Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: ekr/uP8bAk87JQWW36p03AuUGdT1bVT4T1XvBYW2gsA=
Subject key identifier: 38:69:80:05:AD:F5:C3:C6:F3:91:DD:5F:02:E3:CF:09:A7:29:BB:A7
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 0194BBCE52E8CAB0C6E04D259B50C2BBE047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 011F
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: Acw1biZNkQWXfaE2TZCY4aaB3rl8kR3c/znsYOZ3oTw=)
2: hYR6rq77HQceE2IcxPUKLad5kL4.roa (hash: +LqXV4/8ubLYmgyeWGpSO5Gif7f3L1TnP8kIXrA9Fjc=)
3: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (hash: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:52:e8:ca:b0:c6:e0:4d:25:9b:50:c2:bb:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=38698005adf5c3c6f391dd5f02e3cf09a729bba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:93:9b:12:70:0d:05:9a:1e:27:fb:34:31:
b9:16:bf:cd:0e:4f:49:69:c0:e1:c0:cc:47:f9:58:
fc:0f:fc:ea:e2:5a:11:66:35:ac:4d:bd:b4:f7:cd:
33:84:ff:f2:2a:1b:be:7a:a9:21:92:56:a8:4c:7a:
c1:db:07:6b:04:31:dc:f3:3b:cb:59:8a:fa:46:88:
04:07:b6:f3:4f:3d:f1:e7:42:18:96:9d:3b:07:05:
76:1e:fc:62:8b:b4:9e:86:c2:7f:94:ab:0f:93:56:
80:d6:95:1f:8b:d8:28:c7:bd:09:03:d7:90:d9:9a:
be:10:92:5d:9e:d7:57:27:82:d7:47:e0:60:bc:a1:
99:d3:2e:d4:8b:4d:0c:1b:d0:aa:16:2e:0f:a6:b0:
de:91:c6:9e:21:78:65:cd:94:71:3b:4d:bb:d9:40:
b9:17:3b:67:5b:16:68:0b:0a:0b:31:86:20:56:a9:
b0:23:ad:65:01:07:07:61:c7:b4:0e:ab:a4:68:59:
b4:15:e7:da:eb:91:4c:4e:ac:60:c6:01:23:e1:b5:
19:08:d3:44:fb:76:81:e9:7c:32:89:de:d4:1e:5d:
88:d8:f9:16:dd:33:2c:ce:1f:35:5a:fb:e2:22:37:
92:4e:7b:27:19:91:42:04:03:87:aa:a5:c5:28:e1:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:69:80:05:AD:F5:C3:C6:F3:91:DD:5F:02:E3:CF:09:A7:29:BB:A7
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e5:51:85:4b:aa:f6:1a:4e:d4:d9:a5:e4:2f:5b:b4:c0:b8:
6c:c8:a4:7e:f0:2e:55:9c:03:be:00:70:9d:27:84:cd:43:f1:
77:18:32:2e:eb:9d:57:df:98:46:cb:ef:48:e5:c8:0e:f9:67:
62:65:88:0e:0c:c9:1c:69:f2:75:06:e3:e8:98:86:4f:93:73:
34:67:4b:93:ed:82:79:6e:f3:79:65:dc:1a:07:33:01:c4:15:
fe:fe:66:03:5f:35:97:7b:8e:3c:08:74:a5:ee:ea:7b:1c:7f:
e4:e0:95:1e:2e:62:d6:65:1d:d4:c6:82:a6:3d:08:ac:64:5c:
ba:ba:e3:60:39:ec:ac:0e:51:ab:97:fb:59:98:62:f3:61:35:
70:64:6f:68:4a:a6:43:7c:db:77:ef:a4:59:83:2f:27:9c:79:
f6:f6:7d:24:b7:bf:dd:1d:72:b9:6b:fa:f6:22:04:d9:6f:96:
9f:3b:29:05:40:b1:1a:a5:58:e9:15:c1:06:8e:07:3e:c2:d4:
d2:af:30:bf:db:ef:da:80:c5:85:d4:44:d7:f5:40:04:89:b0:
6b:dc:a7:46:9c:5b:f7:c8:35:10:bf:d9:e0:db:34:12:79:cc:
15:04:19:bf:2b:27:4a:a0:92:57:62:11:7e:c3:0a:e6:99:37:
27:07:26:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:47 2025 by rpki-client