Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: 42hzpGvlQsoZLy/EfMtJ6DHxtqNTDyICspCUG8AT0SM=
Subject key identifier: D8:A4:F7:40:F7:88:89:A3:55:26:61:30:FA:16:D9:CF:29:78:FA:43
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0194BC72EE16F17385B4761614E18B95CE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: q3umK1IFfYrQ+/T3fUL/Szv3I053UwO3aeiMG82XNlU=)
3: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (hash: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ee:16:f1:73:85:b4:76:16:14:e1:8b:95:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=d8a4f740f78889a355266130fa16d9cf2978fa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:6f:2a:63:95:e2:71:94:e1:05:ce:e3:12:
c3:81:4d:cd:6c:e8:ca:80:db:df:ec:a7:d8:bc:1d:
26:47:01:ed:ec:8b:93:08:43:9c:ed:22:9b:23:5f:
46:45:b3:9c:66:91:f7:dc:90:50:05:36:1f:a8:2d:
dc:ff:77:44:7f:5e:59:d3:b3:2c:dd:23:f4:d3:3d:
28:75:0f:75:9d:a5:3d:d9:65:c4:ab:6a:d3:be:f1:
30:50:ba:58:42:4e:2b:27:7c:34:9e:05:62:61:2a:
90:b6:51:e5:4c:e8:78:80:77:02:e5:a9:40:bd:25:
d3:2f:6d:d5:a5:ea:88:08:79:f4:07:8f:4b:62:52:
cc:b3:2f:1e:12:0c:e6:bb:26:07:ea:5e:71:ee:68:
2b:1d:78:17:f9:cc:4a:a7:4d:dd:a0:83:e2:8a:89:
46:aa:d0:ca:a1:ad:fb:c2:dc:35:22:12:dc:5c:52:
3b:2a:f5:44:e3:b2:34:96:4d:e2:da:ef:ac:e6:1a:
3b:ab:aa:55:b1:cc:58:9c:fb:37:23:a8:a6:8c:b3:
45:03:9a:80:11:d2:e7:55:2e:d6:ea:e7:49:2c:02:
7e:0f:42:30:2a:a8:96:b5:c2:ab:7f:7d:a5:73:62:
13:82:ff:b4:58:be:90:bb:be:3a:f1:de:7f:22:2e:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:F7:40:F7:88:89:A3:55:26:61:30:FA:16:D9:CF:29:78:FA:43
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d8:19:9e:c0:a7:bf:99:80:1e:cf:d1:dd:16:1e:68:ea:86:
8a:82:cb:6c:8d:52:80:9a:04:a4:14:0f:aa:00:d6:a0:fe:77:
e2:32:82:d1:c5:50:20:b8:4f:93:ff:b5:63:27:5f:1a:9d:aa:
68:c2:c4:43:55:d8:55:06:ee:0f:5d:f2:9a:97:5c:0e:50:2d:
fc:95:51:59:ca:b0:bc:83:79:be:b7:69:56:fe:3f:05:8f:86:
7d:34:b0:61:12:94:3e:9f:ce:b6:10:b3:c5:64:d7:47:e5:cf:
26:4c:d7:87:f7:64:80:6d:d8:89:24:a7:cc:02:3f:47:8f:e1:
4e:fb:fc:9f:65:91:02:6c:5e:6e:d3:09:76:63:5c:99:63:8b:
02:31:1b:e2:3a:c7:72:65:63:c2:11:a0:af:58:1d:23:51:45:
bf:a4:18:87:c1:36:12:0a:75:bb:f4:d7:fe:d2:f2:63:9b:3a:
c9:8f:7d:68:af:d3:ef:10:c3:a2:f8:35:66:f2:60:f5:7f:dd:
b2:47:dc:22:e9:1c:e7:9a:53:bb:ca:89:3d:be:50:9d:68:b2:
d4:c8:26:b7:34:0d:7b:f9:06:f7:dd:8a:64:f9:b5:00:c3:55:
d7:66:9f:fb:7b:37:44:b3:c1:b5:bd:c7:95:2c:56:41:27:ea:
9c:f2:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:33 2025 by rpki-client