Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: c8caaflvfVC5OwKvC4rr+xmxSSN5gfTsy3MXpyseS30=
Subject key identifier: 64:3B:76:FC:6A:D7:58:8C:B7:0C:F8:DA:F5:52:12:59:4D:63:5F:F4
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 0194BC3C416140783B6585F6DD08C1AF2726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 0F5B
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: YQ9tYzGl5wCcx9VZHg6k8lJD3FSkagP1OCk9pAqjjTU=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:61:40:78:3b:65:85:f6:dd:08:c1:af:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=643b76fc6ad7588cb70cf8daf55212594d635ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:b9:6e:1d:97:30:79:24:97:2b:26:54:3a:
12:fd:7c:2f:ba:ef:c4:b1:5d:49:47:7c:97:29:b3:
05:3e:ef:41:98:4b:9f:61:43:4f:61:78:3e:95:e5:
e0:10:0b:75:3e:b5:f7:dc:43:74:fe:fb:ff:d0:ca:
94:83:33:82:d1:f6:a1:a0:1c:3d:5a:72:34:c4:b0:
35:bf:c7:c2:bb:93:d3:f9:0f:d2:e1:6b:09:9b:67:
23:61:8b:92:9f:c5:dc:64:be:bb:28:4e:55:34:f3:
77:19:76:7c:97:d1:d9:c7:bf:e8:f0:07:55:3d:61:
f4:25:6d:db:8b:a5:37:1e:83:db:ed:04:42:3d:07:
35:c8:a4:76:8a:26:b6:e5:d5:05:7f:6f:be:a4:5f:
f2:ed:21:88:2c:e1:cb:73:bb:0e:90:9d:dd:5a:87:
b7:fa:eb:e1:4f:42:34:48:67:c3:aa:45:9c:77:c0:
85:43:a1:a0:e1:2b:49:e7:6f:fb:ce:08:67:a2:7e:
22:19:93:0c:9b:50:56:13:91:81:07:a0:41:a9:49:
dd:3c:06:55:1d:19:03:2f:7d:8c:99:4b:48:1b:86:
23:85:bf:8e:8a:c8:93:aa:c0:74:f5:e4:38:fe:8b:
b9:4a:84:28:75:34:6b:33:ca:b9:1d:14:bf:a4:89:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:76:FC:6A:D7:58:8C:B7:0C:F8:DA:F5:52:12:59:4D:63:5F:F4
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ef:4a:4c:f2:f7:df:89:61:06:a4:fa:bf:af:f5:24:e5:bf:
3e:0d:aa:bc:44:16:65:d4:6a:4f:c4:cf:7d:70:41:cd:70:48:
d2:7c:92:f4:ff:61:39:54:8c:88:c5:5a:93:4d:10:4b:d1:5d:
2e:12:89:e9:bc:f8:d5:0a:92:26:6f:ea:51:a3:79:0a:39:c9:
91:d9:46:7b:66:8b:00:cc:d3:e4:c0:3e:ed:36:72:a3:fb:8b:
ef:53:48:5e:7f:39:85:e2:13:42:4c:2c:52:81:d6:54:b1:31:
47:80:8c:4a:c2:0a:b0:3f:b6:ea:70:00:a6:7a:0d:f9:83:15:
99:61:52:e8:41:e4:a2:fa:77:d1:2f:86:0b:6c:0b:54:bd:b3:
78:8c:53:f8:36:ae:7c:dc:60:be:84:3e:83:59:c0:ad:5c:43:
ee:ef:f1:c4:5d:c4:c5:b1:ba:8e:de:d7:1f:14:93:49:98:2d:
6f:9a:21:38:2d:92:4e:94:06:28:b1:52:97:60:24:9a:b3:43:
6d:1b:02:67:81:57:16:07:c7:17:e0:5a:b8:3a:ad:ee:a6:c4:
28:be:79:85:1e:cf:a2:ca:8c:12:69:0e:66:0a:45:17:e2:0c:
04:64:7a:ef:de:32:12:71:dc:aa:68:53:c3:11:03:23:bb:61:
e7:49:a4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:01 2025 by rpki-client