Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: KVjDIHKuDi+QSV3tce20p07WawVzteEsg1qY9znbfpk=
Subject key identifier: CB:B0:CD:33:22:A8:C6:63:61:59:F3:92:ED:E5:43:3B:91:DB:F3:C2
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 0195E159058AE041202D8609C3BD874309E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 14D7
Signing time: Sat 29 Mar 2025 10:01:02 +0000
Manifest this update: Sat 29 Mar 2025 10:01:02 +0000
Manifest next update: Sun 30 Mar 2025 10:01:02 +0000
Files and hashes: 1: 1qKATTVt2l9Amr30ivUd4qpcDQ8.roa (hash: D9mOfQXdZlNktupQVZacZwiNwms/ptwHflaY7QzV5Xk=)
2: 54AIlsCbzgy0XCYwE0wdAC4kiqw.roa (hash: yJyuDkNiVUNUnxXEpeacfSUjn5at6QtcOaws+zppt2w=)
3: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: fFD8xab7kzQ3zL+8S32ntYcj3RKHHGJz502RTzR5/Uc=)
4: I9n8PdlI12zk3ftrt5ZejA1FrCU.roa (hash: kf3O7lpj7s7VfmT2vuNx6GwPZjLLFUhTpSV85VBR1i4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:05:8a:e0:41:20:2d:86:09:c3:bd:87:43:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Mar 29 10:01:02 2025 GMT
Not After : Mar 30 10:01:02 2025 GMT
Subject: CN=cbb0cd3322a8c6636159f392ede5433b91dbf3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d9:37:e3:b7:87:fc:13:81:ad:c6:42:c4:c7:
33:24:98:ba:fa:aa:7f:76:bf:31:41:9a:5b:25:64:
cc:63:a1:0d:ad:42:56:e3:7b:c7:67:86:2c:20:c9:
f9:b0:c0:75:cb:17:a6:16:6b:81:0c:dd:53:af:7e:
42:99:9a:be:f6:e7:9d:fb:f8:6f:18:85:48:12:e6:
2f:e2:dc:81:64:4a:74:04:d6:b2:1c:78:93:2d:02:
9d:f0:79:29:81:76:5e:33:fd:e2:a9:f4:5d:5d:c6:
18:53:a6:1f:dd:ba:89:b7:ba:64:d6:58:c1:1f:10:
4e:3e:b7:cc:98:87:02:f2:85:b4:d4:a8:f9:e0:7f:
08:62:0f:8a:d4:77:9f:ab:56:c5:f3:b3:d7:9b:50:
70:13:13:d6:ca:fd:01:b1:68:a1:91:e1:21:ba:40:
e1:ea:d8:f2:be:08:2a:d3:2d:1c:2b:f2:5b:8f:bb:
8f:32:eb:80:9a:86:07:f8:16:42:89:ca:71:90:c2:
8a:54:c0:af:83:75:e1:57:0d:ff:e7:42:52:17:f7:
35:87:c2:5a:47:35:83:66:86:ef:d3:fd:7a:59:44:
b3:57:ff:80:f7:ef:50:84:e2:0b:b2:0c:2d:63:68:
d9:0f:2f:65:9b:01:fd:68:52:1e:68:4d:c7:b2:0a:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:CD:33:22:A8:C6:63:61:59:F3:92:ED:E5:43:3B:91:DB:F3:C2
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e5:53:8f:8a:a6:f3:35:8d:f0:34:6d:a4:b1:bf:59:fd:c4:
7f:5b:31:4a:98:ac:66:b8:04:27:a5:56:9d:88:a6:a2:f9:e6:
e0:b9:23:73:d6:a5:80:52:23:96:55:e2:8f:c2:b2:20:82:f6:
2b:57:9b:a7:46:8c:af:98:21:af:de:d9:37:fd:5d:5d:86:92:
0b:65:af:51:08:d0:f8:5b:ed:67:6b:e6:f5:58:de:df:44:c2:
37:14:7f:a2:84:cb:95:cc:ec:5a:d0:f2:85:ef:72:bf:97:aa:
c9:b7:a1:b5:d2:72:d4:0a:37:2b:1f:31:94:6c:ae:d9:42:c6:
27:2b:c6:55:60:b5:22:5f:ac:01:eb:a2:54:79:28:b4:65:f6:
08:80:b6:94:19:1c:07:30:0a:95:c0:80:4d:be:7e:be:67:16:
08:45:2c:1d:01:fe:46:c4:0a:30:2d:5c:3b:65:43:6d:c7:c0:
e6:20:89:2a:3f:01:3a:19:6a:28:d7:be:1a:94:cb:11:22:40:
e2:32:44:85:91:90:64:48:cc:94:8e:d1:b5:f1:8f:45:12:b0:
f5:db:c7:e1:fb:94:3e:a1:f0:25:55:01:bd:4f:75:73:24:cd:
15:14:67:18:3f:7e:4d:21:d7:7b:ee:30:d0:77:15:a6:05:f0:
d8:ff:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:11 2025 by rpki-client