Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: a0xwb6uL3X4gqIpU//PDmPrv8VoXKYUvIyMP1T+etDc=
Subject key identifier: 02:3B:91:19:63:3D:32:D9:2D:3A:E5:FA:A7:3E:83:9B:A2:B1:55:93
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0194BD859370A4E2E8790B7671E25757BB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0225
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: wqbJ4LnqVU1kyejQ9UvRBBqqEvlMPqtBXhsvh9kfqPs=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:70:a4:e2:e8:79:0b:76:71:e2:57:57:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=023b9119633d32d92d3ae5faa73e839ba2b15593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:71:1f:3e:89:72:2f:2d:61:2c:ea:3b:d0:
23:9e:cc:73:3d:4c:1a:34:1f:a4:01:9b:e0:7b:52:
c6:51:fd:92:d0:3c:a0:e1:74:ba:aa:24:fb:87:aa:
52:2e:d0:51:60:9a:71:a5:56:c1:8b:98:5f:ca:bf:
67:de:b8:26:32:d7:87:71:4a:cd:50:3a:b5:b1:64:
e2:58:fe:de:b5:83:d7:63:29:f7:58:13:0e:17:b7:
39:90:96:ab:50:6f:d3:88:f5:ed:9f:b7:9f:84:42:
65:f2:33:f5:98:05:9d:c7:f6:54:aa:06:82:bb:75:
77:8c:ef:6d:72:60:b7:4c:b1:b2:77:2f:ed:e8:3c:
2f:e8:44:e7:66:4c:35:63:fe:2e:ea:5a:7f:e7:bf:
29:b4:c6:ca:ec:f8:20:f2:0b:d7:72:e3:dd:cd:59:
e2:ae:6e:df:6f:5a:89:ca:73:1f:dc:e3:04:b6:7b:
89:a0:d9:aa:64:79:e8:92:81:ec:7a:a4:ac:a0:51:
2c:53:f8:e8:fd:a5:3a:83:1c:c0:fd:a5:d1:bd:b0:
01:18:cb:79:d8:a1:57:75:4f:8a:39:6c:a4:c7:97:
10:93:d2:cb:30:01:db:a9:7e:5e:f3:c9:9a:70:e9:
c6:b1:36:82:ac:0b:5a:f7:d6:be:ed:d7:3e:35:37:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3B:91:19:63:3D:32:D9:2D:3A:E5:FA:A7:3E:83:9B:A2:B1:55:93
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:11:d7:be:5d:6b:59:a6:0a:24:29:81:25:b4:68:56:13:e3:
53:6f:f6:36:f3:18:5b:2c:b1:fc:a6:28:4e:e6:dd:6f:e1:0a:
8e:3e:23:97:8a:61:fd:0c:a6:66:c5:73:08:46:12:b2:5b:44:
80:74:d6:38:1d:df:a0:5c:48:e2:40:7c:15:25:75:a0:2f:6c:
83:af:3c:a3:4a:a4:36:f7:0b:cd:9c:d1:c4:14:47:21:58:f2:
81:02:7a:c5:59:4a:96:f0:cc:a9:fe:48:fd:fd:3a:49:47:ee:
ec:c8:ad:8f:83:c6:72:69:53:e1:3e:9d:47:ec:8e:de:db:cc:
9c:a7:3c:75:49:55:ca:73:3b:85:4a:4c:6e:76:86:5d:05:52:
9f:67:02:bb:25:af:9a:4f:77:da:87:9b:57:02:4d:51:c4:9a:
74:31:a1:11:51:93:9b:15:ab:d1:26:b9:e6:69:88:65:6f:dd:
e8:24:b5:c1:d2:5b:bc:47:a0:84:20:0b:25:1e:46:52:b4:3c:
e4:9d:2c:11:b0:67:03:8e:2b:6e:6c:54:b2:48:2a:98:e8:95:
7f:54:53:f5:37:3b:7b:8c:5b:d6:1a:5e:6a:60:2e:6f:f2:02:
2a:21:d4:71:cd:9d:59:81:66:31:e2:40:c7:b1:db:2a:8c:cb:
d3:f5:5d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:40 2025 by rpki-client