Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
File: cp5GIMWZHgbhzAVunN0d4reViHM.mft (raw, json)
Hash identifier: fdI3lLEaz7sKkWuNlj9+dPXJBBkr9qIrTq781WcZcZQ=
Subject key identifier: 11:F1:EA:BE:30:19:F3:C3:14:0A:8D:7D:C3:81:2E:6E:82:D1:5E:9C
Authority key identifier: 72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
Certificate issuer: /CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Certificate serial: 0194BBCE0CE7A781726AC4510FB6813FB2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
Manifest number: 0280
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: cp5GIMWZHgbhzAVunN0d4reViHM.crl (hash: nN8IRRnpkbgzh2oPI+meFTDHGDQREfmkkj7VaRI1XyI=)
2: sFvs_prtwKu42YxR1lLYA6s-LfY.roa (hash: B//Muv+RgtWM9+j4D4TMR775xHt5nXHGTfaVRYpWbRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0c:e7:a7:81:72:6a:c4:51:0f:b6:81:3f:b2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=729e4620c5991e06e1cc056e9cdd1de2b7958873
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=11f1eabe3019f3c3140a8d7dc3812e6e82d15e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:bb:7f:46:8b:2e:46:fc:4c:26:67:c1:31:
cc:37:cc:4d:69:1c:81:82:14:39:a6:3f:ad:25:c0:
f2:9f:f7:6a:3c:94:11:1a:5b:6c:5e:33:84:bb:8d:
d2:11:0e:23:7e:22:0e:63:90:15:ef:fc:6d:96:f0:
38:46:12:03:7c:de:20:32:b2:fc:c6:ea:6f:59:9c:
78:75:23:4a:87:d6:72:07:e5:5e:41:18:05:f5:77:
a9:2d:43:78:8f:d3:80:ec:6a:83:87:b8:cd:17:f2:
06:86:54:f2:7c:4c:64:56:70:ae:9b:ca:ae:6d:1a:
16:fe:7c:75:72:1b:88:6b:87:10:88:cc:88:8d:46:
08:ae:e4:43:5c:ab:98:54:10:7a:95:a5:29:62:15:
ae:7c:be:8f:0d:f5:31:86:38:27:20:cf:56:9a:51:
53:ca:8d:08:09:a7:20:ae:20:1d:38:04:ac:24:ff:
8e:d6:ff:0b:db:6c:09:76:36:09:cb:9b:56:33:32:
32:8c:8c:93:c5:e5:61:d5:6a:05:91:1f:bb:7c:e0:
11:4b:08:ab:ed:71:d4:1b:60:a4:a0:a1:98:c3:51:
7f:b5:3b:5d:0c:2b:2c:49:0f:38:25:86:06:d7:0b:
06:99:ca:02:49:0d:a4:41:9f:1b:ee:4d:5a:e2:cc:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F1:EA:BE:30:19:F3:C3:14:0A:8D:7D:C3:81:2E:6E:82:D1:5E:9C
X509v3 Authority Key Identifier:
keyid:72:9E:46:20:C5:99:1E:06:E1:CC:05:6E:9C:DD:1D:E2:B7:95:88:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cp5GIMWZHgbhzAVunN0d4reViHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d4739e-affc-49ba-8694-20fe18f7e128/1/cp5GIMWZHgbhzAVunN0d4reViHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:59:52:39:70:80:9b:dc:ff:fd:5b:02:26:4a:a7:f5:e5:
c7:c3:7d:d7:6e:f3:a3:e5:cc:75:6d:ce:e7:96:ca:9e:0c:f6:
dc:2d:bf:c5:23:1f:05:b1:17:87:8f:ef:52:ac:1b:95:a1:e3:
9a:fb:99:14:67:56:28:a0:b4:95:7e:c7:e2:ca:89:80:7a:46:
83:af:81:8e:cb:24:ad:f7:64:ff:04:b6:b9:85:31:39:05:c9:
22:4a:7a:f6:eb:31:59:89:b6:6f:6e:fc:93:3a:09:74:c6:16:
9a:7f:23:93:ee:02:ff:b3:62:3a:37:c5:01:64:c9:37:59:ef:
ba:70:51:3a:ca:3b:9c:29:18:00:a6:53:29:a1:45:19:1a:0c:
32:38:86:52:38:88:b5:2a:0f:2f:d1:95:14:2e:38:b7:d4:71:
f6:d5:0b:64:58:4f:d1:80:f7:26:84:13:d1:39:ca:8a:32:c7:
ba:07:27:a1:b5:5f:da:a1:0e:2c:b0:b3:13:d6:10:42:e9:c5:
ee:68:89:78:03:18:20:2e:e0:41:3d:b5:f5:6d:ff:fe:45:07:
41:ac:53:44:60:2e:12:74:0c:0c:50:df:c4:fb:b1:be:07:41:
30:e5:3e:77:ca:e3:1b:1e:13:51:20:6c:03:be:36:00:75:78:
87:a3:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:36 2025 by rpki-client