Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
File: cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft (raw, json)
Hash identifier: rVihxvjZ7b59cnQgfdUeaIA24FgQ71HjHlU3Ty0WSPc=
Subject key identifier: F3:50:E6:00:7C:54:9E:23:B1:C1:3B:51:54:C8:A7:7C:0B:88:30:D5
Authority key identifier: 70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
Certificate issuer: /CN=70980b60e0d30e498de1baa645a1be57a952049d
Certificate serial: 0194BC3C48713F444E8DF2A70C9E24F48EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
Manifest number: 076B
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: NOXjVjJhFkrwhntmdhaI015mrJA.roa (hash: 0zhl6bNJIqtyw3r+CngdcF4zpHGL2Q4MHDezzg25GbA=)
2: cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl (hash: Q/54j4SZTt7WJji0cI0Zp50CFCQiw/p7dPygXQDgRtU=)
3: o1Invfm5a-IuNysIWHt4ChcWwgI.roa (hash: gMX4tPW+RL6Xt4ksxgpRLp72pxNXeej67eQtVQ5iB/g=)
4: t6StEaWnLoumzmRC7W_1uRzyt3M.roa (hash: 7euynLbOtDikn3nhpWGoBQ7LeWzX6L0xNZZA3gqGYgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:71:3f:44:4e:8d:f2:a7:0c:9e:24:f4:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70980b60e0d30e498de1baa645a1be57a952049d
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=f350e6007c549e23b1c13b5154c8a77c0b8830d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:6d:47:50:46:b1:98:9c:bb:11:ae:1f:ee:
f4:6a:ab:a0:30:bd:55:0b:01:8e:3b:60:2f:f5:37:
4d:70:c0:38:83:a3:29:df:90:45:9c:f4:e7:a9:e1:
79:56:bc:17:ed:17:7c:d3:11:47:c2:8d:4c:96:21:
11:00:c2:39:fe:18:ed:fb:27:68:5c:c4:46:da:d3:
0d:34:47:75:59:0d:09:20:40:e2:61:2e:b4:5c:66:
27:0c:6e:74:33:56:b9:01:6d:f6:4e:47:28:0d:6e:
75:07:82:22:72:b3:73:84:ac:e2:ec:ae:bf:c8:60:
be:c3:8b:b7:bb:d6:37:48:8b:49:41:93:86:43:6b:
76:f3:d9:cb:6b:de:ab:54:48:0b:64:76:32:74:d5:
66:64:70:28:ab:ec:81:19:34:f4:66:23:0f:8c:89:
9c:9f:12:05:23:94:ad:c2:bb:f1:2c:c8:8b:ec:f4:
1e:a2:60:a5:15:23:a1:83:ff:11:60:a8:ed:d9:4f:
f4:4c:1a:29:95:ca:c0:03:03:83:96:7a:a8:7a:a6:
86:84:f8:a1:72:0e:36:74:b1:bb:bb:20:fb:b1:d3:
2e:3b:88:d8:0d:02:0a:3b:a2:a8:9c:60:07:ee:a8:
e8:cd:50:5a:6d:7b:70:31:bc:61:b6:cf:8f:79:d5:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:E6:00:7C:54:9E:23:B1:C1:3B:51:54:C8:A7:7C:0B:88:30:D5
X509v3 Authority Key Identifier:
keyid:70:98:0B:60:E0:D3:0E:49:8D:E1:BA:A6:45:A1:BE:57:A9:52:04:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJgLYODTDkmN4bqmRaG-V6lSBJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d56c11-25e1-49c8-8863-7f37b778c011/1/cJgLYODTDkmN4bqmRaG-V6lSBJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b8:ce:6e:76:fc:70:45:d0:17:62:24:fc:f5:0a:a1:fb:2f:
ab:ce:dd:f9:dc:d1:9f:50:3c:ba:62:f0:68:b2:80:b9:a4:9d:
3d:ef:2e:72:a6:c3:72:df:64:19:7d:58:57:b7:dd:84:f3:ca:
2a:e4:4b:db:b0:05:51:08:56:84:e9:19:71:6d:f4:e3:5f:95:
ef:9a:0c:b6:3c:6b:45:ad:e7:79:20:09:77:33:7a:b9:d4:94:
13:ec:b4:8f:e4:bd:81:ea:f2:40:dc:59:41:ea:c5:60:f4:a2:
c9:26:49:4f:99:34:01:39:4d:68:4a:f0:24:6d:6c:8e:6b:53:
85:5a:f7:ae:08:6c:08:c2:1a:c5:1a:8b:4c:7e:94:08:20:bc:
21:53:76:02:d7:62:27:aa:f5:e7:e8:b9:6d:58:29:79:f9:2a:
82:58:6e:2f:1c:30:4e:53:12:85:2b:ac:5c:27:fa:a7:68:10:
cc:ca:51:af:ca:fb:1e:f1:6b:cd:4e:1f:ae:eb:7d:63:1f:d4:
a1:55:6b:7f:c1:7d:75:d8:77:3b:89:01:93:04:f1:8d:68:a9:
a3:bd:d0:f9:3f:2e:9f:96:12:ef:96:9c:e8:5b:17:e4:1f:0c:
bd:3c:98:d9:40:46:d4:56:b9:f8:0e:44:6d:02:02:a6:c1:f3:
db:72:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:04 2025 by rpki-client