Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
File: cub9InHd4QiG2X_xRwPlgaIEtl4.mft (raw, json)
Hash identifier: v8TRCNSehGPYLt77IbOeeZcG83F4kGP2YHH0YimBnMk=
Subject key identifier: 66:BD:2E:D9:84:55:89:2A:DE:5A:46:A9:BC:96:D7:68:EF:BE:8B:13
Authority key identifier: 72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
Certificate issuer: /CN=72e6fd2271dde10886d97ff14703e581a204b65e
Certificate serial: 0194BC3BEAB9065DEA4F2311E2D818B59FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
Manifest number: 03FD
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: cub9InHd4QiG2X_xRwPlgaIEtl4.crl (hash: oivDfFsUcgW0YvvoJc4z6A8G3YJaDMAUV1FJ+2lJxlg=)
2: tudIVgcptSwqj3f5EGeHuf41taQ.roa (hash: C3GuaI9nRlw3j0RMH940x9S9b42OKdLh+CMCdQStqCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:b9:06:5d:ea:4f:23:11:e2:d8:18:b5:9f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6fd2271dde10886d97ff14703e581a204b65e
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=66bd2ed98455892ade5a46a9bc96d768efbe8b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:0f:6a:16:a7:34:01:14:9e:a6:7b:db:04:
dd:40:f5:44:73:6d:82:b5:57:9c:f9:c6:0b:54:33:
11:7e:f5:ab:a7:4d:ed:d4:47:c9:2b:16:4c:82:91:
94:ad:13:5f:4a:68:ef:7a:8f:45:a8:df:d4:47:ad:
12:0d:26:8e:32:b9:83:04:67:b0:49:f5:ec:67:2e:
49:52:94:54:32:51:d3:42:54:63:a8:fd:2b:d9:a5:
45:31:04:a6:84:2e:de:83:b3:ed:81:b5:28:72:eb:
0d:ab:07:3a:dc:54:c8:ac:09:6b:ce:a9:44:29:0d:
51:ae:b7:5b:a5:31:4b:bc:7f:69:2c:ed:52:ee:91:
2f:76:f3:2c:c2:12:06:9b:ce:f1:55:6f:9b:69:4c:
a1:3e:7f:80:48:b9:8b:9e:f6:08:c0:49:b7:70:12:
64:af:77:3d:49:c0:37:d6:95:af:32:66:4b:5c:7e:
06:80:f6:36:a3:1a:79:da:b3:fc:f6:07:0f:ba:af:
3d:f4:6b:f6:1b:f4:2e:16:5b:39:30:49:59:fb:69:
83:9b:29:ef:5e:25:aa:88:cd:16:65:d1:b3:8f:0c:
86:35:6d:27:71:e1:36:34:18:ed:39:22:b1:9c:15:
2d:1b:59:5c:5b:4c:f1:85:4c:d4:67:cc:b1:f4:77:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:2E:D9:84:55:89:2A:DE:5A:46:A9:BC:96:D7:68:EF:BE:8B:13
X509v3 Authority Key Identifier:
keyid:72:E6:FD:22:71:DD:E1:08:86:D9:7F:F1:47:03:E5:81:A2:04:B6:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cub9InHd4QiG2X_xRwPlgaIEtl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/70658b-377a-4915-b1e8-6af215bff1ce/1/cub9InHd4QiG2X_xRwPlgaIEtl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fb:21:3f:41:73:93:16:c0:a9:10:f8:40:da:00:bf:3a:5f:
40:2f:6b:5d:02:8a:18:b4:bb:f9:7e:f0:48:ee:b0:bd:77:a9:
57:7a:ee:0f:d1:51:78:85:3e:f3:8a:a4:d3:94:88:83:83:2b:
de:75:c0:5a:8e:38:f4:03:53:f2:c2:05:0e:57:89:02:aa:b5:
ae:5d:67:62:76:4e:3e:b7:44:56:db:ad:9d:78:ff:01:51:f5:
d2:ef:a5:90:de:e5:26:55:e7:10:cb:75:e8:87:0b:e2:e6:f3:
b7:ac:26:57:23:ca:2f:23:5d:9c:ad:49:1b:bc:67:c4:5c:d5:
dd:56:ac:c8:9e:06:6c:65:e4:f2:a3:df:5f:6f:bb:c1:35:a7:
7c:bd:d0:b8:cf:a6:ef:77:31:7e:75:fa:86:3d:53:b9:f8:e8:
73:d1:4e:3e:e5:6c:88:ce:a6:47:48:53:a2:88:5c:be:57:e0:
39:5b:34:49:9e:44:6e:40:64:68:ae:8b:d0:a2:db:b5:8d:79:
15:6c:d0:cd:1f:b6:d8:98:9c:e8:d2:cb:4f:9c:6e:51:80:73:
27:c1:66:4a:a0:d5:5e:b7:2e:9b:61:a7:06:75:c2:f9:13:53:
a2:f2:be:ae:26:d8:89:b2:8f:bc:fb:6d:dd:4a:8e:7d:e7:00:
c6:02:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:32 2025 by rpki-client