Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: FxGyWINr5vQaLPKp6gxqWAH4gltcrvuDl2rj4Uyf8+E=
Subject key identifier: 4F:41:F3:2C:21:B2:D0:F4:C7:94:79:F1:41:96:FB:BF:9A:2E:AA:95
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 0194BC3C5017901F15C25CC3D65A230D1991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0D14
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: 1epWqIw2yrI8NeIvV2f/wWiNpzAJa95EPYe6yNWhXRQ=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:17:90:1f:15:c2:5c:c3:d6:5a:23:0d:19:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=4f41f32c21b2d0f4c79479f14196fbbf9a2eaa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:f8:d7:c9:45:81:ef:0f:80:8a:57:5a:58:
36:ea:0e:ef:8b:96:69:9d:96:99:3f:dc:70:e9:c0:
ec:fa:d7:d1:41:c9:36:b8:d4:55:b9:f4:80:31:1e:
6f:5c:96:94:ad:39:50:10:56:75:e9:9b:55:10:6a:
34:48:8d:a7:4f:72:78:fe:df:10:17:52:1d:0a:64:
2a:de:ae:40:3a:f4:da:9b:cf:8a:89:5f:2a:30:de:
93:62:b9:a0:8d:cf:b1:3e:3a:9d:d1:d1:14:0d:33:
38:82:ad:5e:00:92:9a:24:a8:5a:a7:32:0b:3f:19:
d6:5b:59:22:02:38:b3:e6:01:14:5d:7b:48:5a:bb:
4a:81:ce:84:f9:a4:be:fb:d0:04:40:f6:e9:71:e5:
49:9b:f4:77:56:55:6a:54:78:b2:d1:24:b5:a6:ff:
c9:63:6f:90:4b:b5:44:ef:f6:5b:90:aa:43:9d:73:
1c:23:25:39:0f:99:ef:e3:11:a3:b7:e0:e4:ec:a0:
4a:7c:06:20:2e:3b:f9:51:94:95:27:e4:18:a5:ae:
cd:f1:69:8b:09:e2:32:71:c9:09:9b:80:11:66:29:
d6:57:0c:40:0b:db:44:9a:fa:1e:cc:54:3e:8a:83:
6a:ce:3b:12:00:25:c7:9d:74:fc:f8:b2:9a:ff:9f:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:41:F3:2C:21:B2:D0:F4:C7:94:79:F1:41:96:FB:BF:9A:2E:AA:95
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:57:95:a5:79:b9:97:d4:2a:fe:99:37:b1:28:c3:82:11:56:
a4:8d:29:85:b8:2e:ec:38:25:0d:1b:b6:5c:dd:ea:e9:97:4e:
65:eb:10:61:4a:8c:5f:ca:69:7f:69:e5:e4:24:de:e8:75:3d:
bc:7c:f7:89:8a:76:ec:33:61:fd:a4:b0:82:47:cd:d2:40:9a:
d8:54:ff:42:43:15:b4:7e:c7:9c:0c:f9:01:83:f9:59:d8:c2:
60:f6:08:61:f2:ed:83:2d:b3:1f:94:f9:34:82:f0:50:6d:37:
7f:35:b9:ef:9c:84:4c:8e:6b:5c:e3:8a:3c:57:18:07:49:6a:
a3:38:32:ef:3e:48:db:45:cc:da:aa:28:05:69:cf:00:b9:6e:
e5:93:81:4e:40:37:0e:71:db:43:49:f0:85:ce:ec:90:4a:82:
5d:fa:e5:0c:7e:0b:de:c9:79:ea:aa:3e:3f:de:c9:d3:55:6f:
e9:10:43:24:f8:c5:1a:81:45:a5:fe:5e:eb:1a:5f:c0:2f:47:
99:a7:c1:84:dc:23:f8:ed:84:de:f2:bf:8b:0d:45:c2:de:48:
52:88:db:61:ed:56:85:c7:a4:23:54:ef:f3:4f:da:dd:a3:ee:
03:3d:7d:14:89:8f:26:90:76:eb:d8:81:22:de:a3:51:20:93:
eb:ee:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:12 2025 by rpki-client