Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: 82hdbUL8Au1eaddqurwKGIJxcVrKcgcAksOb5R1Y300=
Subject key identifier: 6F:B5:31:B1:A2:88:8F:C7:A4:4C:83:4B:EB:11:D0:BC:86:08:3E:36
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0194BC3BD09C228C376909D8E3AD9EC046E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: dSuKrkvNV4ZSuHeH0xjMy8uL4dk/2Jk8DGJbkiEbJpA=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d0:9c:22:8c:37:69:09:d8:e3:ad:9e:c0:46:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=6fb531b1a2888fc7a44c834beb11d0bc86083e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:65:67:bd:3f:35:52:56:0f:e6:88:21:0f:
c1:ed:68:56:a8:ed:10:b0:b1:78:45:11:6b:02:88:
ff:48:21:8a:10:3f:e3:8c:95:1e:0b:4f:3d:1b:40:
22:f5:c0:e2:16:93:fd:45:0c:7b:e3:34:fb:b1:4d:
74:92:77:fd:d3:c5:57:56:16:a0:ca:74:3e:1b:f6:
85:a2:1f:eb:81:5a:8a:10:5f:34:40:94:b1:68:e7:
33:92:6a:bc:1b:a0:7a:44:23:a7:6a:62:48:80:16:
a8:04:4c:7b:00:11:47:cb:68:e9:8b:e2:b1:7a:eb:
71:6b:d7:0a:d3:4d:07:ad:5b:ff:41:4d:4e:5e:57:
99:38:58:41:b1:05:87:e8:dd:da:e6:65:96:34:00:
fc:40:23:97:2a:9f:b5:00:3d:2d:df:3d:ec:ec:35:
11:c0:aa:1a:83:b8:8f:c8:02:73:00:53:28:17:b5:
a7:21:22:a4:14:d9:a5:e1:94:23:00:14:db:95:07:
3f:e4:1a:8d:74:6f:55:7d:5f:de:b5:46:29:52:c0:
32:2a:1d:5b:41:32:d9:00:f0:eb:d2:23:28:24:ad:
9b:58:b9:1c:0b:44:3d:09:91:39:8d:a2:d8:c6:9b:
82:bb:af:74:63:fd:98:6e:1d:42:81:3f:74:85:1f:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:31:B1:A2:88:8F:C7:A4:4C:83:4B:EB:11:D0:BC:86:08:3E:36
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2e:8a:72:63:6d:87:47:1f:58:bd:29:b4:c5:c8:de:68:7e:
f5:d7:8c:1c:26:18:9c:59:a6:f7:54:ec:2d:34:3c:81:4f:c0:
54:96:75:63:63:9e:93:b2:24:fd:88:fb:c6:db:4b:ee:9b:3b:
a8:3b:30:b0:92:c3:c2:3c:32:82:f1:26:c6:24:73:f4:94:35:
84:e6:82:f0:80:a7:01:a1:57:8d:40:fb:44:23:8e:47:5f:b1:
41:7a:f6:c0:d1:11:ef:e8:ac:c2:4c:f2:f0:8c:ed:47:da:f8:
20:bd:db:d5:81:a0:ef:23:db:90:35:89:3e:d5:e5:e5:73:d4:
d4:db:75:97:76:5f:ac:9b:d5:31:4f:22:1d:f3:a3:3d:fa:81:
78:b4:6d:af:ae:d1:36:8a:19:92:74:1f:07:d1:14:4a:06:be:
3c:28:7f:7e:c3:52:a6:b7:08:d2:d0:50:3a:12:ba:a8:1f:b5:
77:48:5c:8a:d6:1e:87:42:dd:bf:72:03:9f:d0:85:bf:6e:70:
da:81:4f:1f:1c:0f:c1:aa:82:22:89:96:c5:ae:70:cc:cb:c9:
a9:0c:da:be:24:49:f9:b5:60:74:6d:31:a3:24:31:fe:6e:18:
51:b2:7f:12:1f:86:03:57:92:a9:c2:47:54:76:a6:f7:cd:d5:
3b:31:e7:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9CcIow3aQnY462ewEbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5N2UwNTUxNmZjODc5MzQwNjg2OGI4MTA5ZTNjMDQ0Yjcw
MjcxNmMwHhcNMjUwMTMxMTIwMDI0WhcNMjUwMjAxMTIwMDI0WjAzMTEwLwYDVQQD
Eyg2ZmI1MzFiMWEyODg4ZmM3YTQ0YzgzNGJlYjExZDBiYzg2MDgzZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsdlZ70/NVJWD+aIIQ/B7WhWqO0Q
sLF4RRFrAoj/SCGKED/jjJUeC089G0Ai9cDiFpP9RQx74zT7sU10knf908VXVhag
ynQ+G/aFoh/rgVqKEF80QJSxaOczkmq8G6B6RCOnamJIgBaoBEx7ABFHy2jpi+Kx
eutxa9cK000HrVv/QU1OXleZOFhBsQWH6N3a5mWWNAD8QCOXKp+1AD0t3z3s7DUR
wKoag7iPyAJzAFMoF7WnISKkFNml4ZQjABTblQc/5BqNdG9VfV/etUYpUsAyKh1b
QTLZAPDr0iMoJK2bWLkcC0Q9CZE5jaLYxpuCu690Y/2Ybh1CgT90hR/bnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+1MbGiiI/HpEyDS+sR0LyGCD42MB8GA1UdIwQY
MBaAFAl+BVFvyHk0BoaLgQnjwES3AnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQt
MzBiZWNmYzFiMzExLzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hNTAzNzItZGEzOS00ODJlLTlhZDQtMzBiZWNmYzFiMzEx
LzEvQ1g0RlVXX0llVFFHaG91QkNlUEFSTGNDY1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei6KcmNt
h0cfWL0ptMXI3mh+9deMHCYYnFmm91TsLTQ8gU/AVJZ1Y2Oek7Ik/Yj7xttL7ps7
qDswsJLDwjwygvEmxiRz9JQ1hOaC8ICnAaFXjUD7RCOOR1+xQXr2wNER7+iswkzy
8IztR9r4IL3b1YGg7yPbkDWJPtXl5XPU1Nt1l3ZfrJvVMU8iHfOjPfqBeLRtr67R
NooZknQfB9EUSga+PCh/fsNSprcI0tBQOhK6qB+1d0hcitYeh0Ldv3IDn9CFv25w
2oFPHxwPwaqCIomWxa5wzMvJqQzaviRJ+bVgdG0xoyQx/m4YUbJ/Eh+GA1eSqcJH
VHam983VOzHnKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:36 2025 by rpki-client