Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: YEeIzpIe42qdQ2Mp1dUyJ87pQofi3BfwvgSuqP1yfVw=
Subject key identifier: D2:E9:DB:4A:E6:02:B2:7D:3F:5A:70:76:F3:73:95:72:E8:24:C9:3A
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 0195E07D774D518711ACF7210FB42B30F4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1154
Signing time: Sat 29 Mar 2025 06:01:13 +0000
Manifest this update: Sat 29 Mar 2025 06:01:13 +0000
Manifest next update: Sun 30 Mar 2025 06:01:13 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: 0tAlbOPHeUJwoWSAIyb9g8nEXGmFZQlOqSFvZeU74I4=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:77:4d:51:87:11:ac:f7:21:0f:b4:2b:30:f4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Mar 29 06:01:13 2025 GMT
Not After : Mar 30 06:01:13 2025 GMT
Subject: CN=d2e9db4ae602b27d3f5a7076f3739572e824c93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2a:ac:34:f0:f4:78:5f:0d:a0:85:9e:2e:1f:
c4:28:0c:83:23:08:3b:2a:d9:49:89:33:63:d9:a1:
4a:ef:e8:76:aa:93:2f:1d:45:ab:64:1e:83:66:76:
d9:0e:ae:4f:f0:b4:09:85:dd:ff:82:69:f5:2e:9e:
08:9e:64:0f:49:04:39:7c:9a:a3:9d:15:d7:e5:65:
ca:9a:e9:4b:1f:e8:d2:72:7c:97:fb:d4:e8:93:9d:
3d:89:ed:7a:6a:76:6f:7b:7f:79:c0:42:9d:99:cd:
1e:c7:62:24:7c:fd:8e:f5:f7:41:51:25:6d:6a:6c:
6d:e5:7b:1a:05:32:40:60:af:28:18:75:63:d0:fd:
bf:fb:42:8a:9c:66:d3:84:9b:23:c1:20:81:f1:4a:
7a:75:37:16:b6:6e:f6:70:a8:58:e4:5a:6b:bc:56:
91:1d:15:84:76:16:2e:72:04:2f:ac:65:bd:26:f3:
07:77:22:b3:85:39:bb:22:ee:19:12:3f:35:aa:3a:
b8:af:fd:bd:34:a8:3c:91:97:57:c5:23:ac:af:7e:
1e:18:76:fa:16:de:6f:ce:d7:02:70:4f:1f:fe:f4:
d8:02:59:09:94:82:82:c4:31:55:b7:14:50:54:98:
bf:c1:4f:21:f8:19:3c:72:b5:c7:9f:e2:70:5a:26:
1d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:DB:4A:E6:02:B2:7D:3F:5A:70:76:F3:73:95:72:E8:24:C9:3A
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c8:c9:dd:92:6d:03:d7:48:15:7b:5a:50:81:a3:a8:04:11:
71:8b:e2:fe:16:d8:74:e6:fa:bb:96:19:d6:29:58:63:cd:fb:
8e:2e:8b:c8:b0:17:a7:26:1a:52:a7:17:d0:71:40:54:79:71:
9b:23:8a:bf:6b:c9:95:5b:1d:92:ea:d2:dc:b5:7f:c1:ce:69:
c3:12:39:40:dc:28:17:87:1e:10:4b:6d:b1:be:ad:a1:ea:c5:
9d:3a:d9:8a:36:49:a8:59:0f:65:9c:7e:94:a3:83:0b:17:f0:
be:ca:3a:32:12:07:47:6b:85:e2:02:64:16:fe:26:ba:8e:75:
99:f8:52:d8:bc:b8:b3:7e:d1:c8:c4:9c:62:41:a8:38:1b:b5:
23:1c:54:9c:78:13:a3:16:22:15:ed:0c:59:04:79:09:ad:60:
e9:38:6a:03:f7:c3:6f:1b:87:83:bb:16:64:10:d4:53:81:21:
47:58:54:e8:76:0d:ff:a6:78:c9:57:a9:d5:e6:2e:82:c5:69:
49:08:ea:fd:f5:74:91:de:0d:c2:b5:84:09:70:4f:be:30:95:
ac:e6:dc:87:6e:6f:e0:c7:d4:b7:0f:c1:cc:9c:08:5a:1e:ac:
f2:ca:83:6b:d8:b3:6a:80:83:a7:ca:7e:2f:c3:dd:63:b0:20:
30:b9:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:58:45 2025 by rpki-client