Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: AZ4iHU9TAtDjr8HEFOlA1IiUXyVR8EaUp3Jul+1rkDE=
Subject key identifier: 29:89:63:0B:EE:8E:DD:AB:1E:BA:1C:B6:86:AE:10:47:A7:36:2B:17
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 0194BC3C6228D066772ED37C1412807F06F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: LsfCTQ77qkeeOEMKaCXAoRqM2FRG/ZZqrmeRr2WxrYI=)
2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:28:d0:66:77:2e:d3:7c:14:12:80:7f:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=2989630bee8eddab1eba1cb686ae1047a7362b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:4a:e1:d8:ee:47:8a:19:c4:ec:3c:f5:6d:
5c:02:8c:6e:d6:9b:de:d4:83:8c:a8:db:94:b4:f9:
17:82:c4:09:a4:ad:0a:c0:58:86:c1:4c:d3:83:19:
61:0e:38:18:41:f3:02:3a:b1:7d:ba:85:e6:66:e2:
d2:ed:01:94:f1:13:e1:3b:fb:47:7d:80:7e:86:5e:
31:04:e8:b5:c4:46:eb:ee:71:d8:73:f3:bd:58:ea:
5a:36:3c:9c:45:dd:e3:58:a9:43:03:d7:3e:e0:0f:
47:ae:ef:c2:53:71:69:80:f4:24:4b:0b:73:1b:2a:
e2:af:2a:1b:20:70:ff:9c:44:10:5b:3a:cd:05:e9:
50:e5:cd:2c:2c:ab:08:3b:0a:96:a9:6c:3b:67:06:
eb:99:b3:99:ba:87:95:16:02:d6:28:73:d0:9e:bd:
7f:04:88:53:0f:96:a3:f5:15:ff:2d:6e:a0:00:56:
a5:bd:28:ab:36:06:09:db:3b:86:d9:95:7a:ee:bb:
0b:ec:fd:27:ca:29:fb:79:95:70:fc:71:61:51:ed:
89:cf:1b:ff:4e:73:05:89:91:82:8a:41:9d:d7:31:
3e:b1:66:21:eb:31:66:ba:39:d2:52:b7:fb:a5:1c:
d0:bd:72:d5:4a:67:73:e0:16:e8:19:14:f4:dc:d7:
da:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:63:0B:EE:8E:DD:AB:1E:BA:1C:B6:86:AE:10:47:A7:36:2B:17
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d2:c6:65:45:4b:7b:40:ce:26:a3:51:fb:eb:4a:5b:d1:2a:
69:ef:7e:40:2e:ac:ff:a2:c0:e7:5d:fe:93:a0:0b:fd:f7:29:
6e:15:fb:2c:f5:10:49:00:ab:31:0e:3e:f2:75:e8:77:3b:d2:
e7:d2:0a:cb:9e:6b:53:d0:8a:fc:db:92:81:46:38:4e:2c:80:
b8:9c:eb:47:71:8b:7c:8f:8c:49:47:d0:ab:14:fb:3f:db:d3:
a1:b1:48:94:9e:10:b8:2c:22:ab:28:49:e1:aa:ec:7e:23:5e:
ac:65:d8:78:20:f3:68:c1:80:5e:e1:0a:fd:72:c7:f6:21:9d:
8c:79:3b:ad:a4:96:1e:5f:78:d2:84:8d:85:c7:bd:62:23:fe:
c4:fd:3e:84:fa:3a:93:68:86:45:8d:e3:f1:2b:2e:b8:2b:85:
8c:63:44:43:26:f3:29:24:ac:2b:c6:3d:a7:d3:ee:ab:84:fc:
19:4e:9e:a9:aa:66:96:2d:42:28:84:1e:e6:0c:49:64:d7:61:
e4:9c:96:de:ce:d5:da:25:0f:88:bb:cc:d1:8e:ea:82:9d:bd:
99:71:4a:7f:6a:56:66:62:42:72:48:6e:7f:e7:e6:8d:5e:26:
dd:4e:29:d1:aa:8f:7b:aa:cf:c9:2b:1b:e6:a8:ad:9b:62:59:
58:5c:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:37:51 2025 by rpki-client