Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
File: cdm6oCIZQu3-SzqaVwgpXARBboA.mft (raw, json)
Hash identifier: Mcu37XEYvacBQLt90PkrwOwW2GrqX71geUhZLpsrmQs=
Subject key identifier: 81:CE:2E:80:10:2D:66:2E:58:08:33:CB:58:24:2D:7E:7F:83:D1:B1
Authority key identifier: 71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
Certificate issuer: /CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Certificate serial: 0194BBCEE50854DC772F9917361D70AF52E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: Uqk6ZpOTGE36LT5fcwe3jUUK8bs.roa (hash: 3ocr9qZ6ri2OW2BEWPNTcZs9jR00BhDPO+YzVSk3MLY=)
2: cdm6oCIZQu3-SzqaVwgpXARBboA.crl (hash: 9e+HCJveQBegSWdC3f7/Ve6l30mc9n+sNYn4mRNviDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:08:54:dc:77:2f:99:17:36:1d:70:af:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d9baa0221942edfe4b3a9a5708295c04416e80
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=81ce2e80102d662e580833cb58242d7e7f83d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:8c:59:0e:9d:07:b2:af:b2:4e:a6:3d:aa:
c3:44:b9:73:9a:9c:99:78:64:dc:cb:d4:30:72:f2:
17:d9:35:d0:92:a5:9c:ec:27:55:73:da:64:11:91:
43:e9:03:1b:e6:d6:55:ae:96:5c:84:c8:24:b8:94:
68:fe:52:ef:e0:ca:aa:5a:4d:a2:df:25:8e:cf:0f:
bf:58:13:e6:d5:2e:08:3b:dd:04:24:5d:c9:58:16:
26:d8:58:27:0f:b6:cd:bb:5d:b0:06:3b:79:1f:62:
78:0c:f8:16:e4:a6:d0:5d:ee:33:e0:0b:74:a3:34:
9f:f7:02:2b:8a:cf:33:dc:4b:17:9c:bd:c9:d6:07:
7b:6e:19:53:ed:03:4b:28:19:cb:ce:f2:a8:46:48:
27:08:a4:e7:c7:34:35:f4:c1:db:20:6c:d4:b7:c9:
78:97:14:aa:45:23:e5:c8:7d:dc:5c:b3:f0:5f:9d:
78:01:fe:bd:ef:de:88:d6:7b:55:59:04:51:3f:d1:
9c:7e:5d:11:43:e8:9b:02:d8:f0:5b:ad:19:c9:ab:
36:1f:8c:32:c8:28:0b:e0:2b:de:f9:52:99:8d:e0:
0f:f1:38:e6:c0:ad:b6:33:b5:45:32:7b:7d:04:16:
09:67:d7:4c:98:03:14:3c:1a:46:e7:02:25:1d:81:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:2E:80:10:2D:66:2E:58:08:33:CB:58:24:2D:7E:7F:83:D1:B1
X509v3 Authority Key Identifier:
keyid:71:D9:BA:A0:22:19:42:ED:FE:4B:3A:9A:57:08:29:5C:04:41:6E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdm6oCIZQu3-SzqaVwgpXARBboA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8c3fb8-40df-4d5d-9363-504727a50b8e/1/cdm6oCIZQu3-SzqaVwgpXARBboA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:66:9d:38:65:eb:11:a9:55:df:d6:b5:ff:db:8e:4e:4d:59:
e3:4e:26:c1:75:99:6a:48:c8:84:39:8b:b7:c4:00:4b:35:d0:
73:92:02:c7:ba:28:0c:f8:11:ad:85:d0:03:88:e1:d2:b4:72:
95:dd:5d:ad:ea:03:53:6f:f1:02:a5:d7:d0:d7:01:9b:31:b9:
f1:64:28:1e:81:e8:81:77:c8:1d:1f:7b:63:d7:84:ca:11:d9:
5e:d6:9a:9e:15:6b:ae:84:02:17:69:68:84:92:a2:9f:80:93:
c0:dd:58:a3:88:94:d7:6d:37:ed:17:f3:d1:53:e3:db:4b:de:
4e:8e:21:37:9c:59:8a:78:26:71:e1:9e:0c:f1:75:07:92:26:
b5:92:a8:a9:1b:9d:fe:b5:92:7d:9b:0d:0e:da:5b:53:f8:1c:
8c:a0:fd:06:4a:e9:f6:3b:ed:b2:d4:8c:1c:01:8c:aa:52:42:
47:9b:9e:a8:cc:cd:6f:b8:03:0f:c9:d9:bf:da:1e:33:6c:22:
61:5d:14:16:ec:b7:28:6c:b1:3e:2c:80:cf:5a:97:15:e8:e1:
b3:18:e9:3e:a0:68:8c:71:17:26:ad:57:e7:50:fe:8b:e2:0a:
8c:8b:21:6e:0a:8a:c6:b3:43:5a:4a:9a:ad:69:31:3d:fe:c1:
ae:3c:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:44 2025 by rpki-client