Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: uYcUizTVcs8PXDGAmtU8ODHNUFA4+qaRw/692HYEr8U=
Subject key identifier: A9:87:EB:EC:A5:BD:A1:DA:1C:CA:76:9B:2E:D9:0D:BC:FF:89:13:19
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 0194BC3C1A1E31B5CD981DDF856ACF094ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0B39
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: IsnsCj6nDePPR1aGKm7+8qCr4iykldtjqoj1nzRXj/I=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:1e:31:b5:cd:98:1d:df:85:6a:cf:09:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=a987ebeca5bda1da1cca769b2ed90dbcff891319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:0d:0e:fa:cf:db:3f:c6:88:d5:d1:a7:3c:
b4:3e:0d:ad:0e:b1:96:80:1d:6a:8a:18:5a:66:d0:
c1:28:a9:97:ba:7b:16:79:a0:ac:93:48:57:ab:55:
bf:f9:1c:a9:0a:f9:6c:33:d2:0e:9d:00:fe:cc:79:
f8:d3:28:bf:ac:79:75:9f:c4:26:a0:7f:90:06:25:
5a:33:53:aa:c4:0f:e4:b8:db:4a:80:93:6f:75:82:
04:7c:a6:b2:2a:a6:08:42:a9:ae:02:c4:b4:6a:34:
10:18:65:0d:d3:df:1c:99:3b:af:5c:15:be:25:b7:
f8:25:48:b5:11:ed:1c:ac:53:fc:d8:db:67:99:31:
ca:15:4a:40:6f:68:d0:0e:0f:39:61:53:05:ec:b7:
25:63:75:60:9d:74:c0:de:f2:e3:95:42:f6:1a:5d:
98:18:68:b7:1e:11:e3:5b:64:35:14:54:ab:1f:e7:
5e:d2:9d:3e:f1:c8:4a:ce:0a:dd:16:a4:bd:b5:bb:
68:0b:5f:cc:ca:e1:bd:cc:ae:4d:e4:45:2d:58:51:
08:a3:8f:3c:ff:01:04:dc:3d:90:c3:e9:76:9e:09:
16:81:c6:e2:f6:21:3a:5b:03:b5:f9:d1:82:f4:b4:
24:c6:c6:e7:34:51:80:53:9b:24:01:60:a0:8d:cb:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:EB:EC:A5:BD:A1:DA:1C:CA:76:9B:2E:D9:0D:BC:FF:89:13:19
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2f:6d:01:76:54:61:62:c5:42:38:12:b6:31:8f:1d:46:cd:
18:35:f0:cf:9e:11:9c:ce:96:09:42:89:9e:80:38:f2:9c:ed:
7e:ce:b9:f0:df:8b:30:3f:af:c5:2b:8f:0c:f8:58:ab:e3:29:
50:ed:2e:7a:de:d8:77:e4:f7:5c:b1:52:b8:f1:40:70:a6:23:
57:03:50:15:83:f9:d7:0b:b0:1d:43:28:ab:1a:ed:13:a3:1c:
0b:e5:ca:b0:6b:ef:0a:8b:f1:25:d0:9d:ea:4d:8f:2e:95:b7:
c8:12:c7:84:1d:44:da:25:bf:31:73:20:72:04:da:d8:60:ce:
cc:00:ce:b9:09:07:53:1b:d6:92:e0:9d:74:9e:a8:86:3b:06:
07:75:f0:d4:1e:7d:02:1b:ef:e8:59:ce:8f:27:c2:6c:10:31:
99:a6:08:e3:c3:fd:74:cb:37:d2:6c:be:84:0b:26:9c:be:23:
e3:99:64:64:01:a3:08:3b:f5:ba:94:a3:84:73:b5:9f:d3:f6:
3d:14:d0:69:26:ef:3d:9b:a7:f2:f1:81:29:30:d2:91:fb:74:
d6:f9:52:17:4e:00:0c:5a:ae:18:f0:39:24:73:9a:ed:e4:46:
49:3e:50:bd:09:53:c6:4f:6c:b6:e5:2c:4a:e2:f2:cf:8f:7d:
d6:95:70:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:58 2025 by rpki-client