Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
File: Cfuz7S8CnEusxuosTH9MHNboDnk.mft (raw, json)
Hash identifier: 2eI4A/533GF3C2j9WAzYIjzKwLzjS0gMY5firfiXKd8=
Subject key identifier: D6:B0:6E:2A:47:0A:4B:1F:DE:5B:53:4A:DB:70:7F:4C:63:9E:84:34
Authority key identifier: 09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
Certificate issuer: /CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Certificate serial: 0194BBCDAFA29231AA41E7E5B9C5A8002976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
Manifest number: 0A92
Signing time: Fri 31 Jan 2025 10:00:06 +0000
Manifest this update: Fri 31 Jan 2025 10:00:06 +0000
Manifest next update: Sat 01 Feb 2025 10:00:06 +0000
Files and hashes: 1: Cfuz7S8CnEusxuosTH9MHNboDnk.crl (hash: hCUG2dDGmti8QVdJikpBP+wYE4tg7NEE/OerBPRU3GY=)
2: GWHlXKm0sM09h00CHS4OA90ZDEo.roa (hash: nINowmfDfKGL1Tvt7j8uTMeqVpzK8gUstL889w0cG50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:af:a2:92:31:aa:41:e7:e5:b9:c5:a8:00:29:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fbb3ed2f029c4bacc6ea2c4c7f4c1cd6e80e79
Validity
Not Before: Jan 31 10:00:06 2025 GMT
Not After : Feb 1 10:00:06 2025 GMT
Subject: CN=d6b06e2a470a4b1fde5b534adb707f4c639e8434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:87:66:f8:30:c8:f8:ed:d7:d0:a7:4d:b6:
e6:6a:7f:de:8b:30:43:ae:79:81:dc:07:78:0a:7c:
0d:a7:58:01:8e:82:4e:c6:33:90:84:f2:e6:72:6d:
73:2e:b4:5e:05:c2:12:29:04:9c:38:98:d3:21:69:
27:aa:18:14:32:a3:e9:a7:00:89:7c:52:28:8c:bc:
3c:0b:4f:2b:f7:d0:ef:55:af:ae:11:8e:35:83:97:
c3:b0:81:76:b5:94:05:21:88:6c:e5:2d:1c:f4:dd:
57:88:01:d4:df:04:6b:08:c9:2c:19:51:5b:76:9b:
bc:c9:97:ec:e8:f4:74:18:9c:fa:5c:6a:b9:5b:b6:
1d:e0:b2:3e:f1:fa:95:32:84:61:e5:b7:ab:71:9b:
bf:f2:07:c6:39:91:46:94:7f:bc:88:64:52:18:4b:
de:75:7d:53:be:0a:b8:77:57:32:dc:94:1e:3f:25:
79:9a:bb:70:04:b9:b1:01:d3:2b:67:ee:78:23:13:
cd:d3:af:dd:c3:c0:0b:42:86:fa:e7:ef:aa:9d:22:
cc:b1:b8:79:d1:70:72:db:e4:ed:95:de:35:21:18:
5a:30:be:63:bc:44:d9:5f:fd:3c:4d:3b:43:a3:f5:
7b:1c:24:e2:cc:fa:f5:3f:70:c9:da:72:a6:56:41:
22:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B0:6E:2A:47:0A:4B:1F:DE:5B:53:4A:DB:70:7F:4C:63:9E:84:34
X509v3 Authority Key Identifier:
keyid:09:FB:B3:ED:2F:02:9C:4B:AC:C6:EA:2C:4C:7F:4C:1C:D6:E8:0E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfuz7S8CnEusxuosTH9MHNboDnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9d5bcf-2db9-4afa-b000-822953f8cf77/1/Cfuz7S8CnEusxuosTH9MHNboDnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:54:12:73:ca:be:62:12:8a:9d:40:b6:6d:64:a5:24:fe:b0:
70:8b:c2:41:10:b6:83:30:77:c4:2d:a2:49:81:6a:78:52:65:
a8:3e:a7:47:68:a5:56:ab:2d:40:51:0e:37:76:92:8e:99:45:
71:27:36:f8:5f:1c:b2:a9:d3:95:c0:7e:04:4a:9a:a6:68:63:
27:ed:bc:cc:45:20:b7:68:da:1e:c5:d9:91:e4:bd:27:8e:77:
53:a4:00:de:67:ef:9f:11:63:e4:fe:42:0f:8f:2b:55:74:d1:
86:19:e1:5e:ad:10:4a:95:3f:7b:5b:58:62:2a:23:72:c1:e8:
bb:ec:1e:07:36:98:c6:50:a9:f9:4d:b0:df:f8:15:67:27:e4:
48:ff:85:d2:87:45:ec:0b:3a:11:53:58:4c:e2:9e:df:e4:12:
fa:5c:13:06:75:b4:0e:50:ab:ae:3e:4b:07:cf:4b:2b:68:ad:
ed:12:b9:ec:a5:c4:6a:33:09:bc:4f:0c:d8:83:ab:fb:64:27:
16:3e:13:d4:7c:45:ba:5f:5f:27:18:6e:3d:ee:80:33:d6:26:
f4:95:2d:1a:d1:a7:0e:0e:ff:33:81:39:c7:f9:72:97:a8:b6:
af:a3:1b:2b:91:41:4a:d3:c2:94:34:fd:d3:64:43:34:e9:f4:
a0:29:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client