Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
File: cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft (raw, json)
Hash identifier: fnWW5vGzG48WQkS3+fqbM/OLdvrpFujLOUyT0ZRTGd8=
Subject key identifier: 09:43:F0:D8:63:81:0C:B1:72:AE:C1:E1:F4:10:FD:44:63:EC:8C:87
Authority key identifier: 73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
Certificate issuer: /CN=7316772efce2a133fb7f8720929d0560cef1db46
Certificate serial: 0194BCE0D0F5F059508454E9410FB253AB5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
Manifest number: 0234
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: OFaqwNs5Dyg1d88HTW2H4gncFRI.roa (hash: wFSS58IXWFEAJ1x0fwOpm9Nk9TzQ4SMDP5LPnSI+dzw=)
2: cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl (hash: lpvSbU6XV/sCcU8ASz6NMCbgKRrOy+k4FS3BMIHJ/Rc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d0:f5:f0:59:50:84:54:e9:41:0f:b2:53:ab:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7316772efce2a133fb7f8720929d0560cef1db46
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=0943f0d863810cb172aec1e1f410fd4463ec8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:21:f9:7e:82:4f:b6:8f:92:0c:17:ab:75:
29:6e:76:b3:94:41:32:ca:8a:4c:46:78:28:98:14:
48:e4:ff:ee:87:3b:97:03:22:ab:80:59:82:fe:ca:
f6:c2:70:f3:3c:da:cb:8e:4b:ba:a4:fd:4e:77:61:
8f:03:c7:71:34:13:dc:bb:60:c7:59:49:b8:15:31:
71:da:93:43:ad:a3:1c:9b:f2:5b:5a:d0:7a:98:4c:
6f:64:0f:6f:d9:83:86:ef:ed:06:a5:05:67:5b:b4:
eb:4b:62:03:37:b9:a8:59:cb:8c:3a:95:a4:31:9c:
66:e4:f6:a1:95:2a:84:8e:7e:78:25:5a:68:ec:cf:
54:52:eb:00:55:75:30:5e:42:21:c1:77:fe:6d:44:
79:44:c2:91:15:3e:04:07:a2:30:8d:ac:8c:38:75:
d0:7c:47:c6:24:54:34:08:fd:31:89:f7:28:97:66:
c7:71:e3:22:78:a6:6e:bb:46:82:f1:64:1c:b8:8b:
50:9d:29:6c:c0:d2:94:a5:fd:3a:f2:79:d0:d3:bc:
fd:ef:96:74:08:27:ee:5a:77:1b:f6:b9:82:3b:38:
71:15:2b:92:c8:b7:e7:c1:42:cb:b1:b8:b8:6f:cd:
a6:33:a2:3a:6b:86:e6:b7:a0:3b:05:70:e7:6d:41:
0b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:43:F0:D8:63:81:0C:B1:72:AE:C1:E1:F4:10:FD:44:63:EC:8C:87
X509v3 Authority Key Identifier:
keyid:73:16:77:2E:FC:E2:A1:33:FB:7F:87:20:92:9D:05:60:CE:F1:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxZ3LvzioTP7f4cgkp0FYM7x20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4e8d57-53ca-49c5-97ef-1c876db44fe2/1/cxZ3LvzioTP7f4cgkp0FYM7x20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:0e:f2:d7:e7:1c:66:3b:ff:ac:11:5e:c4:9d:69:85:7c:
85:c1:89:86:25:de:ba:99:e2:75:8e:0c:6f:87:74:cd:5e:a6:
2b:2b:c0:76:56:44:b5:6a:ab:27:25:4b:35:99:1c:54:e6:a0:
23:2f:81:14:d9:bd:75:bf:d1:ea:fe:cc:48:6c:b0:50:a8:b7:
61:09:80:38:46:21:a4:d8:42:96:16:10:c3:e4:a4:cc:b5:91:
7b:41:11:4d:4e:a4:6c:1e:34:45:a1:cf:03:39:e7:f1:4d:75:
21:fc:cd:87:e8:1d:4a:66:78:b9:5a:a7:9a:35:38:72:90:89:
fb:b9:2e:6c:37:1d:ee:76:a0:75:63:9f:34:3b:86:ff:f7:4f:
fe:0d:0f:9e:ee:d9:51:a7:08:64:c2:4b:86:1f:ad:cc:a0:11:
6a:30:40:6e:9f:88:56:05:d9:85:42:5c:a5:2e:fd:0a:42:a2:
a7:1a:9a:55:a7:5b:ef:50:1c:7a:09:67:16:d8:34:38:93:d9:
37:7d:e2:73:43:eb:31:35:dc:be:c9:1e:d9:16:e0:43:7d:1d:
06:a9:b8:a3:e4:eb:40:ba:aa:d5:f5:a4:3f:b3:7a:8f:98:52:
05:e7:c0:a5:68:f6:8f:d4:52:81:44:aa:1b:33:dd:25:c9:76:
38:c3:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:46 2025 by rpki-client