Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier: VngkgRyx0MUuOBHcDem31FfGjh3gBDCgJyNF7pVrORI=
Subject key identifier: CB:0D:6B:AD:F2:44:8B:F2:32:3D:A8:03:86:87:CB:0E:9B:1E:B9:A4
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0194BCE0E1929164C54147A56DE21C1F56DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number: 0EA0
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: In6r/Bq7jeWSKQdBDwKsv64pGVPE1dDHCHTFibeGUU8=)
4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e1:92:91:64:c5:41:47:a5:6d:e2:1c:1f:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=cb0d6badf2448bf2323da8038687cb0e9b1eb9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:ec:c1:aa:2f:f1:0c:17:2f:7f:ca:f0:bb:
20:d5:40:22:c0:c5:f9:39:de:54:81:66:ac:86:ab:
dc:78:d6:88:c1:7b:fc:73:46:a2:49:08:05:af:1b:
b1:14:27:1d:48:45:21:c7:38:4a:4c:6f:ca:3c:78:
67:46:f9:f1:cf:09:51:2f:76:83:10:78:af:1e:0c:
a1:aa:78:fc:39:f0:37:c5:5c:25:fb:0d:da:b4:b9:
4c:42:af:ee:e7:ec:9e:26:b9:bf:90:af:3b:ba:dd:
dc:fe:2f:c0:d6:71:43:ed:b7:c3:4f:bc:73:b1:c2:
b3:46:34:87:78:b1:00:91:1f:95:a6:a8:50:77:c9:
79:7d:4d:a3:f8:6c:f3:96:53:74:ff:8a:ff:ef:61:
2a:e6:73:01:2e:a1:2f:df:88:cd:e3:98:dd:4d:d7:
17:55:65:f8:c2:78:cf:ac:18:73:fa:88:6f:fb:4d:
0c:a5:40:cf:2c:99:0f:e4:df:e0:45:67:59:c1:eb:
81:fa:23:ec:2e:7d:b7:bf:2f:61:62:49:df:3a:be:
f8:c0:5e:9d:f6:26:46:97:95:55:1a:6f:1f:f0:1c:
41:6b:55:cd:51:81:94:88:d4:c5:50:26:46:ff:39:
65:28:67:c1:6b:1f:99:8b:77:33:41:9f:cb:a6:ab:
0c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0D:6B:AD:F2:44:8B:F2:32:3D:A8:03:86:87:CB:0E:9B:1E:B9:A4
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:69:6f:21:b0:38:99:ef:9e:e5:af:a4:d2:19:ef:54:fc:
9c:63:df:0d:b0:a9:f4:6d:cb:68:27:4b:61:76:d1:b0:05:f3:
bf:f7:27:fd:6c:08:be:a1:ab:44:1e:54:74:44:90:be:7e:80:
ab:b3:7e:27:2b:e0:19:83:82:f6:98:ac:40:36:5f:8f:cc:dd:
80:c3:79:43:40:b8:1e:a5:aa:32:02:09:ad:20:01:12:0e:d4:
fa:da:55:1d:8e:fe:f2:46:11:3c:e2:6a:73:55:8b:f2:62:de:
8b:86:af:32:24:ac:1b:c9:b4:74:b6:e2:55:aa:ae:99:7e:ad:
2d:2d:57:d9:c7:28:c0:34:34:fb:38:fe:5a:f5:44:fa:11:5f:
57:28:bd:ea:79:f2:d7:40:ff:5d:68:a2:54:ce:5f:82:9f:44:
d8:de:0e:e8:99:b7:bf:67:91:c9:33:40:60:a6:46:13:58:69:
01:3d:b6:4e:49:a8:7e:38:d5:29:14:4a:a5:7f:25:21:c1:75:
28:ba:25:af:0b:b7:1c:d5:59:ca:a9:bc:b8:98:9c:52:d5:7b:
4b:73:b5:ec:07:df:14:a3:42:43:23:d8:c4:5a:1a:2c:69:73:
c0:a5:d7:f8:22:0f:12:0d:f6:0a:1f:57:f9:8b:58:50:c7:94:
81:a0:14:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client