Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
File: cmcwWIWc_XASlB2JY63M9jAKGe8.mft (raw, json)
Hash identifier: 5MLyneA89tNIqvbCQ7XE+e+G6R4MUNlCgj1b8KmHvbY=
Subject key identifier: E1:A3:6D:ED:26:8D:F9:49:BA:ED:D7:85:4B:94:D4:A3:BE:9C:C7:63
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Certificate issuer: /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial: 0194BD85988744E64E7241D0D6D391CA23BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: 1-CBPCQEhah96ufyUbT9Pgx0vfDA.roa (hash: a/E265pRySYxwfkb5CZMhMIiUvhNhX2eZiajI2HOkkM=)
2: cmcwWIWc_XASlB2JY63M9jAKGe8.crl (hash: UmOm8a5vZEvtJTJOStxcxKbVtPaar/LolXcllAf2YsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:98:87:44:e6:4e:72:41:d0:d6:d3:91:ca:23:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=e1a36ded268df949baedd7854b94d4a3be9cc763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:d5:c0:99:45:d6:22:7f:a1:b5:45:d4:36:
3f:9b:6b:cf:41:c2:43:66:1a:0d:03:e2:a0:f7:04:
ae:31:36:8a:c9:29:1a:18:fc:34:a2:68:61:66:2a:
8b:b1:ac:11:90:b0:66:11:d0:c2:52:de:8a:83:c5:
4d:0a:67:a1:86:fd:8c:b4:e8:32:fa:da:ab:55:0d:
23:07:c8:ad:37:30:6b:c8:e6:82:d0:b8:fb:dd:c5:
61:07:81:28:b7:87:7c:c9:32:9d:98:db:9a:18:01:
4e:81:52:12:f1:24:e2:40:07:f6:8d:fa:bc:85:cd:
7f:1f:6e:2d:a1:b4:ff:1f:d9:9b:52:c7:19:f9:07:
6e:95:e8:af:55:bc:a9:5b:12:cc:95:8c:89:84:36:
e5:98:9a:d8:d3:d4:1d:60:0f:18:0e:7c:81:1c:65:
8d:80:e7:c9:48:b6:6f:a6:6f:1d:ec:8e:6e:6a:e9:
04:39:8d:15:47:6c:4e:a7:8f:34:a0:31:13:2f:65:
8a:ca:13:9b:40:0a:db:e4:97:27:df:b1:88:c6:ff:
8f:33:25:38:ba:e8:bf:18:cc:c1:83:72:34:9d:06:
c2:49:f4:9c:df:0c:94:39:e2:a5:75:14:b6:e1:a2:
62:ec:dd:4d:43:ee:d6:0f:ca:d6:87:c7:10:0f:23:
39:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:6D:ED:26:8D:F9:49:BA:ED:D7:85:4B:94:D4:A3:BE:9C:C7:63
X509v3 Authority Key Identifier:
keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:64:70:08:a5:17:33:3d:16:df:34:94:a1:be:3f:9e:a7:16:
b9:97:63:65:16:15:f5:6b:9e:bc:ac:df:5d:6e:cc:f6:7a:48:
49:f8:e3:b7:f0:66:ae:1a:45:59:fc:ec:b9:fe:f1:3a:28:67:
26:9e:2e:26:87:89:1b:2f:c8:fa:a9:ca:32:87:97:21:c1:ac:
61:2c:8f:0e:40:6d:14:e7:6d:8d:17:ad:65:b6:a3:49:0b:46:
23:47:6f:1b:3e:89:ee:19:67:11:4f:36:21:8d:0f:6b:a3:dd:
36:b2:9e:45:62:1c:91:cc:a1:d4:2a:17:7a:17:ed:3b:7e:47:
fb:8f:80:bf:c7:87:31:0a:76:14:1a:43:12:df:0c:87:07:63:
33:c0:95:f8:6c:8e:9a:f2:56:01:d2:f1:33:8e:65:23:8c:e1:
0f:c7:5c:ea:64:4c:41:16:a9:de:c7:4e:b9:6a:92:c3:b5:49:
56:77:d3:ff:97:d6:ce:24:ad:b5:67:20:26:cf:64:0b:11:d3:
3a:be:85:21:ca:c8:1e:27:37:d6:45:3b:42:0e:5b:ab:00:dd:
25:a9:9c:d4:eb:40:83:84:a4:2c:03:d2:70:7b:a4:f7:02:de:
9f:4f:3f:24:ef:20:82:ca:27:6f:56:2b:f3:f9:16:ad:93:78:
d2:06:18:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client