Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json)
Hash identifier: DDcVGtrC1L6Xt4F/XMFH60rl2wn1HqTNb486ej1Y8Vs=
Subject key identifier: CC:C1:2A:11:29:E4:73:15:0F:18:37:B7:41:14:C8:D5:0C:25:FC:A8
Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Certificate serial: 0194BCA9F650E98DDC85DE5F9D1EC17FBFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
Manifest number: 056E
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: /a+CqdR9n4ODUxh/2w7d5PNApEN94SUE2lDDQdrW5UI=)
2: nA6xks4oQE9N25Xp7uQGkNyo-7Y.roa (hash: F+E2ylwyKz3DO5lKloF7/MKQO4W4GhOJOnJmcBpu/7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f6:50:e9:8d:dc:85:de:5f:9d:1e:c1:7f:bf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=ccc12a1129e473150f1837b74114c8d50c25fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:66:6f:4b:5c:0d:c2:1d:82:5b:91:17:10:
c1:75:4b:61:1b:3a:ee:b7:eb:5a:9d:83:5c:0e:f3:
7a:ff:ad:3c:20:37:11:a2:5b:f1:bd:fb:4d:30:11:
39:11:8c:59:aa:e9:d5:8e:0b:3c:1b:74:29:e0:57:
79:30:87:cd:36:a8:73:65:2d:29:b1:34:cb:c0:2e:
0d:69:f5:19:cf:31:69:04:51:8b:e0:d2:13:6c:4f:
66:8b:8c:48:ed:45:51:bb:c0:8a:60:02:fd:e3:87:
32:32:73:47:34:d9:f6:88:fc:6b:ba:57:d1:2b:5c:
a7:5d:79:17:c3:ad:cf:a2:36:b3:bb:af:b8:b3:27:
e7:2c:21:43:1a:2b:37:8d:08:df:f1:1f:0b:49:ff:
68:1a:e2:03:07:b9:cb:5f:8d:48:d9:b3:15:54:ac:
dd:99:2c:95:ce:66:db:18:99:97:66:2d:63:cb:01:
bf:d6:d6:e3:a1:42:a0:de:1c:02:d0:0b:05:61:d5:
af:eb:cd:78:ac:92:f9:6b:fc:9e:70:4f:b2:b0:76:
de:06:80:7a:0b:8f:b9:24:c0:aa:dc:d1:eb:de:8d:
93:a5:de:50:a1:19:99:02:09:91:47:13:a1:98:6a:
02:71:76:b8:5f:9a:d5:d0:bd:f9:93:c6:d7:5c:91:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C1:2A:11:29:E4:73:15:0F:18:37:B7:41:14:C8:D5:0C:25:FC:A8
X509v3 Authority Key Identifier:
keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:cd:e5:c9:51:30:8f:0c:bd:67:81:2c:1c:45:40:44:9d:
dc:d9:55:38:10:bd:c5:1f:e4:19:59:8f:83:dd:23:2a:9a:87:
90:67:7b:25:cb:32:e3:d4:da:bb:0b:98:49:48:3d:77:55:42:
15:ff:ee:9b:bd:5f:5c:5d:86:cf:dd:d5:cd:34:e9:3a:ca:62:
d8:73:7f:22:d0:e6:8f:bd:82:16:ef:df:15:56:c9:c3:89:6b:
ee:09:77:86:c8:f1:43:f9:ba:ac:ed:24:9b:33:1c:42:4e:0b:
57:92:33:b2:dd:b5:4e:e5:26:a2:b3:77:75:52:70:d1:d2:b6:
d6:25:a7:75:68:d7:33:e9:8f:90:9b:54:9a:ca:83:5c:78:ef:
5d:b0:d4:bc:ac:ce:ba:9f:49:c3:97:40:c4:2e:0a:3c:d1:59:
05:21:cc:62:9e:9a:fe:0b:d6:06:6f:ee:8e:fb:ad:47:86:d1:
c9:fa:75:7e:b9:54:be:6d:51:eb:60:45:4c:ee:83:10:71:6c:
b5:6b:96:f8:e6:9a:15:8d:dc:30:e5:92:ec:56:fa:6d:d8:2d:
d1:cd:0e:29:5d:a1:6d:89:80:68:7e:e1:f6:7c:9a:64:16:5a:
7c:2f:b6:fa:e5:2d:99:55:5f:7b:88:1a:29:b9:6c:d3:a3:2e:
8a:9c:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:04 2025 by rpki-client