Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: qDUB19HwaF0KMlqRbC1fw6MS0h6d/zvmlIiEnGKGOiM=
Subject key identifier: 72:EB:89:AD:E3:39:E2:76:16:A7:3E:EC:90:E6:9F:78:9C:5F:DB:17
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0194BD4E85D1036BF615F8415CDE20436DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0371
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: u9H4awJLL4z6WhuaAEjb/jzOaJh8l+exZyJQkG+mtc0=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:d1:03:6b:f6:15:f8:41:5c:de:20:43:6d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=72eb89ade339e27616a73eec90e69f789c5fdb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:af:47:73:fb:50:fe:c2:43:4b:12:26:46:
6f:06:98:9c:8d:0f:27:89:c0:6f:9c:1a:62:5c:05:
7c:1e:20:09:1a:6b:2b:95:45:3d:2d:6a:15:7c:ad:
aa:07:7f:ac:a6:1e:d1:31:21:af:05:cf:a0:cf:16:
17:9d:c6:b3:f1:fd:96:f4:46:ac:9e:c9:7e:d4:cd:
47:24:c2:8e:ee:d3:1d:b1:c6:0c:08:ea:40:e1:4c:
ca:22:2e:73:95:ba:f8:80:5e:d9:3d:69:9f:17:76:
51:e7:2b:e3:65:4b:29:77:0f:8c:fa:c5:1a:05:86:
e3:21:43:c4:be:f9:37:d7:88:f4:fe:be:e7:8a:29:
d1:d0:dc:b0:ac:0e:63:ba:2d:d7:98:30:ad:7c:49:
fb:10:1c:76:d5:97:e2:03:8f:39:d3:39:4c:0f:d0:
f3:30:cc:c2:04:2f:35:ec:ca:c4:d1:3b:fc:ea:5c:
d9:94:c9:8e:41:f7:1f:88:90:1c:03:68:b6:42:90:
f2:43:ff:2e:24:7d:f7:e1:24:6d:0b:69:cf:03:25:
4b:f4:43:f4:1d:34:ab:e0:dc:c6:e2:1c:44:62:c6:
74:6d:09:eb:b2:f5:c3:f0:0d:f0:f6:b4:b3:c6:45:
98:a8:6f:51:d1:3d:85:3e:3e:0f:4e:22:a0:67:99:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:89:AD:E3:39:E2:76:16:A7:3E:EC:90:E6:9F:78:9C:5F:DB:17
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:c8:c2:99:f9:16:3c:71:8b:1d:95:fa:bb:62:3f:36:39:
32:ae:24:dc:2d:f7:d4:df:70:7c:32:56:49:d0:0b:09:ae:e9:
38:e0:3a:22:a0:ff:78:65:19:8b:da:e8:b9:52:fd:b3:1a:cf:
85:66:b2:34:79:9e:42:31:b1:86:f8:62:b1:19:46:d7:32:86:
4e:fd:87:c3:3b:e4:3c:d4:50:92:47:f1:7e:47:92:0e:bb:ea:
d8:f2:08:89:6e:f8:18:34:5b:9e:42:97:30:8d:45:62:3e:2f:
c5:95:8b:4e:27:20:fb:cf:ff:ca:98:e2:d9:2e:5f:3c:72:44:
91:a7:ca:9c:f9:36:74:ff:d4:cc:0a:3a:63:50:f7:f3:03:2b:
de:6c:58:b4:8f:c7:e1:f9:d1:b6:b9:9f:25:22:f8:1a:b6:94:
2f:e5:2c:69:55:2e:a7:b9:49:d9:e8:7a:bc:51:8b:93:f7:20:
92:d3:45:a0:c1:45:4a:ac:4b:25:f8:61:fd:2e:1c:c3:a2:5d:
50:9b:1b:03:ec:b4:11:0f:2d:bf:a3:5b:9f:92:8c:7a:4f:08:
e4:7c:43:69:5f:54:0f:ac:3c:cb:42:f4:f1:b0:23:60:8a:95:
11:bf:1b:6c:3b:be:64:73:d8:74:68:80:cf:15:30:7c:f0:7b:
d3:d4:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:22:19 2025 by rpki-client