Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
File: Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft (raw, json)
Hash identifier: /kieAYygzDi+29LkSQ05CEtjcVyufAcP7x38sk8wohI=
Subject key identifier: 43:E0:6C:9F:B2:60:7F:F4:FB:9E:AF:A7:CB:C8:F8:87:4C:23:8F:7C
Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Certificate serial: 0194BBCE4FC252593E43B3D077F532D06722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
Manifest number: 03EA
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: 4vVSxg0KLKszb_U4S9rSdoaFOw8.roa (hash: RPAXRjtOt5jMNeEYJ4PrQAbbA73WZ8/bw4emEczQVts=)
2: Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl (hash: L8c6abB8W3Bai2PbIrkjs0p/shv8arCjnTs3WAJ4CXw=)
3: t3uXJVNYIcETNH2wbIt0kGmTa3E.roa (hash: TpjYWQB/dEWPF8i95tLxQWL3noXfiwIkXuk9Gm2aR3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:c2:52:59:3e:43:b3:d0:77:f5:32:d0:67:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=43e06c9fb2607ff4fb9eafa7cbc8f8874c238f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:93:49:ed:a0:e4:07:cb:31:65:64:13:4b:
b7:e5:58:3e:61:64:3c:96:2f:72:15:51:06:e4:34:
41:57:4b:3e:be:ad:2f:64:95:85:3f:d8:4b:ea:32:
6e:a3:0c:ad:bb:4f:13:ae:f8:f4:91:86:ea:33:95:
6b:c3:f9:ac:eb:69:28:ad:c4:4f:56:56:35:d7:f7:
44:31:09:15:9b:84:60:be:80:e9:ee:b5:d5:2b:b7:
53:ad:98:88:ad:7b:61:14:e2:13:0e:83:f2:a7:da:
98:b2:32:f5:18:1a:84:b5:e1:b7:5b:64:4d:01:b1:
fe:e9:a6:69:e8:28:0c:55:7d:23:3f:a5:93:27:91:
f4:07:f9:b3:06:16:90:32:f3:cf:69:ab:ec:9c:50:
c4:10:a7:6b:e1:c3:f2:44:be:4b:53:77:cf:3d:07:
b9:6c:7a:44:4e:51:ed:3e:50:75:0b:81:a8:48:ff:
c3:31:e6:43:1d:0c:87:4a:27:0c:58:93:61:97:69:
a0:6f:b1:7c:0c:0a:ec:6f:29:b5:c2:90:16:2d:37:
00:8a:12:2a:04:11:70:6c:3e:24:00:91:f8:56:4c:
c7:45:2a:4d:83:13:1b:70:7b:f6:a9:94:03:82:a2:
72:8b:03:c9:94:5c:e2:2e:41:8e:1f:d4:7d:bb:e8:
56:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:6C:9F:B2:60:7F:F4:FB:9E:AF:A7:CB:C8:F8:87:4C:23:8F:7C
X509v3 Authority Key Identifier:
keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e0:4c:5f:6a:43:78:26:20:47:f1:f3:31:11:96:03:30:d1:
e0:fb:2e:f8:fa:c6:35:8f:0b:6d:94:1a:fe:23:23:2c:46:aa:
c7:40:d7:26:49:30:61:a0:99:31:ad:fb:40:74:6b:f3:9e:f9:
08:ca:80:9a:10:5b:a7:f0:ca:f3:4d:91:0c:07:47:2a:97:c5:
98:27:85:c4:22:53:73:7e:e1:48:14:9a:8d:19:e2:94:00:b5:
cb:b9:ad:8a:fc:85:d4:63:6c:41:0f:52:c4:db:24:84:96:06:
0a:78:ea:c5:8c:c6:c8:fa:c7:84:a2:6a:80:0b:48:e9:81:8c:
39:50:be:c6:25:96:c5:e4:16:96:b3:a8:92:35:7d:bd:05:07:
04:75:a9:a8:54:fe:49:71:9f:c2:db:30:6f:74:c0:f5:4c:84:
1e:b0:78:a0:a1:67:0a:6d:e7:45:ee:37:a6:a3:da:2e:70:2a:
25:f8:9f:c4:a6:c5:20:5e:56:0e:8b:d8:5b:49:d5:7f:b7:03:
96:aa:0a:cc:03:60:cc:f6:1d:62:58:8c:a5:8a:28:5a:11:8e:
ea:cf:4d:f3:df:7c:f0:fa:59:d2:f2:f3:c9:00:24:d5:14:72:
6c:b4:03:33:26:04:89:94:13:ec:a4:a7:6f:e0:dd:58:36:3c:
71:2f:e2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:30 2025 by rpki-client