Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier: 8wDsNjijaKGlgHHjjmSwsNxvUPK1yTEm+sE6sieSh1k=
Subject key identifier: 79:86:71:8E:31:4B:61:9D:16:BA:8B:A2:44:EE:69:66:D4:64:D6:52
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 0194BC72DBADB1DF9BFC42DDCA55FC196AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 0SF7pOBg_ur6TuAnhKZvtMcmyMw.roa (hash: 5nIyMEgIsmgFGVdTMcAMulKSrVsz482NfoizOY2OUOA=)
2: BlxVN2nySjuRFcG8LwCKwBypJPg.roa (hash: sOjlIUfSe611hFnqoPqxZzo6197G5DyyzY2FNctRB8Y=)
3: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: NBq7ibtUfeqGFtWV3BVuQbjkoh6S9OnQxhwB4Ch6F2k=)
4: NRfFsUR7AGxa8PB6QGVHatHGp1o.roa (hash: rmTNmbYj44wVhe02yXW4SHwTBM7U77sGXsE2DRCvILs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:ad:b1:df:9b:fc:42:dd:ca:55:fc:19:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=7986718e314b619d16ba8ba244ee6966d464d652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:11:b9:e0:52:ce:04:af:ac:ac:b9:1d:13:
55:78:0a:27:fb:3e:9b:f7:ae:a3:89:bb:09:d9:c2:
f1:9b:65:d7:71:63:82:1a:56:27:71:50:3b:c5:c3:
d7:69:cd:5e:f2:8a:03:1f:89:51:b0:92:13:0b:2a:
80:b3:20:00:43:4e:55:9e:99:25:c4:ed:c6:9d:58:
0b:8f:8e:d8:72:7c:33:a9:88:4e:30:a2:8f:6d:fd:
78:e7:a2:da:68:70:c6:0e:53:92:1b:d2:50:da:e9:
94:61:3d:83:e8:e2:88:6f:62:0b:91:f3:cf:39:21:
96:1f:cc:a4:6b:53:ed:0a:07:6b:63:18:3e:f0:e5:
55:a6:1e:85:e0:d5:bb:74:e1:b9:a5:31:66:49:fe:
8d:fb:3f:f4:bc:78:81:9d:b2:cb:53:92:0c:8b:fb:
70:ca:b9:e8:6a:8a:17:9e:9d:12:14:4b:f6:13:b5:
2f:b3:8c:f3:ba:1a:ce:ee:e3:b4:e5:4a:9e:b2:60:
13:c0:b8:18:33:b2:a9:fc:21:07:7f:3c:57:af:fc:
77:c6:be:74:61:93:2c:f1:6f:58:83:0b:a3:f1:35:
45:9a:5c:ad:b3:cb:4d:a3:fb:f7:59:25:04:ed:6d:
3e:c0:67:a8:ba:27:8c:9b:dd:1a:c4:7c:54:ff:e2:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:71:8E:31:4B:61:9D:16:BA:8B:A2:44:EE:69:66:D4:64:D6:52
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c2:a4:cf:f0:40:22:24:60:d5:c7:1b:bf:a8:4e:7b:e5:55:
f8:55:d8:76:bb:94:8e:63:0b:b9:70:ea:3d:c5:25:8c:bf:78:
f4:01:22:f1:be:12:ac:46:be:a5:f0:2d:9b:15:97:34:bc:8b:
ff:d2:d5:df:73:f2:9e:07:e7:77:10:d8:05:30:ac:45:72:5f:
f0:d4:59:27:28:34:84:88:ff:52:a2:f2:29:67:a2:ab:a9:4f:
4d:27:e3:fa:d9:a1:31:82:f1:e4:af:08:16:1f:2c:88:10:ab:
a8:4d:f0:7a:85:5a:eb:53:cb:cb:e2:43:de:92:d2:d6:e6:1b:
07:b9:9d:f1:99:fd:b1:54:60:6f:25:c2:9d:0d:88:7e:94:a3:
06:8c:6a:cb:af:61:52:42:b8:98:15:09:9c:1c:f7:42:5b:e1:
c4:ef:53:9b:b1:5c:7e:5d:e7:31:dc:5d:2f:8d:5b:d5:9e:7d:
ac:36:9a:ba:43:d2:79:54:89:2b:97:d9:bd:72:d3:89:4f:e2:
ff:45:1e:64:3a:c0:30:1f:ba:d4:ee:9c:f5:74:d8:81:e1:51:
19:96:f5:70:00:e8:5f:32:a2:a9:79:50:22:6d:18:29:3a:30:
ff:71:f6:be:f4:14:fb:28:8d:92:bc:85:e1:64:1f:ca:1b:1b:
04:e1:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:45 2025 by rpki-client