Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json)
Hash identifier: dOfpJrMgYGPaKPh6TNYDn7QkUJF8PwOBroJ5YiloRPc=
Subject key identifier: 14:F7:A9:CC:6A:F4:A2:A9:56:EF:D2:E0:0E:63:BB:41:8A:83:3E:16
Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Certificate serial: 0194BCE0CB9FAFA2AEEA029BCC734399D10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
Manifest number: 0D17
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 1xdt--r7pLEFi9mXxf_8plnoO9U.roa (hash: uBNn/aL6HR9ZcIyFxzznkQDCk3CxgIi9L2wMoXNB7qk=)
2: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: wIzkhZKbfW/tZq1K0EVTkJCemZY3Uf066KhbBQVyPnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:9f:af:a2:ae:ea:02:9b:cc:73:43:99:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=14f7a9cc6af4a2a956efd2e00e63bb418a833e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:14:d2:45:db:c9:2b:b9:f3:df:a3:c3:1b:
ce:34:90:c6:1a:31:73:3e:0d:a6:eb:26:92:81:1f:
99:1e:1f:68:c7:1a:a8:b2:06:44:6e:93:52:66:27:
fd:ec:5f:61:0d:e9:8a:fa:7b:a6:49:3c:79:18:3c:
e9:73:de:42:e7:89:1e:f1:c5:6a:23:fb:cb:3e:8a:
ec:ee:a0:9f:e7:a9:2b:81:83:de:9c:aa:73:d3:d5:
76:b8:d9:84:10:e8:44:74:17:6d:b4:f5:7d:9a:98:
81:74:67:dc:30:1a:d6:95:82:18:f6:d5:b4:eb:d4:
c2:62:65:5c:79:45:d0:20:16:9e:e5:53:37:ae:b9:
69:aa:93:07:7a:e4:ec:7a:1c:50:30:3f:cb:76:45:
f5:f8:68:87:c3:b7:f8:7f:0f:0b:bd:01:85:33:e6:
4b:26:0c:31:f9:70:a8:d8:c7:10:46:e3:a2:43:d6:
80:94:48:0f:02:e3:8a:8b:3e:2a:a1:4b:97:0b:9f:
84:fe:dc:7e:0b:1b:1a:4c:b5:03:82:de:1d:93:fb:
cb:b6:4d:c5:29:51:63:41:5b:ac:12:5e:4e:fa:bd:
c0:d9:a1:44:83:ee:b7:48:53:f1:05:fa:d2:63:fe:
5e:47:de:47:8b:a6:ea:95:62:7a:71:88:c1:13:42:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:A9:CC:6A:F4:A2:A9:56:EF:D2:E0:0E:63:BB:41:8A:83:3E:16
X509v3 Authority Key Identifier:
keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0c:ef:08:7a:f1:d1:f3:99:34:d0:68:13:b4:a8:80:99:8b:
eb:d5:66:a0:b7:9e:9b:da:78:11:d7:d4:6f:c7:c7:07:a7:d7:
ff:83:ca:5a:fd:4d:74:25:10:de:62:e9:a9:f9:ac:7a:10:b0:
9c:4e:ba:b5:64:98:74:ac:42:24:d0:af:b4:f8:00:54:55:26:
55:8d:17:5b:6c:4d:9d:03:d0:ab:1e:08:a8:db:ed:43:1c:da:
42:3c:08:a0:89:a9:4c:cd:f4:02:1a:3f:b9:fa:f8:4f:82:fc:
e3:72:8a:8b:9f:0e:6b:7a:0a:cf:2a:77:a7:27:cd:bf:0b:7f:
15:0f:8d:68:30:63:5e:d0:7e:e8:07:d6:66:18:fe:d1:ba:15:
c3:43:7f:4f:19:e1:a4:17:47:bf:35:c7:39:d3:37:cd:21:cf:
8d:9d:fa:40:c4:37:87:ec:b7:4d:e0:b2:c0:79:98:3a:2e:b4:
01:ed:05:85:7c:70:34:c8:f0:9e:c0:75:7b:5b:ac:5a:6c:df:
9e:79:de:a4:14:1b:66:66:9c:0d:39:4a:b5:7e:fe:5c:0e:04:
30:b8:d1:0f:7f:2b:c4:25:ac:e7:9d:73:e6:b4:6a:c3:bf:49:
b3:4c:ac:d4:5b:2e:51:65:58:c3:17:84:a2:64:50:0a:1e:6a:
ac:be:f0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:19:05 2025 by rpki-client