Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
File: Cani7ovOptW5GcSjPSbZu_mCqEM.mft (raw, json)
Hash identifier: 6hGn4enjjzpk/aKUyrO5lICbSAcn4YX3dNlGJmrM/mI=
Subject key identifier: 32:B2:59:93:9C:29:AD:8B:9D:F7:92:54:68:9F:27:E6:B3:CB:A9:43
Authority key identifier: 09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
Certificate issuer: /CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Certificate serial: 0194BD4E6B09C9479C98D19495C7B93869F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
Manifest number: 08A9
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: Cani7ovOptW5GcSjPSbZu_mCqEM.crl (hash: YBJYA5cFuiamf+ZIAkE2jmj7AIc2lrWWll4rKCDzB24=)
2: VNahP0UQveZ8aD0TsmaExJY0tZA.roa (hash: mRQeMIIWNprrsGatyNnULZeqD9q6svl4Pj1uiYVKUX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:09:c9:47:9c:98:d1:94:95:c7:b9:38:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a9e2ee8bcea6d5b919c4a33d26d9bbf982a843
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=32b259939c29ad8b9df79254689f27e6b3cba943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:a3:9f:5c:d9:a2:56:0d:75:27:9d:f2:00:
ac:7c:2a:b6:43:b8:ff:28:19:dd:38:eb:da:52:4e:
74:6d:a5:5c:4d:93:5d:e3:68:f9:4a:ef:60:05:85:
ae:4f:67:0f:c6:f0:b2:37:8b:90:a4:26:61:02:79:
22:31:22:2b:cf:38:c3:46:b8:52:ee:5c:1a:e9:ff:
e5:25:a5:a6:15:86:e9:a0:b2:e7:f1:fd:63:0e:8a:
96:9a:d1:37:80:44:a6:cb:8a:a0:f6:b9:fa:6b:09:
fd:06:6f:1d:e5:6d:96:ba:bf:4e:89:2a:83:cf:5f:
97:80:cd:a3:e7:77:5a:67:88:32:88:a3:b9:1c:8a:
10:79:d9:a9:45:55:37:ee:df:2a:34:34:9f:9b:18:
65:9d:3b:2a:c3:ce:67:15:21:63:3f:04:dc:e7:35:
34:a4:25:0f:db:19:ea:a8:aa:0d:98:a6:3a:b6:1a:
34:ca:10:bf:b8:e3:39:15:3e:ea:35:6a:d4:01:43:
ac:d4:22:ac:3f:67:a5:11:8e:2d:6e:d0:6c:8e:24:
32:cc:6a:ea:35:2c:be:37:96:2d:d2:1d:66:3b:b3:
99:d5:6e:cb:f9:07:7c:67:f1:ec:d8:ad:cb:aa:7d:
d9:43:d5:75:4a:bc:a5:60:21:d7:fc:18:43:28:e1:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B2:59:93:9C:29:AD:8B:9D:F7:92:54:68:9F:27:E6:B3:CB:A9:43
X509v3 Authority Key Identifier:
keyid:09:A9:E2:EE:8B:CE:A6:D5:B9:19:C4:A3:3D:26:D9:BB:F9:82:A8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cani7ovOptW5GcSjPSbZu_mCqEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/58d15b-9f02-42c4-b02d-a01eea65fd33/1/Cani7ovOptW5GcSjPSbZu_mCqEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:12:bb:42:b9:99:12:a6:84:d7:e8:40:52:08:85:3e:fa:45:
a1:f5:d8:91:58:b4:72:29:21:1f:5d:26:ce:56:5b:1b:27:af:
0c:ee:27:6a:35:c8:17:6c:29:33:4c:53:3f:c2:a5:3b:50:55:
8d:17:ef:2b:ee:cc:39:e1:ad:4e:d8:4c:a7:6a:10:26:c9:03:
83:66:61:d3:f4:06:ad:0d:89:32:71:50:53:3f:ba:03:08:c4:
ef:46:33:bb:f9:29:7a:ee:66:58:ef:d5:b4:c3:52:a3:29:84:
1d:84:db:db:44:c9:44:2e:e8:51:c4:59:07:5c:94:87:ec:da:
94:9a:ef:e1:a1:be:f8:3f:3f:f9:cf:c6:f7:d1:14:45:91:69:
7c:ec:f7:19:72:fe:b8:29:53:20:82:e0:b2:3a:a9:9e:e4:eb:
b6:1c:20:12:e5:76:e2:af:73:56:1d:d7:8f:ae:ff:32:d1:c3:
3a:df:21:87:af:92:4d:72:10:35:ae:23:77:a2:06:67:2b:37:
a2:a3:dd:e0:2a:27:1c:a2:da:0b:dd:61:bb:6e:ec:3a:3b:fd:
9b:90:0e:2e:e2:2c:be:2a:5e:1e:64:2b:47:af:e3:7f:a7:85:
93:b1:17:15:b9:d3:96:f3:79:e0:13:92:32:23:b8:c2:a0:c2:
ee:3f:ce:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client