Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
File: CxsxjlBXocEDQWB83d2ttG1xq_U.mft (raw, json)
Hash identifier: dlpf5CjIne1JB35osDFbQBokp04RmpKbpQbExDxvp1U=
Subject key identifier: 4A:35:EB:E9:9C:BC:D9:45:C4:BF:47:6D:2A:AE:D8:E3:1C:42:3B:12
Authority key identifier: 0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
Certificate issuer: /CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Certificate serial: 0194BD17ADB4EE3C02326C918A477DA58736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 6HOoB-xFW732_7qK2qidP05AsQk.roa (hash: hf9bIGWJZ6Oc66PzG2IxognJ3wYESBBpOFaaQJOqtDo=)
2: CxsxjlBXocEDQWB83d2ttG1xq_U.crl (hash: OIAe+X5cYMb12J2ojCxoBsDcVlBABkGYi6CQdKxhj9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ad:b4:ee:3c:02:32:6c:91:8a:47:7d:a5:87:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1b318e5057a1c10341607cddddadb46d71abf5
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=4a35ebe99cbcd945c4bf476d2aaed8e31c423b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:5b:42:0b:7d:68:10:3f:de:8e:44:aa:51:
dc:78:e8:b0:15:0a:32:ec:50:52:39:a4:3f:cf:8e:
cd:46:d9:73:9a:5e:e4:d2:d3:dd:e4:65:93:07:b6:
9e:f6:c8:d8:39:43:b8:0f:a2:8a:7b:d9:6a:dc:dd:
3b:47:94:d2:bb:86:91:56:f5:8d:e6:76:e7:08:0c:
6d:73:96:04:56:21:18:0a:35:d2:bf:f7:6d:43:09:
8c:1d:c3:20:24:62:10:91:e3:5b:73:64:e8:4c:dd:
69:d3:37:c7:e7:76:28:c1:3b:86:56:68:a4:17:c1:
58:d4:35:52:2b:6a:31:01:27:ed:28:a5:27:58:68:
13:0f:fe:f2:f8:04:56:cf:24:0e:11:05:27:30:09:
ad:28:c6:41:3c:f8:39:1e:56:8d:b1:b9:d0:26:e6:
05:77:68:fc:eb:41:cf:44:4e:d0:f2:da:20:7e:94:
ee:54:dc:64:ea:b3:ca:4a:35:52:60:96:3d:c0:fe:
67:cc:70:9d:b0:8d:45:b0:6a:cf:88:64:73:a4:6c:
bc:0e:4c:c2:48:b6:c7:95:9e:ce:f9:6a:9d:14:50:
1c:14:8a:12:bb:48:31:d0:58:c3:c6:9b:70:86:82:
2e:e6:8e:67:e9:10:93:b2:2c:53:11:7d:42:e2:f9:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:EB:E9:9C:BC:D9:45:C4:BF:47:6D:2A:AE:D8:E3:1C:42:3B:12
X509v3 Authority Key Identifier:
keyid:0B:1B:31:8E:50:57:A1:C1:03:41:60:7C:DD:DD:AD:B4:6D:71:AB:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxsxjlBXocEDQWB83d2ttG1xq_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4b4df7-d72b-474f-963f-59e6a6d4d576/1/CxsxjlBXocEDQWB83d2ttG1xq_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2e:06:16:c6:3e:64:74:b7:d2:a4:35:e1:90:e0:a7:ca:d4:
dc:72:13:02:92:d2:95:52:e7:12:04:cd:c6:cc:05:9e:bd:10:
9f:87:88:02:aa:50:4c:3e:e6:c2:24:1e:64:b5:aa:72:5a:34:
3b:6b:14:29:2f:51:78:ee:e8:fe:dc:0e:29:54:e5:21:02:65:
0c:b5:e0:bb:4e:f3:d5:f1:06:29:b2:e3:77:85:98:ce:11:cd:
20:45:ec:5a:52:7c:e3:ee:ce:fb:8b:56:1b:e1:03:c9:9d:65:
27:a1:5d:ba:85:e4:cb:b9:71:d4:cc:19:45:f8:87:63:0b:a3:
60:62:e1:4d:e0:d2:9e:f4:b7:a6:f9:51:d2:2c:07:7d:8b:35:
50:cd:dc:b7:e0:75:80:7d:8b:5a:fc:d8:42:c8:86:48:fb:f1:
15:6a:3d:19:16:24:11:c1:80:47:e5:79:b5:c6:82:c4:7c:32:
e1:e5:b8:b3:fb:0a:6c:6c:3e:ef:10:78:bd:c3:46:ef:0c:fd:
72:71:8d:38:bd:31:d8:ed:ba:b7:cc:0e:80:d5:11:f0:6b:9a:
96:42:94:bf:88:db:75:b5:d8:cc:f8:f0:ef:17:cb:bf:70:5b:
15:f3:61:b8:5c:4b:f5:ce:f8:02:25:24:bd:e9:a3:0d:8f:57:
05:e3:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:05 2025 by rpki-client