Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: gg4KhZZMxqtpjD5b/RPhDx5XxT5UmLSyx6VdNMnZabI=
Subject key identifier: 83:CA:9B:1D:35:A8:2D:F0:89:AD:B2:B7:BE:D1:8E:BD:FA:CB:B6:66
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 0194BBCEE86F97723F03F4CE208131720CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: L+Dtd/WTceFZ4FTTNT2tr5oGKyqZV/EEk11nf+rpCQ8=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e8:6f:97:72:3f:03:f4:ce:20:81:31:72:0c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=83ca9b1d35a82df089adb2b7bed18ebdfacbb666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:da:79:77:59:d9:2f:84:f2:5f:be:84:00:
8c:6b:1e:08:34:5c:42:0b:a5:17:cf:c8:d7:0f:60:
a0:21:e8:71:5d:bc:42:9c:44:0d:d5:2d:98:b9:1d:
f3:f7:6c:ce:2e:ee:18:85:cd:f7:44:7b:63:30:b5:
b2:1f:a8:3f:87:9b:15:89:27:eb:cf:ac:74:25:c6:
45:a5:ae:98:5c:da:e1:43:ac:cb:28:cf:eb:c3:6c:
d3:55:b1:04:ab:3a:11:0d:67:1b:36:b5:6c:a3:5d:
ca:b4:a7:39:6d:1f:90:c7:c5:6c:56:1a:c8:c3:4f:
b3:41:e6:b3:45:07:de:9a:7a:f4:b2:90:61:3f:eb:
41:3e:ff:de:54:3d:83:84:b1:f7:32:39:a4:d9:d8:
81:b6:50:b5:e0:24:e1:79:0b:59:40:06:9e:f9:9b:
ca:4f:16:ca:1e:02:18:82:18:10:51:1a:41:cc:3a:
57:f1:89:e1:be:43:f4:5a:40:46:14:a6:79:29:aa:
46:e2:fd:ae:07:a0:b1:9b:aa:4a:b4:e7:68:3a:b3:
83:50:bb:1c:3b:b5:e4:fd:b0:7b:50:b1:59:a3:36:
29:c5:1e:da:f0:a9:8e:8a:31:21:c3:7b:8e:0d:0f:
db:ab:5e:5e:71:9a:03:98:b5:6c:ae:6b:8b:25:13:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CA:9B:1D:35:A8:2D:F0:89:AD:B2:B7:BE:D1:8E:BD:FA:CB:B6:66
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:31:fa:6d:c8:35:8a:67:ff:28:ea:52:b4:3d:49:26:57:83:
bf:1d:7d:33:a1:b7:68:2a:2f:c5:57:18:69:57:9f:95:86:74:
7d:d6:31:55:9a:6a:b9:4e:7b:29:6f:9f:09:86:a8:3b:e0:23:
46:00:b0:12:63:55:22:26:33:e0:6a:4b:ac:ab:c2:5a:ac:90:
1e:80:ef:b8:65:cc:3e:8b:1d:31:9e:c4:13:3e:04:40:fc:cc:
3d:5c:40:34:82:82:95:9c:84:39:3b:0b:fd:2f:94:4d:2a:a9:
5c:97:d9:34:f2:cc:df:50:a1:b9:26:ea:fc:24:cf:b5:ea:2a:
8c:86:12:27:ac:dd:37:45:ae:19:f7:01:e7:f3:97:8f:07:3c:
74:16:2d:55:27:6c:4c:47:75:fb:e4:6b:92:8b:a0:ff:f3:9d:
51:94:96:2f:b4:01:ee:c2:a8:fb:54:0a:91:3e:ed:72:e0:25:
b4:3c:23:2d:2c:d4:98:f0:88:0f:cc:1b:7a:cf:0d:7d:c5:87:
1c:cd:15:a3:37:37:0f:45:ab:33:52:d0:f9:21:eb:f3:38:c2:
88:5f:e3:43:0d:4a:ec:da:94:3f:e0:81:52:e4:25:7a:16:d5:
af:5d:a3:ca:1b:79:e9:a8:2b:20:53:3e:00:df:96:82:dd:43:
55:52:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:04:56 2025 by rpki-client