Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.mft (raw, json)
Hash identifier: dNXB6968X+FRL6QBbTDheaWS+BLXY7X2dDlq++9L7eA=
Subject key identifier: 13:CB:0D:93:54:FB:95:28:2E:CD:AE:98:DF:C7:64:40:BB:3A:1D:5B
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 0194BBCE1DD6A168332CDE29C0B71812F9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: C5NMNrdzAIhlucn7D9SGaTlaxzA.crl (hash: ozEk2gpI9tN2SZf5/oJd2d02Wo+XTjTOXL/aDLmNFKc=)
2: Gx6kPcyxpQCfjzDOqvTPIqfhzSo.roa (hash: cyozRe1tjffBQUtfs/kFeEbNNq7a/YhvaL4ybQ6y3bs=)
3: KDMQDMSKvzkVFCIuQ1vi5IKxFqc.roa (hash: W1z4PN9ehAB8VlW2fAtV3SogXVKZbFhw7EL82DUKuEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:d6:a1:68:33:2c:de:29:c0:b7:18:12:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=13cb0d9354fb95282ecdae98dfc76440bb3a1d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:f5:ae:48:58:fb:0d:03:ff:2b:8d:1d:94:
6a:f6:96:a7:97:2a:fc:e7:35:ec:37:df:41:53:ab:
d3:5a:e9:29:c7:80:51:af:ab:0c:c9:52:70:0e:03:
5f:fe:77:7f:ed:95:da:5b:16:85:39:13:55:45:99:
d1:c9:e0:e3:4e:98:e9:76:70:99:6a:62:f9:1e:b0:
0d:ee:e4:91:45:2f:39:d4:eb:1c:9d:a6:a5:de:37:
1c:ec:44:9c:11:80:4e:9f:e0:16:b7:29:60:9f:b2:
5e:93:cb:3b:8e:b8:84:76:1e:ae:d5:21:74:11:d2:
0c:af:8b:00:41:f9:13:4d:2f:da:96:75:bf:07:d0:
2a:fb:0b:7e:88:49:74:b1:a9:ad:77:14:84:cc:6c:
29:1f:29:28:e8:4f:61:a0:00:04:b4:fa:b3:fb:1a:
e1:c8:32:95:34:26:ae:cd:43:c7:26:38:10:34:c9:
c6:c6:a5:ce:9d:45:ff:c6:99:00:56:82:d3:49:cc:
b6:ac:21:61:59:ba:d7:a0:21:e5:a0:4f:47:0c:6f:
e1:bb:eb:12:7c:b4:c0:a9:da:cb:5d:69:85:a4:fd:
d0:56:9b:77:d1:ab:47:ef:af:66:b4:8a:34:52:9e:
7d:b3:5e:f1:d9:76:c3:e6:9d:15:2b:fa:d2:af:41:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CB:0D:93:54:FB:95:28:2E:CD:AE:98:DF:C7:64:40:BB:3A:1D:5B
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:ac:45:b7:8e:f7:50:a9:51:62:a6:90:b4:16:85:6d:b6:
75:9d:9f:c8:4d:29:2b:71:77:50:c7:d5:70:0b:dd:81:d0:03:
94:33:49:16:cd:28:f7:b5:e8:7e:79:97:96:f9:25:68:1c:ff:
f9:26:de:10:f2:61:69:4b:6a:e0:8f:d4:cc:20:f9:19:c5:98:
d6:f1:18:43:39:9b:1b:7d:d7:f9:e5:0c:93:b7:ef:db:6b:85:
3c:47:c2:b6:06:d7:a6:be:79:8e:06:fc:04:aa:7c:b7:b0:52:
2b:6e:38:fb:9f:ff:5d:8d:28:c9:b5:4d:7d:0a:f6:5b:06:a4:
06:24:46:99:44:54:ae:eb:be:53:c8:69:09:fc:f0:e6:95:c2:
2b:ff:93:09:fe:75:e1:a4:ed:90:ac:cd:1c:4b:e1:a5:8e:68:
34:0d:2f:c9:61:9a:16:40:45:6e:b1:70:a5:76:0e:d0:2b:73:
31:bb:c0:b4:9c:b1:77:0b:c8:ff:d9:95:a0:2b:2b:5f:78:69:
5c:20:18:41:b2:47:ca:bd:34:52:b8:b9:8f:e6:2f:d9:08:65:
5c:fc:2c:14:0e:23:c2:45:13:1b:2b:8d:e2:8b:98:ee:3b:37:
e6:38:38:56:35:bf:ff:01:73:19:0d:c3:3f:44:e6:10:cf:89:
27:e9:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:46 2025 by rpki-client