Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
File: cRJRMUT46vqDbEzc9PdY0cy2cgo.mft (raw, json)
Hash identifier: cvkSNSCPO+5MxaA/KSfvm/CmAnKO8cJp/IGzyN2HxUA=
Subject key identifier: EF:18:C3:82:37:13:26:6B:7B:19:44:9D:A0:9E:B1:04:3B:B7:9C:09
Authority key identifier: 71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
Certificate issuer: /CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Certificate serial: 0194BC04A906D15D1879C77557CEC53C7ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
Manifest number: 0CF0
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: BxEUAThM-kvROTVKplPSESs7hAg.roa (hash: 0mkufGxGJMEMwQK9DTn258kOier8V3h24PYvgtJUzDM=)
2: cRJRMUT46vqDbEzc9PdY0cy2cgo.crl (hash: ctttZoKm3k0THGDgpzm/QYGI02OdSFOix2wUhO6Zg+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a9:06:d1:5d:18:79:c7:75:57:ce:c5:3c:7a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112513144f8eafa836c4cdcf4f758d1ccb6720a
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=ef18c3823713266b7b19449da09eb1043bb79c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:cd:37:2d:db:7f:1b:15:48:b6:13:51:de:
ca:f8:63:89:53:35:41:0d:6e:55:64:cd:e4:73:2b:
dd:84:89:ab:a9:8c:8e:a6:12:7d:14:ff:fb:95:eb:
30:df:c7:3b:0e:72:bd:04:85:b6:46:77:ca:14:37:
db:7f:ca:dd:0b:3c:fd:58:11:ea:64:dd:1b:67:b2:
9a:89:5e:0b:a3:03:2e:11:2c:8f:cb:f5:b1:93:77:
a3:ec:11:6e:6f:41:b8:38:f4:84:10:0f:8d:d4:01:
8a:25:78:d1:51:b0:bb:7c:99:b6:c9:5c:21:e9:3b:
78:c3:9c:7d:9a:3e:2b:c2:77:a9:47:7d:dc:b0:20:
f1:25:41:7d:ba:6e:f9:1b:9e:27:9d:52:cc:0d:1c:
21:fa:95:06:90:4d:ff:7c:52:da:d2:de:ec:ae:d8:
cb:0d:ab:27:1e:50:02:1f:50:22:fd:d6:88:20:63:
f8:78:68:70:cc:5f:58:b2:ab:1c:ff:39:e6:9d:0c:
2b:0d:fc:0e:46:eb:7b:f0:d6:5d:c8:2b:98:f2:0a:
39:83:07:90:c1:33:47:1d:70:b0:b6:ca:7b:f3:27:
b5:1f:0b:22:d9:91:ca:7e:ff:5d:90:88:d8:5d:01:
4e:79:2a:54:a7:fd:8e:6c:9c:3c:0b:08:90:96:97:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:C3:82:37:13:26:6B:7B:19:44:9D:A0:9E:B1:04:3B:B7:9C:09
X509v3 Authority Key Identifier:
keyid:71:12:51:31:44:F8:EA:FA:83:6C:4C:DC:F4:F7:58:D1:CC:B6:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRJRMUT46vqDbEzc9PdY0cy2cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/0397c2-59ab-4fd4-bd86-a22f45debd4e/1/cRJRMUT46vqDbEzc9PdY0cy2cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2c:a0:dd:31:ac:7d:c6:45:26:44:41:1a:2f:f9:dd:91:5b:
28:a6:ac:76:d1:c0:b0:91:e4:e2:f5:66:41:5b:9d:9b:a6:11:
ab:84:48:75:5d:b3:90:19:09:1a:ba:34:2f:b1:4e:dd:df:40:
eb:cd:b9:2c:50:12:ea:cf:50:e5:17:c9:61:a9:c1:ab:e0:09:
f6:b7:db:e2:9d:97:da:90:25:aa:47:89:da:2a:03:db:8e:7f:
45:6b:2f:6c:c5:d3:19:d2:f7:51:62:28:12:7f:58:f2:d4:d3:
3c:d3:2a:71:d3:40:8b:d8:ad:53:0f:bb:5d:a3:58:dd:90:55:
48:ca:52:dc:1e:93:f1:b3:8a:e1:11:4d:a6:88:b7:ec:3f:aa:
4d:46:61:d9:12:26:34:eb:26:80:81:05:82:95:97:16:d7:04:
86:37:52:6f:e7:21:3d:95:7d:86:6f:a5:d5:1b:bf:c6:ec:cd:
d3:a2:35:78:55:16:7c:e5:1b:89:1c:6d:61:b4:6e:90:b1:98:
ce:11:5b:61:10:11:90:5c:f5:6e:55:bd:12:71:0c:68:c4:51:
d9:62:c1:55:71:88:42:03:74:41:c7:f7:2a:d0:f2:60:14:f3:
10:c0:cd:90:35:2a:3f:b7:df:22:14:7b:5b:a6:e8:8f:25:1d:
47:e0:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:26 2025 by rpki-client