Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: cdy5tk1E61H53jOXxgwCzr4gu45buO0CzQwumNUJAG4=
Subject key identifier: B1:4F:EC:02:96:E9:68:16:26:8B:E6:66:A8:59:E1:F1:94:97:44:EF
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 0194BC72AA34583B4CC8889A1423E0A688BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: AEeyNg7D5Cc6ar5B4GCWKZPjeYIf0QYVqynyfm2qqz4=)
2: dTo5MoNVsE0W9FJTdWp7ZS1bD3g.roa (hash: Z3fu+O29y6RvbdMkr8dGUL1zLYUpPwmelay18m8y6vs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:34:58:3b:4c:c8:88:9a:14:23:e0:a6:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=b14fec0296e96816268be666a859e1f1949744ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:6d:c9:5b:bd:2b:8d:73:0c:aa:7b:d0:7a:
76:da:4e:32:04:08:0b:98:79:10:1d:6c:b8:e7:a2:
48:31:c3:3c:a1:f1:ad:2a:f3:48:f4:44:3b:37:28:
19:a4:fa:1f:0a:c9:fd:6a:02:6f:33:f4:95:dc:2d:
58:f0:20:01:bd:73:18:71:21:b6:16:ed:d9:ab:37:
e5:10:e8:48:fc:cb:d5:12:ea:c4:94:a3:66:40:a7:
4d:ff:88:39:78:91:5a:d9:fb:42:bb:43:b3:ce:c4:
c8:1f:3b:17:24:4a:43:51:19:3e:81:e8:6f:5c:77:
5a:f4:e1:bf:15:bf:10:ec:a9:96:96:f6:91:4f:ef:
d0:bc:3b:de:da:a3:a3:79:a5:ba:7a:02:10:c3:0b:
d4:72:c6:72:5e:8d:57:7d:98:25:5c:17:00:14:f1:
fa:e6:48:2c:68:00:87:5c:ce:1d:1d:0a:53:ae:c7:
9d:12:36:7b:63:7a:54:ea:3f:c6:32:cc:d4:5e:61:
9e:1a:a0:53:74:dc:73:b4:08:b9:87:e6:ef:80:66:
f6:e1:fb:e1:ca:ee:99:3b:ab:f2:1c:65:c9:b7:11:
f9:d8:aa:88:85:cc:2d:fd:32:4b:79:c2:1c:19:3a:
9f:24:ff:72:f6:25:48:76:ed:b3:4d:f2:e5:f3:fb:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4F:EC:02:96:E9:68:16:26:8B:E6:66:A8:59:E1:F1:94:97:44:EF
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f8:0a:ad:87:77:0c:29:05:5f:4b:06:e7:8c:b7:67:5a:b2:
20:44:d6:a7:18:f5:11:5d:e4:2b:53:b7:2b:af:fa:2e:6d:89:
75:20:cd:36:f9:8e:3c:3c:ba:f9:4f:13:b1:09:61:b8:61:e0:
c0:04:e5:af:1d:9d:b4:81:92:c9:3a:11:86:b8:2d:cf:19:45:
4d:fe:e2:81:02:b1:d7:04:83:46:28:de:a2:dc:10:41:f7:d5:
56:93:9c:49:60:1a:74:ba:12:82:8b:ac:d8:88:d4:4b:4c:2b:
be:78:50:c0:11:55:13:4b:fb:7c:6e:43:87:88:22:ab:7a:91:
2c:2c:2d:70:f8:3a:91:2a:31:ba:10:57:a2:98:33:2f:f2:33:
48:fc:eb:43:3a:9b:2b:ca:0f:09:12:7b:52:08:0a:50:15:74:
20:bb:45:08:0e:72:b9:c5:c2:f9:c7:08:30:0a:2d:cb:32:3a:
6e:72:db:6e:9c:35:29:71:2c:07:5c:08:34:94:fe:1f:61:0a:
1b:44:10:55:88:91:9a:7f:19:b6:5b:cf:f8:6c:ff:01:7d:0d:
de:3d:fb:7f:7d:cd:1c:75:94:9a:25:da:4e:d4:18:c9:39:4d:
6b:73:7c:a3:bf:26:3e:98:55:04:5d:70:8f:14:41:d0:e6:95:
30:f6:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:32:59 2025 by rpki-client