Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json)
Hash identifier: WdBC8MeEbHgaBZ4WNyqybyoX9YtLiXY3tMXP5iCNcMo=
Subject key identifier: DB:C4:44:A0:9C:CF:D9:6D:EA:A8:7A:26:32:F6:DC:A3:BE:B2:A0:B6
Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Certificate serial: 0194BBCEF1E057BD5865505FC17FAFD9A129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: QuIzNBR3gj7c/4fhuMXMkKpK2LPRfGbQo8zkmDMpVyk=)
2: tsQCK0at0tvh2TQxSMohTv0qJJo.roa (hash: 6ge8utmi5hP9DNzFySVDCcGypw9lo+O2IamCCwk3yDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f1:e0:57:bd:58:65:50:5f:c1:7f:af:d9:a1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=dbc444a09ccfd96deaa87a2632f6dca3beb2a0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:80:1f:ab:ac:4e:4c:84:31:dc:b6:92:25:a0:
e6:3f:32:2f:53:14:01:58:f7:63:d3:64:49:e6:fd:
8d:29:c6:72:fa:f8:26:87:60:43:a5:2e:b4:29:b2:
65:d9:0e:94:8f:23:9f:27:da:50:56:5c:95:6c:13:
04:c5:0a:44:f5:af:00:33:5a:df:51:34:98:ed:db:
5b:55:0c:2e:a4:62:b0:3b:20:b1:c8:92:88:9d:11:
2e:6b:80:5b:3d:c9:5f:7e:2c:58:f2:3f:1d:a9:cc:
b1:4d:73:f5:39:39:51:a4:d9:89:f5:a7:d2:e3:a7:
aa:42:1c:41:ba:99:03:53:66:df:e3:7b:ee:b4:28:
35:41:02:0e:fa:63:14:58:43:02:b3:1c:d7:33:a0:
3a:e9:af:b8:ee:95:9f:26:a9:db:50:49:07:62:22:
d9:9d:02:58:bc:3b:30:14:5a:aa:dd:d5:9b:1c:a2:
ea:e1:91:42:30:19:79:43:0d:db:89:30:d8:a7:67:
3d:17:ed:d1:26:5c:e2:aa:5e:12:6d:62:55:ea:46:
48:13:0b:9b:ee:23:5c:8d:bd:f9:48:d4:5c:c8:99:
6b:e8:f6:ac:5c:ec:ca:dc:56:9e:cb:87:5b:cb:40:
d1:45:2d:7f:f6:94:15:14:e5:f7:3b:f1:b3:f9:a0:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C4:44:A0:9C:CF:D9:6D:EA:A8:7A:26:32:F6:DC:A3:BE:B2:A0:B6
X509v3 Authority Key Identifier:
keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c2:ce:7c:af:c7:fd:c0:32:cf:2d:db:4d:df:53:02:fc:83:
ca:90:03:3e:b6:2a:cb:92:92:52:40:e0:5d:b0:a5:80:ec:d2:
ce:bd:04:6e:ef:49:b4:a5:e4:09:b6:a6:4a:09:05:88:78:27:
0e:d2:58:c1:dc:1b:8f:f4:a4:f4:f4:9f:fb:4b:93:68:ac:52:
e0:db:6d:1f:11:dc:98:b7:a3:98:79:8a:25:2e:ee:02:92:90:
01:04:87:6e:e8:a1:b3:3a:d1:96:ab:b2:bc:73:d7:fd:a7:9b:
ac:b4:34:ae:d6:25:42:ef:4e:c4:2a:72:30:b6:b1:30:c3:54:
d8:3b:4e:66:c6:2c:f6:78:97:ed:ab:0b:02:6a:c3:d7:1f:3c:
e5:a9:05:e7:8c:dd:d0:03:e3:84:56:54:d1:a0:ed:a9:53:20:
ca:50:c6:4c:8e:b3:82:b8:16:f7:85:f4:f2:d0:00:c4:ea:af:
01:5a:c4:36:c3:e9:fa:ce:3b:9d:18:00:24:b9:86:8a:44:52:
ef:d6:81:3d:fb:84:6e:09:ab:64:e5:70:2e:63:b3:a2:c6:fc:
19:f3:8e:51:25:1f:0e:36:ce:26:66:23:88:ad:27:86:30:e1:
85:ea:f8:6f:3f:7c:72:c4:4d:0e:d8:53:5d:66:a2:96:98:6a:
0f:91:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:36 2025 by rpki-client