Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: UdWz8mjrYl7y/pQKSc0royb+lqZ7RX9h3V2iSLVHNE8=
Subject key identifier: 35:3B:1B:42:A4:24:00:18:90:6A:A9:A6:C9:41:C8:27:4A:70:1C:87
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0194BC04E20C3761E186240B22FD5F46B884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0959
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: uizYI2T/xkPcZ+c/tk5V4CvAUDlN+dz+Np2NfmrEfPU=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e2:0c:37:61:e1:86:24:0b:22:fd:5f:46:b8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=353b1b42a4240018906aa9a6c941c8274a701c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:ff:66:50:c6:85:73:5f:10:95:91:90:65:
08:f8:8d:cd:bd:5f:78:fd:c1:c8:69:7e:85:1d:47:
df:16:ae:d2:b9:04:a5:29:03:07:ad:d3:9e:56:b9:
c6:f0:f7:ce:a9:e4:ef:26:f3:85:d3:a7:06:90:6f:
d5:db:73:ff:33:c6:de:d2:f5:0a:e1:d1:6d:bf:3c:
d3:73:ac:36:74:35:f8:a1:e0:bb:81:fd:0f:01:60:
52:08:7d:06:1f:95:75:a0:ea:e8:a9:fa:1a:ed:bc:
11:a5:3b:92:f9:26:d8:85:f6:a3:88:84:c0:6a:c4:
2d:d7:cc:fb:7e:ae:42:72:3e:04:0e:ab:b1:b0:21:
c7:09:78:33:a0:cf:3f:62:85:cf:4b:4d:d5:04:3d:
9a:98:f8:2f:8c:0e:09:e8:b1:fa:57:70:10:1b:f2:
7e:82:58:9c:db:d6:12:b4:4c:b3:e3:9a:a9:ef:47:
9d:7f:cb:fa:d5:2b:d5:f1:5f:fd:82:86:1d:99:3e:
e1:18:a0:26:a8:78:54:69:b0:5b:13:66:b9:6c:c2:
48:35:17:5b:cb:af:ce:09:63:66:8a:8e:2b:9a:5b:
34:ad:93:f1:dc:9b:0f:71:1b:fd:a1:db:e4:55:36:
0c:6c:80:ba:c7:85:12:a7:57:be:0d:67:63:5e:37:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3B:1B:42:A4:24:00:18:90:6A:A9:A6:C9:41:C8:27:4A:70:1C:87
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a7:4c:4e:3f:3d:ae:ac:04:1d:a6:66:e0:b3:dc:5c:49:ec:
8a:3c:cc:09:05:a3:02:95:08:7c:6c:ee:d0:78:7a:91:fd:72:
e1:94:6d:1d:14:1e:55:71:3e:d5:dc:1d:ca:2c:0f:e5:47:96:
e0:ba:1c:2d:3f:1a:4d:19:b6:f9:df:86:31:af:e1:96:e8:bc:
bb:af:a7:28:d8:b7:e0:b7:fd:e4:54:f4:c4:23:c9:88:9d:69:
8e:5e:a8:ad:31:30:50:23:47:fc:fa:47:3c:2a:74:7f:a4:86:
56:24:45:03:24:f7:1c:d8:4c:91:48:0c:27:73:19:db:a2:fa:
c9:54:b9:e2:52:a4:78:af:9c:70:46:41:db:d9:f7:d6:7c:e5:
bb:1f:fe:b9:e0:37:85:48:47:eb:52:d8:80:9a:d8:0f:e0:ac:
fb:ed:af:f5:b6:60:2e:4b:f1:cc:ee:34:c0:94:6e:cf:88:f6:
a0:ac:9c:88:54:ab:ff:73:92:22:c1:b8:bb:90:2e:70:df:02:
32:df:41:33:e4:4b:ae:59:4a:ee:94:3e:6e:61:6b:24:30:c8:
e4:cd:d5:d0:2e:f4:c1:18:b5:a7:a1:8a:d0:3b:81:93:a2:de:
92:32:01:1e:80:f1:c8:5a:16:40:f2:d3:7d:32:51:a7:b7:4b:
59:e5:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:15 2025 by rpki-client