Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: bmqgZuwglg2jlN1Yn5359djx3I7OIB0M8gLm2iP3x8Q=
Subject key identifier: B7:45:82:A9:22:2C:79:6B:B7:6B:D6:E9:4E:8A:F2:E0:B6:F0:8C:F4
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0194BD85A471494425DA54F3CB2D7CFB7F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: /xIzgQISW6RD7UUf0M3lcwJi0YRS9E3GzdQergSKbms=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:71:49:44:25:da:54:f3:cb:2d:7c:fb:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=b74582a9222c796bb76bd6e94e8af2e0b6f08cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:c4:64:b2:e7:21:9f:97:e4:69:13:72:64:
32:63:7c:42:5a:58:c0:90:e4:32:8c:ac:62:d4:6d:
93:83:a8:8d:46:b8:58:d8:97:54:7a:f3:d7:33:2b:
22:b4:1f:23:58:d7:d6:95:51:9c:97:59:db:d6:9b:
ed:ff:71:66:32:8b:4e:8d:4c:b9:1c:f0:e6:5b:ea:
8a:88:ea:39:d6:76:e3:26:67:84:9b:20:5b:f7:5e:
2d:66:82:a7:3e:d4:56:54:10:f1:6b:aa:36:be:27:
0d:2e:63:72:72:bc:9e:d4:a7:87:12:8d:12:fe:bb:
48:f5:42:07:b8:54:a8:af:93:c6:ba:3b:13:03:af:
d8:fd:40:31:d3:a2:12:e6:51:d6:74:d1:bd:ee:4f:
db:e8:7a:89:bd:5d:68:54:9c:51:7d:35:17:3d:9c:
48:66:4d:f3:3d:4d:3f:fd:81:22:83:bc:da:d4:e0:
b1:8e:27:98:c4:f8:e6:92:65:aa:cd:70:97:15:d2:
eb:02:f9:91:c1:0f:14:48:60:15:09:2a:54:f1:5f:
70:15:f0:40:b1:37:fd:eb:01:68:9a:c4:77:35:9b:
0f:f6:27:8d:3d:45:7f:9a:74:56:3a:39:f7:10:b3:
d0:3f:1c:ef:73:44:14:e7:77:f7:59:53:5e:c1:93:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:45:82:A9:22:2C:79:6B:B7:6B:D6:E9:4E:8A:F2:E0:B6:F0:8C:F4
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:bf:5d:83:62:52:63:f8:68:8c:95:0d:fd:93:75:03:4f:
cf:df:ee:b4:f0:5c:21:07:86:be:be:c3:18:8e:c8:0d:64:ba:
c7:4c:9f:61:f5:ac:59:a8:65:aa:85:af:d3:43:74:25:f2:1c:
8c:79:10:dc:34:e1:7f:7d:d4:52:3b:c8:e3:12:0b:d1:8a:3d:
f8:c3:92:a3:a4:41:d4:8e:ed:fd:34:4e:c4:8c:7d:76:1c:4b:
94:ac:12:b1:24:66:7a:7c:d1:6b:62:2b:35:b9:26:4d:cd:50:
aa:e3:2a:c3:80:5a:97:51:d2:ab:ac:d6:92:fd:64:d3:a0:c5:
9d:dd:03:de:64:77:02:51:4b:8c:fd:6a:29:4e:b6:f2:2e:ec:
35:93:91:d8:8b:45:84:35:00:09:96:f6:7f:40:41:9c:a3:96:
48:d3:2a:87:c8:2d:42:33:93:65:46:6f:a9:d6:dc:40:b6:fd:
b6:36:79:c3:d6:86:15:4f:bc:d1:62:d6:db:d8:6c:0e:4e:00:
16:34:66:7b:ee:f8:74:1a:85:f9:96:28:02:8a:ff:a7:bb:7c:
ff:29:8e:31:15:32:6a:33:73:29:94:92:8f:04:83:51:40:80:
0c:62:67:a5:0f:4c:c7:a1:fd:cb:7b:4e:71:5b:36:60:f8:23:
e4:9c:69:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:42:36 2025 by rpki-client