Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: mTFYWiqap2YG5DD9moWoTLPoIGmylLAjet+B6jmxxKg=
Subject key identifier: 65:D2:24:F8:F4:25:D0:65:22:EE:1E:E7:34:F0:CD:DE:DD:12:73:A0
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 0194BC050AA5103EA7D5BC62A1DCDC14C466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: U/zvyT2xw0u8SKnFKjfR/psDIoWckhxobNAi8lkngBQ=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:a5:10:3e:a7:d5:bc:62:a1:dc:dc:14:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=65d224f8f425d06522ee1ee734f0cddedd1273a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:74:8a:dc:17:57:d3:a4:91:25:b1:9e:d0:
c7:9f:e9:b2:dd:c7:fd:44:45:cc:59:41:c4:a3:7a:
ec:8b:0e:b7:be:37:c7:e4:30:83:7e:50:a7:c3:51:
17:94:f9:17:79:c2:47:8e:05:f7:f2:d2:8d:61:2b:
28:0e:db:fe:0b:35:04:c4:15:1d:ec:d4:c6:33:ec:
9a:53:21:f1:89:4d:df:6e:02:21:25:ec:a6:ca:c9:
eb:a8:ba:8b:b7:ce:db:96:fc:42:1d:d6:f4:ef:69:
70:80:68:50:79:af:65:72:6a:db:61:5c:2a:66:21:
e8:8d:13:3d:b7:03:96:6d:75:e6:51:2f:a1:a1:47:
23:db:73:01:67:c6:46:63:8c:09:dc:c0:d8:f2:b8:
2a:85:f6:af:ad:da:15:51:13:70:e8:5d:57:b3:ae:
16:c9:db:a9:ab:9a:42:56:25:44:c1:f4:60:bc:c4:
e7:ff:44:39:91:cc:89:57:d3:79:10:34:9f:93:fb:
0b:e0:8f:aa:9c:b2:39:96:bb:4d:7d:f4:d7:e4:86:
74:1d:ec:c8:a4:50:d1:61:4a:d8:8d:4e:fc:b2:83:
10:0c:06:cc:8f:fd:38:a3:11:e1:e6:18:b7:13:bf:
5e:3d:8b:2a:f6:03:81:ad:62:52:3b:e6:43:0e:81:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:24:F8:F4:25:D0:65:22:EE:1E:E7:34:F0:CD:DE:DD:12:73:A0
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dc:32:12:0b:9f:43:38:cf:0a:b1:93:51:ee:86:85:0d:6f:
62:ad:40:67:09:02:1a:be:a0:57:a7:b7:5b:25:69:3b:e9:38:
fe:aa:cc:1c:ef:f7:d3:0f:f3:16:4a:67:45:0e:8c:1a:b8:ac:
2b:b3:6c:4a:12:25:d5:e4:5e:b3:6a:d0:01:b2:a6:66:76:fe:
ee:c4:ab:ef:a4:41:3f:92:c0:b7:4b:23:54:d9:5a:4b:c1:3d:
d7:7a:6c:44:23:c9:0c:5a:93:9e:e7:70:81:5e:31:d6:6d:5e:
4d:d0:6f:3a:09:b1:f6:e4:7e:ac:f2:dc:81:32:1d:f2:6b:3e:
93:61:18:3a:ed:36:e7:30:d7:44:63:c0:d6:99:57:5e:21:48:
df:7c:ee:82:1a:94:f7:a7:28:35:06:d6:b5:4a:d6:be:21:d6:
f1:b9:5e:8f:d9:71:1d:55:6e:5b:4f:fd:d6:84:b0:f7:d1:e7:
a1:07:98:61:14:5c:f2:52:67:d7:5b:7d:37:5d:17:7d:47:d5:
d7:86:a8:5f:9e:d9:1b:5d:92:5a:97:0a:ff:c8:f4:89:0b:11:
2b:0a:af:96:80:84:38:92:22:19:eb:0b:35:69:0c:65:36:c7:
f8:9a:1f:19:75:23:a5:75:3d:f1:18:7d:b0:98:a5:fe:c5:53:
f6:48:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:48 2025 by rpki-client