Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
File: CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft (raw, json)
Hash identifier: P8Lu819xrdUZyzgovWaad9NCp3MAOsw1v2y/qcBjOWg=
Subject key identifier: 7B:65:B0:61:D8:B7:A2:CB:6D:CE:A1:F8:D3:F8:B7:A8:86:E2:64:FA
Authority key identifier: 08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
Certificate issuer: /CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Certificate serial: 0194BC04B82A689E758057B6F09CD426D1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
Manifest number: 0C6E
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl (hash: j/MWHAqaWcs2q1QxGG7GBcWiprKVWRYREBD/+kO8Sq4=)
2: xhegVBAKk0XT86_ijfwUPQBwbjE.roa (hash: HzUtvDRCwVOU+h+rA3imDZdqrxNmwf2Nw3JBM6GcfyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:2a:68:9e:75:80:57:b6:f0:9c:d4:26:d1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08664835f8aafe614971ffa8683f9f74bf4d0ff4
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=7b65b061d8b7a2cb6dcea1f8d3f8b7a886e264fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c4:19:95:c2:da:43:56:35:0e:da:c2:3c:9c:
cc:16:19:f3:39:92:6f:78:14:ae:a4:52:64:f8:70:
b7:68:44:96:b2:e3:bc:9f:15:cb:4c:3e:71:2f:c6:
9e:40:5b:f2:f6:10:be:ef:d1:ae:2a:5b:d8:a1:64:
46:34:de:cc:88:a3:4b:5c:79:0b:c6:35:19:9e:87:
f7:f3:4e:2a:aa:a6:1e:cb:c7:90:31:dd:00:e0:e2:
35:86:7a:6f:98:3b:e5:62:6e:bc:e9:dc:6b:e1:de:
9d:5a:96:7a:64:54:b7:32:3e:3d:9e:ea:c6:27:cd:
6f:f4:3c:20:e3:3a:7f:22:5e:74:3d:42:50:19:e1:
80:5a:ff:30:11:68:6f:d1:b9:78:d6:d9:14:13:6a:
af:06:03:6e:70:0e:e0:28:46:53:93:6d:cc:1d:c4:
07:aa:69:a3:d0:89:9c:fa:2e:91:3c:37:b3:77:58:
f6:ff:6e:be:85:52:01:1a:bb:aa:89:5c:5c:10:ec:
99:a9:e3:95:56:96:cc:08:1a:17:71:58:5c:02:88:
b4:c3:a0:ed:6b:3b:5e:36:13:fa:b2:c2:3f:69:84:
fb:46:2d:41:7b:12:ce:41:a4:78:f3:70:8c:1d:52:
fb:48:d3:9e:e0:28:44:b3:26:c1:a0:d9:21:d8:98:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:65:B0:61:D8:B7:A2:CB:6D:CE:A1:F8:D3:F8:B7:A8:86:E2:64:FA
X509v3 Authority Key Identifier:
keyid:08:66:48:35:F8:AA:FE:61:49:71:FF:A8:68:3F:9F:74:BF:4D:0F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGZINfiq_mFJcf-oaD-fdL9ND_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cef3b5-a848-43d5-873a-0757a6d28224/1/CGZINfiq_mFJcf-oaD-fdL9ND_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:a0:18:54:2e:b3:16:8e:7d:21:d5:19:9b:73:b9:2e:6d:
9e:7b:02:c4:de:67:13:20:b2:f4:ea:05:a6:8d:df:ef:e7:18:
92:3d:92:85:b8:59:71:0a:2e:e6:38:ee:df:b2:cb:f6:b2:e3:
34:d8:a1:58:d1:dd:d8:9d:5d:a2:91:9f:25:f1:24:a5:a1:e1:
ea:73:07:09:d6:61:23:1a:5f:83:d1:c5:39:84:d2:89:51:55:
80:47:80:67:06:ef:be:37:88:31:9e:b3:ab:d6:7c:63:b2:55:
7d:3f:0a:53:1a:37:23:1e:5c:59:41:65:79:f7:cb:84:f0:b7:
aa:19:ab:95:b1:ff:4f:2e:0c:18:24:0a:15:f2:50:fe:d7:23:
4b:90:a8:19:77:56:ea:cd:f3:f3:dd:c5:7d:48:47:bc:30:17:
f8:af:2a:19:3d:04:17:07:3b:a2:95:43:1c:44:ec:6d:59:60:
98:6a:53:6a:96:d4:39:3c:c9:bb:60:b6:b8:33:a5:48:36:36:
13:d1:03:89:48:03:c2:03:c8:0a:29:81:85:b9:ca:95:01:37:
ae:76:fa:35:46:6d:b3:c5:f6:6d:04:24:8e:98:32:1e:ed:bc:
58:6d:5a:fc:a9:5c:64:77:09:6b:94:3d:3d:16:e6:af:31:a8:
96:e9:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:26 2025 by rpki-client