Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json)
Hash identifier: 0Yl/0FavIAPe+LuXqb5nw90ISaltqTPBhtj8i0kUlTo=
Subject key identifier: CB:2A:11:68:64:AF:E3:E1:8E:C6:0B:B4:1E:1B:78:0A:EA:B4:F0:D4
Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f
Certificate serial: 0194BC3C78037E78329BB62EB9F8F7DE9F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
Manifest number: 041B
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=)
2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: QUwnREwCGdWDS4JmaZ5AxLAUdo9MxiUsqhN8gSy6ZxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:03:7e:78:32:9b:b6:2e:b9:f8:f7:de:9f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=cb2a116864afe3e18ec60bb41e1b780aeab4f0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:c6:51:7c:65:e9:e3:ff:59:8a:8f:53:cc:
4b:d1:75:13:5c:16:f7:d7:4c:dc:c1:b8:dd:ab:ca:
7b:6e:0f:50:d8:fd:f4:c9:05:88:b8:9c:d3:1d:06:
ce:a8:de:8d:bb:64:e0:00:5a:ac:5d:4f:78:4b:1f:
2b:9f:eb:a0:b1:33:50:4e:c3:2d:95:3f:a0:08:d4:
c6:bc:38:ae:2a:67:d5:2d:fb:55:47:47:55:ab:a5:
62:f4:bb:21:89:7a:ae:f9:70:7d:ce:82:59:f0:a1:
c9:cd:68:39:fb:df:ed:56:df:83:d4:b9:9e:93:5d:
3b:4f:03:a4:6a:fe:18:1e:a6:e6:f8:39:30:72:76:
c9:09:0e:1d:6e:e1:0f:30:3c:40:c6:83:e0:46:61:
39:ab:da:fc:0c:97:65:3b:aa:f5:e7:79:f1:5c:a2:
11:d1:35:98:3e:5f:b2:5a:a3:57:e6:2e:c1:56:97:
14:d7:ca:aa:72:28:3a:9d:3e:d6:e9:e2:65:8b:6b:
b5:2b:86:03:6c:8d:41:f3:8f:1d:b2:99:b0:d3:5f:
76:02:32:64:cf:73:d3:ad:a2:c0:5f:4b:08:b3:0b:
92:6b:9b:36:d7:01:60:46:83:40:dd:f7:38:3b:8a:
bd:45:32:13:6b:d5:55:29:88:28:9c:d5:42:29:fe:
6a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2A:11:68:64:AF:E3:E1:8E:C6:0B:B4:1E:1B:78:0A:EA:B4:F0:D4
X509v3 Authority Key Identifier:
keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:8c:b6:df:3a:8d:38:e4:01:ba:2c:4c:c2:23:3b:de:fa:
b5:ff:43:70:08:39:fa:a7:10:3e:9a:f9:9e:3b:8c:56:82:94:
57:18:58:f4:20:8f:d6:96:31:42:2c:9d:c4:a8:01:ae:b4:38:
e7:7a:6e:7c:a9:ca:a9:08:b8:0b:78:83:be:89:92:0a:f4:24:
34:16:e0:0f:b2:d8:5c:3a:f6:3a:63:18:85:ac:ab:2b:76:27:
d5:ec:1e:88:af:6d:21:56:51:48:96:f6:c5:5b:e5:a5:aa:a3:
c3:72:cf:d5:2f:c6:d5:a7:3b:c0:04:7f:79:46:90:fe:2e:31:
bd:b5:b6:94:1a:ec:b0:0f:2c:71:eb:37:7e:66:b6:c7:b3:2d:
77:ba:af:88:80:e7:af:d9:f7:3b:f8:33:8f:22:5f:e0:70:28:
13:11:31:7f:ca:da:f6:25:be:cb:67:28:bc:d3:7b:4f:3e:75:
20:29:16:b5:32:4b:05:fa:ed:05:6f:51:96:37:a0:e3:00:a1:
c5:76:6c:c9:6e:68:82:8e:50:ff:08:41:fa:aa:a0:ed:57:5b:
2f:74:02:7d:af:64:cb:a9:8f:f9:96:7a:a7:b5:bc:80:78:97:
c7:8b:de:f0:22:be:76:f3:d9:a4:18:74:00:93:06:f5:62:4f:
32:0e:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client