:5f:00:22:6c:12:
c4:9b:6d:32:c2:fb:8b:b4:42:6a:dd:28:c2:ba:06:72:08:25:
f0:bf:3a:f1:2b:1a:6e:d1:e1:14:ed:12:49:8b:90:b9:84:03:
ba:49:0e:cb:78:56:ea:d4:74:55:55:87:26:02:2e:73:73:d4:
c8:56:47:5a:0d:0c:26:61:75:d1:86:68:b4:f9:1c:a6:90:d4:
da:72:10:70:96:39:3f:25:c1:91:7d:8c:85:3a:76:85:0f:63:
a8:ab:6a:e7:b6:6d:f0:da:32:2f:8a:1b:13:ee:52:58:5b:9b:
bb:ad:af:15:b6:7c:c4:96:7e:33:a5:b6:6f:41:df:67:e9:01:
4c:60:b1:ce:1d:f5:e2:91:79:1b:59:4c:b8:fa:7b:b3:b9:33:
cc:5a:51:26:0e:5b:5d:5a:4f:31:67:76:a0:e6:12:0e:4b:64:
58:d2:24:5d:00:1e:fa:ce:c0:f1:66:7b:bb:3c:9b:4c:c1:47:
e1:26:cd:29:03:30:21:eb:f1:7b:a8:c1:97:f6:46:c7:54:8c:
55:47:ce:ca:0a:c2:fa:22:60:03:43:b0:fe:17:6a:79:0c:38:
d0:0d:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:50:33 2025 by rpki-client