Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.mft
File: czvaAAjftaLrTipWkCRI_tlA1Z8.mft (raw, json)
Hash identifier: 6EYISxtJ5j3fRUTIfNaLdi+eBJ6UaHo6PJN7Umj9wYs=
Subject key identifier: 68:37:58:BB:E1:14:C1:44:C1:BE:F9:A3:50:B4:C7:70:0D:DA:1A:0C
Authority key identifier: 73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
Certificate issuer: /CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Certificate serial: 018EC62B4D45D064BB41226C70CADBAD3155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.mft
Manifest number: 08A5
Signing time: Wed 10 Apr 2024 04:01:50 +0000
Manifest this update: Wed 10 Apr 2024 04:01:50 +0000
Manifest next update: Thu 11 Apr 2024 04:01:50 +0000
Files and hashes: 1: czvaAAjftaLrTipWkCRI_tlA1Z8.crl (hash: 4dnVJj+dxD4VvW8D+sj9z4gEJB/JmhagO0zl78um6l0=)
2: ukCAJ6gg1TDVH2plurXlj4KjpHg.roa (hash: Z2qujrgS2it5AeYpOz3iR80enuykNCscRuM1OFY77R8=)
3: vzhXmkmga2wi6X2_xRUy8Wdx_6E.roa (hash: nqkCWTn5uLqlXZslaMc9FRTl8iC3d7CSkafYqSIffag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c6:2b:4d:45:d0:64:bb:41:22:6c:70:ca:db:ad:31:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733bda0008dfb5a2eb4e2a56902448fed940d59f
Validity
Not Before: Apr 10 04:01:50 2024 GMT
Not After : Apr 11 04:01:50 2024 GMT
Subject: CN=683758bbe114c144c1bef9a350b4c7700dda1a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:0b:89:13:1d:f5:a1:b1:1a:c3:0d:04:3a:
1c:e2:9c:fa:a4:b0:59:e9:be:3b:e3:ce:1d:99:b9:
f2:20:b2:61:8a:b5:a1:c5:7c:46:2a:bf:ab:1e:bc:
7e:1c:42:05:3a:bb:da:87:30:20:3c:90:f0:f6:8f:
a8:0d:26:be:8a:31:06:83:30:71:86:4b:39:ea:3f:
48:f9:33:bb:e9:64:cb:62:fb:61:22:78:57:a9:2e:
c2:60:76:36:8a:84:b8:2c:7f:84:58:1d:85:ab:18:
8a:78:da:60:0c:0b:1a:9d:93:62:37:ec:f5:9c:7e:
f5:2b:94:79:be:ee:a4:46:c4:cc:0c:60:f0:9e:55:
85:ab:25:c9:3b:c6:44:8d:67:e3:4c:78:55:d6:db:
5c:5b:fc:54:f4:94:74:fa:15:9b:4b:5e:92:32:6c:
be:27:40:71:c0:1a:b4:ac:f3:46:1e:bf:13:c5:5e:
ae:a1:47:f5:1a:ec:14:59:e4:3a:fc:7f:2a:c8:69:
ba:09:0b:10:7d:49:8e:4f:6c:6e:72:0c:a6:d3:6f:
d6:09:3c:2d:56:04:2e:2d:5d:1b:fd:51:e4:ec:13:
37:0c:37:36:bd:d2:46:03:f7:fc:62:aa:77:6a:33:
d8:56:25:e1:33:20:98:b1:91:41:d1:0a:ea:82:f7:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:58:BB:E1:14:C1:44:C1:BE:F9:A3:50:B4:C7:70:0D:DA:1A:0C
X509v3 Authority Key Identifier:
keyid:73:3B:DA:00:08:DF:B5:A2:EB:4E:2A:56:90:24:48:FE:D9:40:D5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czvaAAjftaLrTipWkCRI_tlA1Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/246d61-ab75-4b19-aec2-a75abc2ab7e7/1/czvaAAjftaLrTipWkCRI_tlA1Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:72:24:ae:a7:c3:81:6b:82:70:f8:77:4d:f5:08:b1:4f:59:
22:4d:3e:1d:9d:2b:06:e9:c7:a7:a6:db:d8:18:8f:1d:14:7f:
2b:bf:50:a0:8f:ef:76:7e:72:82:28:d4:55:d8:a7:d0:8d:57:
6c:c2:98:6b:05:70:bf:76:35:8c:d4:25:72:51:d3:3a:af:bf:
1b:57:4b:b3:40:3f:35:1f:12:63:f8:d3:28:de:4a:67:51:b8:
54:9e:7b:c0:3f:ae:2f:8c:55:81:9d:76:c2:6f:11:07:f1:7d:
d8:de:03:8d:fc:d6:52:5c:8c:03:4f:a2:a6:d6:a6:c5:6c:df:
98:16:ee:ed:74:2a:01:ea:3f:5c:72:9e:54:59:9a:56:a2:6e:
94:a0:de:3c:8d:fc:76:05:57:5c:ee:28:a4:ad:c2:3d:2a:f2:
fc:36:b7:5c:d2:eb:a2:df:37:f4:7e:7d:1c:64:af:a4:2c:c6:
c8:73:4c:a4:84:94:75:52:44:98:d3:30:91:d7:6c:b1:4e:02:
79:00:73:b9:1f:2b:4d:6a:85:97:75:d9:18:4d:68:f0:10:f1:
c9:f7:a0:29:51:81:86:30:7c:37:17:7b:c1:06:7b:bf:91:1f:
2e:22:88:d1:0a:fb:ae:b5:51:24:99:d0:f4:85:15:63:16:cc:
ef:78:dd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:06 2025 by rpki-client