Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
File: curcen7OR31fTXdyQ7YPK7u3VgM.mft (raw, json)
Hash identifier: HC+BJ2lckEveUUgAXVtJYFJT45ejoteD7IRMo/h4iz4=
Subject key identifier: 28:79:D0:E1:8D:2F:2E:98:1B:D9:A1:3C:6A:E0:F8:3C:38:65:57:D5
Authority key identifier: 72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
Certificate issuer: /CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Certificate serial: 0194BC3C450DE2D7FCB0E682DB73DA786081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
Manifest number: 0694
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: curcen7OR31fTXdyQ7YPK7u3VgM.crl (hash: RrShx4F5pyWFOBpmN5/Olh5RR3ZwUNCucNjPEum+K+o=)
2: mFFNgz0LoOIjeTT2_r0-wBPyYQM.roa (hash: 8oKdatfS4ydJsathXE08ETrnAsR4fEoI1qYHumOim1w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:0d:e2:d7:fc:b0:e6:82:db:73:da:78:60:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72eadc7a7ece477d5f4d777243b60f2bbbb75603
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=2879d0e18d2f2e981bd9a13c6ae0f83c386557d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:55:b5:6b:fa:db:0a:93:b0:48:14:c9:aa:
97:68:99:fe:d3:60:24:21:45:1c:1b:d2:c1:f7:d7:
e3:56:00:29:66:8a:75:4c:9d:2f:bf:65:01:1c:a4:
1c:95:18:ae:91:31:90:89:2a:35:6b:67:a3:24:a3:
a9:81:e5:fb:5d:e5:9b:c7:f5:79:b4:58:71:02:32:
c5:75:a7:2f:44:d3:a5:37:49:65:97:71:5d:5b:c7:
c2:8b:ec:fe:a7:df:46:0c:85:4d:bd:0e:46:22:15:
25:f4:e2:ce:0a:fd:83:fb:0e:0f:aa:61:71:90:1a:
f6:89:01:86:4e:2f:fd:75:e9:18:98:f7:85:db:c4:
aa:58:d4:85:af:08:2b:19:0b:73:e6:9d:64:00:e5:
d1:b9:1e:3f:83:03:90:fe:8a:d6:47:96:3e:d2:f5:
2f:23:7b:c9:c0:fd:2f:69:33:dd:78:0b:79:89:6c:
4c:0a:d7:27:2f:ad:d4:00:79:a4:e7:ce:42:66:4d:
7d:12:b1:51:6d:a0:b9:b5:e4:dc:92:e8:73:b5:6d:
e8:25:0b:4f:50:87:a6:c5:b3:a9:35:d5:6d:60:c1:
96:93:e9:2a:64:2d:a8:03:b7:43:e4:01:f9:51:e6:
af:6c:4f:f6:d3:ca:2d:ac:0e:ac:f8:0a:2c:f3:52:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:D0:E1:8D:2F:2E:98:1B:D9:A1:3C:6A:E0:F8:3C:38:65:57:D5
X509v3 Authority Key Identifier:
keyid:72:EA:DC:7A:7E:CE:47:7D:5F:4D:77:72:43:B6:0F:2B:BB:B7:56:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/curcen7OR31fTXdyQ7YPK7u3VgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c09c64-0baf-4b07-8d29-473851709c58/1/curcen7OR31fTXdyQ7YPK7u3VgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d1:64:8a:d3:a2:4c:bb:93:ee:6a:ce:de:e9:b3:e1:19:30:
2e:63:d1:55:81:d4:aa:f2:07:59:27:23:21:e2:c2:43:1d:c9:
2e:fd:bd:c4:c2:f9:3a:a9:c3:04:f0:9e:e6:40:83:2c:0a:03:
45:f8:63:46:9b:97:da:72:7f:48:61:79:c7:c1:ff:b3:b3:a4:
63:f9:64:71:80:15:e3:cc:e8:fc:a0:8d:8b:62:80:19:56:40:
3e:b1:c3:0a:7a:87:b7:99:a3:3a:d5:e1:a6:0a:f1:02:45:12:
44:d3:02:ac:65:27:52:a1:8d:7f:42:d9:cb:88:c0:72:05:4e:
7e:69:42:9b:8b:1c:3c:8d:41:1b:84:b1:9b:5e:3f:52:3d:89:
60:94:dd:71:44:fe:92:0a:7a:dd:ce:09:9c:75:e6:96:ca:ae:
8a:4b:65:7a:6b:01:ce:57:f5:a0:34:59:65:dc:6d:e1:13:66:
12:24:8a:68:28:c1:c6:6c:be:59:b1:8a:dd:54:4f:7e:b6:1a:
ed:78:8e:d2:6b:d9:4f:87:ee:3b:6f:02:35:a9:45:aa:70:1f:
7c:2f:b4:31:d4:bb:c9:19:c2:02:c3:46:f2:51:fb:b7:5d:a9:
49:31:94:93:3a:76:5e:fd:f6:22:89:66:a8:af:43:22:c5:df:
d3:0d:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:20 2025 by rpki-client