Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File: CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier: Hopd+9XrPWN3sX6s8RV76RJZWsWQgf8a70lrPtg/+0M=
Subject key identifier: 3B:80:24:8B:8C:C9:73:06:59:24:DE:C3:1E:E0:0E:F3:BC:77:5A:D0
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial: 0194BC3BDB1102C0348C232B40676EB245F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number: 05AE
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: QGIR7AD6RVt3Ome5uddsLB5F+2ItuAUpRR6swJ/4YXI=)
2: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
3: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
4: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:11:02:c0:34:8c:23:2b:40:67:6e:b2:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=3b80248b8cc973065924dec31ee00ef3bc775ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:d1:fd:ad:1c:bb:c3:4c:3c:b0:4a:ae:86:
fa:b2:13:0b:cb:b2:0b:ec:7a:1f:81:c5:08:9c:ee:
88:90:23:15:fd:c9:e2:8c:c5:4f:74:d8:de:a1:2e:
61:d8:9f:bb:0a:b9:7c:4a:d5:36:b2:f2:b6:a6:31:
61:5e:69:8b:51:37:30:c9:2e:e7:41:6c:b1:b4:a2:
75:84:df:4b:72:e1:f9:95:85:3a:c6:f0:1b:be:43:
23:ba:4b:b7:c5:f8:fe:4c:98:da:6f:9c:2a:8f:83:
94:e5:8d:3e:ac:16:11:b1:c9:8c:0f:ea:7f:c2:51:
94:12:06:bf:a1:d2:4a:53:10:8d:1f:b1:10:60:f7:
d8:dd:02:55:f6:ff:22:c7:22:28:17:57:fd:85:40:
f1:d5:62:af:9e:a2:e4:3f:4f:f8:44:65:03:bf:86:
cd:bb:35:6b:04:d9:9b:5e:66:45:92:fe:df:5c:c3:
cf:64:cb:c4:4d:45:16:76:41:3b:47:9b:55:f7:07:
f0:f7:ea:03:da:64:78:3d:af:0c:d9:ac:a3:39:d7:
87:6b:4f:be:03:18:d5:e2:ab:20:00:06:39:57:8c:
37:ea:9a:e1:0c:1c:1d:0f:fc:3e:ac:26:1c:a3:69:
5b:ef:c1:68:d1:31:40:30:50:90:f4:c6:82:e8:d5:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:24:8B:8C:C9:73:06:59:24:DE:C3:1E:E0:0E:F3:BC:77:5A:D0
X509v3 Authority Key Identifier:
keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:67:04:41:a2:14:75:08:fb:fe:5c:e5:92:da:a6:17:27:f2:
33:f5:41:82:27:eb:ce:27:3e:4b:a5:99:fb:2d:77:24:19:f6:
71:6f:67:ca:95:b3:c6:1b:77:ee:b4:53:cb:19:dc:b1:19:46:
7a:5f:e7:c6:31:6d:13:05:f1:e4:a1:ab:ff:21:f0:33:61:2e:
af:a9:d0:f2:5e:61:b6:12:3b:7a:0e:bb:87:7e:9f:42:cf:73:
81:88:05:55:2b:0a:7f:4b:b6:cf:07:91:0e:bf:a9:76:c3:cf:
13:56:39:65:ca:d1:0f:1f:58:c0:b7:8b:66:ba:74:0f:d9:e5:
00:90:8f:c3:cd:ae:50:c1:6d:ef:ad:58:71:a4:b5:84:e4:4b:
4d:b8:68:e4:e1:33:5c:2f:62:70:3a:88:5d:55:16:bd:51:65:
34:c9:05:48:8b:3c:46:dd:70:9e:ee:34:05:84:8a:64:c4:3c:
a8:53:db:f7:11:46:33:42:08:c3:9d:c5:76:95:9e:da:0c:be:
6a:67:af:b3:d1:e7:de:97:fd:c2:e1:ae:96:99:32:90:d9:aa:
8c:af:83:c7:cf:d2:98:5e:10:66:81:90:6e:ad:9e:f2:03:9f:
4e:85:c4:5a:72:d3:41:f0:48:96:43:56:01:7b:a5:10:77:4d:
f0:f5:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:05 2025 by rpki-client