Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: yYECNXjT/MUTzHKVsBlL2JsBpJeQumiQdDUR5f3narg=
Subject key identifier: 03:5C:0E:DA:90:76:D1:5E:2D:F8:26:7B:C3:BF:01:20:24:51:DA:46
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 0194BC3BC3C16AAA831BA2E0C929CA1C3C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 0F52
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: kmY8lU/wLZhTJKtwxTbpH8hY4yQz9f47fkDj684/u3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c3:c1:6a:aa:83:1b:a2:e0:c9:29:ca:1c:3c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=035c0eda9076d15e2df8267bc3bf01202451da46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:73:e4:62:ad:0c:1a:cb:27:4f:38:90:38:
ac:8f:d9:7a:8c:25:fe:f3:23:52:53:e5:b9:c4:b5:
0b:3d:d9:88:28:60:0d:ea:71:be:77:9a:f0:8e:7d:
0f:fe:b5:12:d5:a5:27:cc:5e:ef:fa:83:da:91:a5:
53:f9:48:e7:ed:65:d4:59:65:2e:ec:ad:d6:41:b9:
70:05:a7:a8:3e:9c:19:d3:f6:73:4e:8c:3a:22:ce:
40:16:8d:2f:8b:5a:d4:02:b8:e0:78:64:b3:82:a3:
d4:56:1e:1f:08:b3:9b:a6:60:ac:da:0a:fd:e6:45:
9b:76:11:bf:e8:66:15:c6:97:23:e0:6c:e2:9c:ae:
b5:b2:5c:78:21:d2:83:02:43:1c:76:90:fe:38:0f:
3a:29:e0:93:f7:cc:9a:42:61:c6:25:fb:dd:50:ec:
08:c2:e9:d9:88:52:10:68:53:80:c0:d6:bb:ff:d6:
7b:8f:a5:ae:71:17:75:68:00:77:09:fd:51:91:8d:
f5:e6:05:a0:e5:a1:86:c8:04:34:1e:67:37:09:6c:
3a:78:ed:cd:63:64:a6:c5:1e:45:b6:29:81:68:1f:
0a:03:da:74:1c:d9:4c:d1:8f:f0:cb:4f:90:f1:9a:
c0:c4:53:c2:ca:d2:32:ba:f6:a6:ad:74:e4:d6:bf:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5C:0E:DA:90:76:D1:5E:2D:F8:26:7B:C3:BF:01:20:24:51:DA:46
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:51:1a:64:0e:3c:1e:a9:e5:99:76:30:cf:6c:da:46:8a:ea:
74:9a:43:4e:84:71:40:4f:97:2f:cf:0f:75:03:fe:f5:1d:40:
72:65:b0:90:e9:c8:d0:ed:de:47:69:5d:00:0e:8d:ce:ec:44:
4e:4f:d0:e8:6c:7a:45:21:20:2b:79:93:bb:60:c2:2e:e6:dd:
65:9a:e9:8f:51:b0:cc:b7:3d:57:e0:f5:b6:1d:1c:de:b2:db:
fe:ec:d0:e1:04:03:cb:23:a3:6f:29:cc:7b:c0:a0:f7:1a:38:
38:8a:26:60:fd:97:f6:25:49:31:2b:ec:53:ac:3a:0f:4d:07:
a5:26:35:39:8c:68:7c:5a:9e:f3:71:cf:81:36:25:44:80:97:
ba:e9:87:50:c0:49:fa:cb:e6:08:74:ea:c7:2c:ef:e4:4a:ae:
ea:16:03:4b:8b:73:8d:5a:fe:f6:35:43:b6:fe:b1:41:a2:b8:
89:97:e0:78:34:ef:c1:c5:d1:d8:e3:b6:c1:40:36:77:68:7b:
cd:3d:a4:f4:e9:fb:c8:5b:f1:15:82:24:53:d7:80:cd:34:ce:
05:b1:d7:d3:3a:d9:55:86:e1:9d:0a:cd:57:8d:d8:9e:e9:1d:
19:d5:e4:c3:a7:07:e5:2d:43:38:bb:7f:ee:3d:67:a0:a2:80:
14:a8:3e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:12 2025 by rpki-client