Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
File: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft (raw, json)
Hash identifier: AtgFeSXoZW0cmAQOz5tJd+W4WyjpevLyWpt5xWyY6u0=
Subject key identifier: BD:65:75:AE:2D:A4:A0:E4:F8:4E:C4:1F:1B:93:41:8E:4A:FE:38:1A
Authority key identifier: 0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
Certificate issuer: /CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Certificate serial: 0194BD852AAC80690AE537F86E2959DD2950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl (hash: Y7x2MEsRsXOJsIVopg4XrbG2klvRB5BD92J0H1Vu0Cc=)
2: PveX9WXxCJj9e18L9V5LXcSlf4I.roa (hash: Gc7ehRUF/Atprjxx4oQFsUeoQdkyLlSY7XL+/gL4J0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2a:ac:80:69:0a:e5:37:f8:6e:29:59:dd:29:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0acf3dccea317e35e70541a48b2586a4d32bd94c
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=bd6575ae2da4a0e4f84ec41f1b93418e4afe381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:98:ad:e8:6f:71:25:5d:19:78:49:2d:4d:
7c:1e:bf:2b:9e:13:94:49:2d:fd:f8:b3:89:8c:eb:
a3:d6:cc:a3:ac:f4:0b:c0:1c:74:6d:de:a8:0a:14:
a4:27:b0:47:3d:27:5a:41:03:eb:68:c8:57:0b:52:
98:6e:89:ab:ab:c0:ba:a7:9e:c5:53:46:13:83:a8:
b4:16:ad:b5:e9:38:f7:61:6d:68:80:11:c6:11:39:
9b:0c:4c:02:c8:1b:dd:c2:56:4f:c3:58:49:dc:77:
93:b4:09:b5:9f:68:e9:7f:4e:52:a9:7b:a9:7e:8b:
94:e2:6f:11:aa:b3:b0:c6:5d:da:5b:3a:fd:78:15:
54:e0:2d:46:da:ab:45:b8:80:f1:ed:72:e4:9a:18:
27:37:41:20:49:b2:dd:81:b0:b7:f6:e9:1a:0c:b0:
92:fd:33:90:fd:a3:28:2d:6f:81:bf:29:06:f2:04:
cb:8e:ae:ca:21:07:34:59:fc:a6:0a:d6:50:0b:2e:
a3:7d:11:e1:2a:b4:cb:73:ed:d0:d6:fc:07:26:8f:
05:06:26:93:ac:7e:e4:e2:5c:63:7e:8f:1e:c5:07:
85:0a:71:fa:81:df:e9:d6:5b:e5:8e:88:3a:c9:62:
fe:8a:0a:4e:ef:dd:f6:0e:65:5b:12:07:11:44:05:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:75:AE:2D:A4:A0:E4:F8:4E:C4:1F:1B:93:41:8E:4A:FE:38:1A
X509v3 Authority Key Identifier:
keyid:0A:CF:3D:CC:EA:31:7E:35:E7:05:41:A4:8B:25:86:A4:D3:2B:D9:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/21bbf7-cbf2-4198-afcc-4be4dd6cd2ec/1/Cs89zOoxfjXnBUGkiyWGpNMr2Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:6c:8a:11:26:3e:60:16:8f:2d:38:47:5f:74:d1:4a:9f:
48:25:d3:18:41:34:40:03:b0:25:72:3f:23:3a:75:f4:06:cc:
93:b7:45:5f:98:ab:00:46:55:1a:e3:11:0c:e7:c7:04:fc:5e:
d3:92:5a:0a:23:d0:22:7d:a6:09:3a:ed:34:44:c3:4f:d1:4a:
08:ee:ba:86:d6:d3:5a:85:b2:88:bf:dc:2a:e0:ef:7a:9c:63:
67:e4:ee:d6:bd:10:22:a6:4c:9c:64:f8:c8:06:17:52:8f:92:
8b:66:3e:37:db:72:0b:6e:bd:64:db:fb:45:52:7e:4c:1d:68:
cb:1c:ef:16:d1:84:e3:5c:29:79:56:1d:29:57:16:1a:00:d2:
26:f9:d4:74:ab:07:7e:04:cd:7c:4b:d9:66:9a:19:cf:a3:ab:
0d:6f:f1:a4:a7:bb:11:b8:f2:a8:6b:74:1d:52:23:ff:79:09:
66:a0:12:ff:7f:8d:5e:b4:6c:86:3d:65:7d:79:94:d7:87:12:
3c:46:2b:31:75:ec:01:55:30:54:35:e8:3d:fa:a1:f7:21:87:
3e:88:10:09:d8:5c:aa:46:38:ee:aa:05:d1:e6:c1:30:1d:59:
db:3c:21:9d:42:2a:43:f6:9d:34:ae:3f:5c:c2:41:89:60:25:
7b:e1:56:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:29 2025 by rpki-client