Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: NX+WtYy4b3aZ8iJ2QPNoXjYOnWQ6jnkWZnnIwqN2JRU=
Subject key identifier: 9E:A3:F5:81:55:29:24:BB:CC:4C:93:89:D3:EA:07:FA:93:51:FF:8F
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 0194BBCE4F233DF00416ABA7DF637056DF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: Lm8XAmFPl9JfMKR5HxsU7fbiCDGRlwZ9VW37xNKfSoo=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:23:3d:f0:04:16:ab:a7:df:63:70:56:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=9ea3f581552924bbcc4c9389d3ea07fa9351ff8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:45:c6:64:17:a7:29:1d:07:bd:04:c2:5e:
50:d4:09:2a:a1:86:06:3b:4b:a9:f0:64:19:3a:ef:
10:79:0d:21:e7:fd:1a:c8:63:f9:c6:90:4b:67:b1:
ae:a8:da:3f:db:1c:48:19:8b:eb:88:d8:37:f8:c4:
34:5a:ce:11:fd:da:a3:92:3b:55:ef:06:40:f1:8c:
c1:a9:d8:1e:22:df:9a:4c:49:0b:8a:7f:10:9d:66:
78:95:71:5d:cf:22:27:d2:5e:19:00:24:e2:e7:e4:
81:6f:1d:66:5d:e6:f2:5d:56:81:26:69:02:c0:a8:
4c:25:72:e0:87:a5:97:c4:ea:b3:9e:c5:98:8e:b9:
c8:de:77:e5:b4:4d:2f:7f:7a:d8:aa:95:b0:de:06:
df:03:5b:65:0d:51:cf:b9:87:1b:c8:9c:f3:c0:ea:
3f:d4:71:2d:84:07:40:cd:3b:6e:2e:60:de:c4:73:
e4:dd:6f:ad:8d:20:2e:3e:50:cc:d8:69:73:1b:8b:
b2:bb:37:54:66:f4:5f:99:49:3f:fd:6a:e9:0e:89:
44:f1:03:3f:4a:43:06:61:bc:e1:87:89:c1:6c:16:
fc:5d:e6:71:1f:30:5e:c5:97:90:2a:9c:e5:28:ca:
a5:c8:12:c2:80:af:b7:33:eb:6e:9d:75:a1:53:45:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:F5:81:55:29:24:BB:CC:4C:93:89:D3:EA:07:FA:93:51:FF:8F
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:bd:cc:b2:38:c0:79:7d:50:26:55:9b:f0:b8:69:d5:ce:
89:60:fc:15:73:25:28:05:af:2d:58:64:4d:98:5c:e1:45:90:
6f:93:ca:73:62:4a:43:2e:11:5d:a8:da:9d:5f:76:14:02:86:
14:2d:cb:db:09:69:56:11:8e:f4:29:3e:82:21:2b:0e:32:04:
f0:9b:74:52:7b:e6:33:03:bf:43:a4:96:dd:ca:a6:43:ca:06:
0d:7a:37:f4:65:f5:a7:11:bd:05:5d:4f:c6:cd:4a:b1:d2:71:
ca:dd:19:03:46:66:e1:11:51:86:0d:cc:fc:e1:15:c7:06:bc:
16:b5:6a:96:7b:13:1e:7f:c1:d6:b5:33:fe:aa:4b:7d:2a:f1:
32:fe:c8:ee:d7:84:01:4a:4f:76:50:e5:53:d5:ba:ef:13:1f:
90:e4:eb:47:09:fe:41:f1:40:51:d8:d2:20:b5:38:ea:80:ca:
a2:f1:5c:a1:f2:81:18:65:db:a8:47:4a:ea:ad:9a:fa:b7:50:
c2:4b:af:38:4f:86:07:24:9a:68:48:9d:ff:c0:86:8b:cc:73:
1e:04:b7:2f:29:de:8a:ec:53:d9:55:91:90:cf:a7:29:1b:69:
e8:02:4e:b2:c0:d3:82:f6:59:8e:4f:e2:c7:b5:77:ac:22:f5:
ed:37:19:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:51 2025 by rpki-client