Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.mft
File: CGC3hKxPNYW5ESbLy4zz994Z0e0.mft (raw, json)
Hash identifier: po1qFNDyH4PwVa2Q3fkaV9rfzeT6B0sh98j1c2Vc/h8=
Subject key identifier: D1:2E:5F:0E:3C:01:71:02:B7:1C:3F:80:8F:78:16:95:E5:C2:0F:79
Authority key identifier: 08:60:B7:84:AC:4F:35:85:B9:11:26:CB:CB:8C:F3:F7:DE:19:D1:ED
Certificate issuer: /CN=0860b784ac4f3585b91126cbcb8cf3f7de19d1ed
Certificate serial: 02F6FA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGC3hKxPNYW5ESbLy4zz994Z0e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.mft
Manifest number: 03DE
Signing time: Thu 31 Mar 2022 05:10:19 +0000
Manifest this update: Thu 31 Mar 2022 05:10:19 +0000
Manifest next update: Fri 01 Apr 2022 05:10:19 +0000
Files and hashes: 1: CGC3hKxPNYW5ESbLy4zz994Z0e0.crl (hash: RZ0a4C+ko5+qGXr7n5RuH5C63O8otGJeu5aGOawZ1mA=)
2: PxF4wwLtfN-glgdfZly7zTygQxs.roa (hash: 35Y8YclZ613xHbvqB0kxGI3881vPqP5k2OXK9B52Up4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49740298 (0x2f6fa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0860b784ac4f3585b91126cbcb8cf3f7de19d1ed
Validity
Not Before: Mar 31 05:10:19 2022 GMT
Not After : Apr 1 05:10:19 2022 GMT
Subject: CN=d12e5f0e3c017102b71c3f808f781695e5c20f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:d3:a4:e8:c6:89:1e:03:16:be:9d:cd:e8:
f9:1b:cb:74:e1:33:34:f5:45:2b:d7:5f:c8:38:53:
08:0f:eb:f8:dc:9d:1e:4c:98:79:e5:40:54:d0:bb:
36:22:e3:c1:22:a0:ac:39:c2:e5:27:91:f0:99:00:
bd:e7:1c:07:2c:59:06:8b:32:c3:3d:f8:7a:cf:75:
7b:d9:50:49:37:2f:c1:63:56:96:d5:fc:7e:39:52:
39:48:7c:1e:9b:62:2e:14:ca:74:2f:34:5a:ab:20:
6b:e5:63:4d:18:0f:0c:f0:8e:11:47:d1:8b:e7:07:
44:f3:bf:a5:96:31:2a:8d:8c:c6:7a:54:33:d3:28:
97:23:28:00:14:c2:d4:3c:4f:d1:af:07:b6:7e:38:
d1:ce:58:ec:b7:01:a7:97:e0:e8:a3:56:aa:6b:6e:
5b:8e:3a:12:3e:92:8e:18:f4:d5:70:49:e0:54:94:
2d:f4:41:f4:5f:50:2d:a5:fc:e7:8d:19:d5:88:5b:
d5:f1:ff:08:c0:33:59:31:68:7d:72:35:3a:16:08:
da:62:ac:bb:fd:86:ea:b5:f6:ae:5f:e9:6a:0f:62:
48:e5:99:be:46:7a:fe:d9:74:2c:cd:6d:d1:81:55:
25:22:1e:38:bc:06:1f:d1:f0:e2:f8:5e:2d:0c:fc:
52:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:5F:0E:3C:01:71:02:B7:1C:3F:80:8F:78:16:95:E5:C2:0F:79
X509v3 Authority Key Identifier:
keyid:08:60:B7:84:AC:4F:35:85:B9:11:26:CB:CB:8C:F3:F7:DE:19:D1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGC3hKxPNYW5ESbLy4zz994Z0e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:08:9d:90:d0:ab:75:76:f2:52:a7:a4:ae:bf:dc:59:42:bb:
27:90:47:00:53:54:21:15:2f:5e:bd:40:86:b1:8f:83:cc:86:
d6:4c:90:2b:39:f9:b5:3b:c2:5d:00:3e:5d:79:89:ca:90:6f:
d2:c4:ac:1a:ce:04:43:41:14:ec:19:22:48:8a:4e:19:af:a0:
7e:f0:18:bd:18:a2:11:40:64:7a:00:53:cd:a1:c8:53:3e:ab:
1b:ae:27:07:41:e2:b2:2f:69:d5:ce:c8:3e:ad:e0:0a:7f:25:
62:f6:45:1c:40:d3:a4:e4:9d:2b:16:1a:8e:06:2b:79:f0:7a:
35:40:5e:e2:5a:db:95:ae:5c:69:a0:2c:c5:85:b9:c6:ce:79:
7d:70:e5:cc:45:b7:d9:23:ea:d2:08:69:d8:15:6c:06:14:ea:
ea:00:74:8b:0f:40:47:19:0f:79:f1:c9:49:4a:34:55:d7:e8:
bb:70:c7:84:ef:28:de:08:54:84:03:a3:21:9e:05:87:90:61:
30:ed:c8:0b:2e:b4:7d:8a:86:fd:49:19:95:02:79:7e:28:58:
b8:c8:d1:3c:5a:24:cf:ff:a7:e2:16:bf:fb:3b:75:90:8a:9d:
f3:db:4e:2e:e5:e5:81:69:f0:1a:04:7b:ba:a9:93:ea:ca:df:
2b:fd:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:14 2025 by rpki-client