Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: AdUYXXDb/ocFeVpCPwzMPLz/9qHIw+1kZXopIKcbowY=
Subject key identifier: 36:E5:F8:27:B7:B4:81:9D:AC:39:90:D1:35:D0:10:15:9A:85:3A:58
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 0194BD85B301C64ADAA159E603CEF62D061E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0E1E
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: C9lavlWXSnv3uk9ImfqfR8xKee4.roa (hash: C3QFSuupqUcZvoxhDLvrsW4rmvhvHhXHLD+9GGbY+Ps=)
2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: dBsHlJ3Zbl7cm/cEKllKNs4qGqqfawnu21MT9cPzUOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b3:01:c6:4a:da:a1:59:e6:03:ce:f6:2d:06:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=36e5f827b7b4819dac3990d135d010159a853a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:ef:22:1e:28:2a:14:95:3c:d5:a7:55:1f:
ae:72:ff:6d:0b:6f:54:98:52:e8:82:3b:b9:35:22:
90:d6:33:b7:72:fd:92:84:89:68:76:0b:97:4f:b4:
83:99:c9:7b:6a:4c:72:d6:19:b0:12:98:05:37:c4:
fb:2f:22:ca:51:32:7b:91:ba:e6:2c:ae:c8:87:b3:
e0:ce:c3:20:60:f0:d9:0c:01:99:71:b9:57:37:60:
e2:e4:9b:a5:d7:0f:5c:f5:ce:9f:ea:26:b5:a5:18:
4a:63:93:45:39:ee:f7:ea:cb:1d:8e:c6:5d:a1:b3:
e8:9d:fc:e1:d4:02:a4:a0:3b:7f:2a:7f:53:0c:62:
0d:32:92:59:86:1e:df:b1:2b:0b:4e:1b:fa:4f:ee:
22:91:ae:f7:7f:12:91:f5:19:32:ac:03:80:e9:70:
20:9d:b2:84:9d:e9:46:fc:d5:e2:a2:95:7b:c2:6d:
06:9d:95:70:91:f4:8f:84:62:de:f2:10:cb:c4:d3:
1b:2c:da:87:47:ff:1f:b9:6c:65:d2:69:b6:4d:d1:
15:ca:24:44:1e:23:ad:44:cd:25:31:45:cf:51:07:
15:35:9f:bc:6a:43:db:9e:d0:04:94:89:f0:a8:7a:
7f:cd:3d:41:ab:a1:86:2f:dd:85:f9:6b:ff:7f:ab:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:F8:27:B7:B4:81:9D:AC:39:90:D1:35:D0:10:15:9A:85:3A:58
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:43:b8:57:40:1e:13:2e:44:a2:b7:21:10:ab:88:0c:5a:ef:
0e:23:64:44:5a:39:79:99:0b:58:d8:9d:ed:09:2a:4a:c9:c8:
92:9a:ec:83:8a:1e:da:11:9d:5c:a8:24:e0:b7:91:d5:42:ae:
b2:04:4f:7d:08:7e:7c:f9:09:84:19:7d:ee:79:c2:f9:d5:f0:
be:a8:9c:ca:05:47:e1:6d:03:59:9c:46:19:d7:6d:99:7f:9f:
4b:f4:20:f2:05:f6:8d:ed:68:f9:19:7f:a4:bf:6c:2d:37:f7:
02:c5:d2:01:d6:b6:38:cd:2d:15:0a:6b:cc:f5:c5:df:ec:65:
1b:6f:3a:42:ac:91:c3:f0:61:55:7d:07:37:93:c0:70:70:3f:
64:e7:cb:7e:f7:f4:2f:77:b3:bd:8d:94:5e:15:2b:01:ee:21:
53:85:67:67:1f:bb:5c:4b:47:20:df:57:a6:b0:09:d0:e2:3e:
a0:c9:46:5b:0b:46:c6:65:53:1c:01:82:f5:97:82:51:a0:68:
02:a9:5e:fe:d4:19:b3:30:2d:04:46:2f:b0:8c:98:0f:18:95:
fe:fd:f8:17:57:37:83:08:81:ad:99:c0:bd:55:64:e8:dd:97:
c1:55:fa:e9:7d:d7:ec:d4:fa:32:b2:6e:8d:f8:82:71:3a:0c:
62:9b:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client