Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: D/NqMLY4Pqjkkc/sX/gRJTsvBO3+jsG4FaKgp5sI0xA=
Subject key identifier: 8D:AA:04:94:74:F5:6D:C6:22:0C:8A:7D:B9:4A:E2:D0:D6:24:DA:4E
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 0194BC3C1411B6CB61B379A8CE561F763B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: 5iecPPthQJg4+X4EcNbe6d/x6Y8KSOjYRsk0CYj8I0c=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:14:11:b6:cb:61:b3:79:a8:ce:56:1f:76:3b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=8daa049474f56dc6220c8a7db94ae2d0d624da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:10:1e:63:b3:15:8b:ab:52:19:fa:62:e9:
be:a9:29:12:64:40:ca:e5:f2:5d:63:a0:b2:83:a2:
de:ef:9e:08:ce:ad:d8:c9:e8:e5:5c:5f:1b:97:fe:
26:95:e3:b2:cd:42:4f:19:ca:98:34:96:dd:b0:c4:
77:50:8d:96:93:66:04:40:54:c3:cd:bb:ba:61:c4:
ef:d4:d0:6c:19:57:0e:0d:a6:2f:b2:b7:fb:d5:22:
1f:72:3d:cf:08:3b:da:e2:22:13:a8:f9:51:67:b6:
45:2e:af:a1:0f:7d:68:e6:24:8c:00:bd:23:8f:c2:
6c:73:21:96:0c:a1:6b:ff:0b:2c:1a:ff:2a:a3:51:
07:91:42:4a:59:7b:47:6c:04:e7:a3:64:90:d9:1d:
a4:03:e9:2f:be:15:81:bc:2f:73:67:f0:d6:c3:2f:
d3:1f:fe:05:6f:4e:96:b4:fa:b2:47:de:4a:5c:a7:
4c:d6:7b:db:65:1d:5f:07:4b:86:38:50:9d:ff:8f:
6e:02:9c:a9:e3:3d:7b:d3:d4:1a:51:62:52:3a:44:
18:9c:99:40:03:a0:9e:16:d4:a3:46:10:00:a7:b0:
48:9a:3c:46:91:25:40:1c:a9:a8:d0:d2:2b:eb:ee:
8e:a7:51:66:c0:8c:ac:73:b0:5e:d0:d2:8b:a6:b3:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AA:04:94:74:F5:6D:C6:22:0C:8A:7D:B9:4A:E2:D0:D6:24:DA:4E
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:ad:e1:8b:14:4b:8b:80:b0:51:60:f2:23:f9:8d:b7:9c:
04:95:f5:46:a5:08:a4:8c:a3:6b:40:c9:e7:47:44:51:8b:74:
ec:35:95:bb:42:f3:ce:a4:37:8a:80:fa:55:e3:dc:a0:b2:c4:
14:b2:29:aa:03:b9:4e:fa:b3:34:eb:67:c9:ab:e1:1a:14:db:
6b:34:65:1a:c1:42:b5:3e:42:43:91:e0:e7:10:3d:39:26:7d:
3d:03:a5:15:b5:af:43:d3:29:19:7a:97:66:da:9e:78:6f:dd:
b1:d2:c1:af:18:dd:1c:12:2b:23:84:07:d6:28:af:ef:85:04:
45:5a:75:f6:95:eb:37:23:8e:8a:fa:a4:17:07:d2:ff:ae:9a:
84:35:17:60:e9:47:20:17:5d:be:b3:89:36:4b:80:3f:3a:97:
0f:fd:e6:24:48:5b:ea:08:d6:13:7c:fb:6c:b8:1b:f1:43:14:
a7:9e:de:97:b6:c9:36:50:5f:8a:bb:70:b0:f5:36:a0:fc:74:
54:6c:b7:ac:18:9d:c9:c7:d8:7a:fd:6d:3e:dc:88:d0:a5:22:
72:06:2f:19:58:d5:3a:ff:82:70:9a:2a:57:f9:3a:bd:13:e2:
e1:45:ef:c4:2d:5a:63:c0:06:e8:fd:51:03:75:0b:47:59:93:
df:e7:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:30 2025 by rpki-client