Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
File: CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft (raw, json)
Hash identifier: wH7hui+ZMVugnaV0NN8uKUVKVRdbpD1TEQ2pCQMnkks=
Subject key identifier: EF:42:6A:C0:85:04:E0:19:B7:76:73:AA:7B:87:5F:D8:E4:3F:42:67
Authority key identifier: 09:7B:60:35:E5:71:7F:C9:3A:83:E3:E3:EC:81:7E:66:07:64:38:44
Certificate issuer: /CN=097b6035e5717fc93a83e3e3ec817e6607643844
Certificate serial: 01932ED662426E19DF295866588EED783B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
Manifest number: 135A
Signing time: Fri 15 Nov 2024 08:00:21 +0000
Manifest this update: Fri 15 Nov 2024 08:00:21 +0000
Manifest next update: Sat 16 Nov 2024 08:00:21 +0000
Files and hashes: 1: CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.crl (hash: snUUkx7ZQiyj+T0rFDyO4Wk/xFEyfm4eNAedcNGoDbI=)
2: F3EQQaS0u0Bp8t-nT_FHt0PFgeg.roa (hash: yvbEmWncChjDk9U9IcxH9S48aJ0JdVl3/pgLr/MJm2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2e:d6:62:42:6e:19:df:29:58:66:58:8e:ed:78:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097b6035e5717fc93a83e3e3ec817e6607643844
Validity
Not Before: Nov 15 08:00:21 2024 GMT
Not After : Nov 16 08:00:21 2024 GMT
Subject: CN=ef426ac08504e019b77673aa7b875fd8e43f4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:02:b5:33:77:e9:1d:0e:ad:39:bb:f6:ab:
24:1b:9c:6b:00:64:9b:f7:94:c3:c0:fa:33:d8:7a:
c3:58:5c:e7:41:f0:ab:d0:83:1d:7e:e3:ef:93:b7:
fc:a3:4d:3b:12:59:29:4c:26:8e:18:c4:b8:75:13:
bd:69:cf:e4:25:da:12:cc:2f:47:57:aa:75:9f:42:
ea:99:ed:51:76:3a:3a:de:df:ed:5f:fb:24:4b:5b:
f9:20:d9:7a:96:4f:95:27:88:5c:d2:a1:6f:a8:94:
95:e6:70:53:2c:eb:84:58:ef:54:f8:dc:61:b7:50:
3f:d4:8e:38:f1:d3:b9:c4:ce:f5:25:de:86:b7:aa:
f1:8f:8d:d2:ac:ef:59:12:8e:4c:5f:d6:08:71:76:
be:be:5e:a2:e7:be:ad:59:0d:52:42:56:ea:ea:5b:
1a:d8:aa:9d:c2:3d:dc:ad:06:16:2e:89:3d:f2:62:
2b:05:7f:23:53:da:20:ff:d7:f4:62:30:a5:f7:42:
48:21:58:31:2b:9a:61:4f:3f:21:38:92:e7:13:91:
63:5a:9b:0d:b1:2f:52:87:5e:5a:86:21:70:9b:07:
34:6d:d0:1c:71:04:9d:01:e2:cb:3c:1a:84:aa:88:
28:bd:fa:5c:f4:ac:0d:9b:0f:8c:b5:3c:9d:64:41:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:6A:C0:85:04:E0:19:B7:76:73:AA:7B:87:5F:D8:E4:3F:42:67
X509v3 Authority Key Identifier:
keyid:09:7B:60:35:E5:71:7F:C9:3A:83:E3:E3:EC:81:7E:66:07:64:38:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/0db829-6ebe-482a-a412-61fd1df95727/1/CXtgNeVxf8k6g-Pj7IF-ZgdkOEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:35:3b:49:8d:e9:6b:ac:f1:5a:63:78:98:23:b9:8f:96:6d:
be:48:0e:08:42:2b:d7:ca:cd:1a:50:c6:1b:af:a6:03:2a:db:
1f:2c:a9:9f:8b:80:2c:36:0d:48:9f:8d:18:8f:16:cb:91:53:
9f:2f:db:62:13:c0:73:8a:36:9f:16:c8:d7:b9:f9:63:40:46:
d2:f1:de:3f:27:0a:65:74:7e:de:81:63:a1:d0:6c:08:f7:7d:
6a:00:79:21:93:53:0d:0b:72:4c:ea:24:91:14:2a:fb:5a:24:
af:03:2a:dd:43:37:c2:ca:d7:c5:ac:56:7a:8e:d9:da:be:ec:
8e:7d:e4:08:db:b1:90:4e:38:e9:d7:5f:93:b9:4f:63:35:de:
4e:1f:90:33:e2:cb:e7:56:f0:51:df:11:39:01:98:1c:b4:aa:
6c:cb:e4:60:32:bf:14:37:99:9c:c4:65:26:1d:b2:5d:d9:01:
2a:ae:b3:f2:ba:65:73:6f:e8:62:7e:67:9b:a2:e9:d1:21:8d:
0e:47:b0:0d:ee:17:50:d4:33:ac:cd:65:e1:8d:06:8b:ce:0a:
14:cc:45:0a:f6:6d:c0:8c:e2:76:62:ba:0f:26:57:eb:4b:00:
21:76:48:48:df:0d:f7:da:99:7e:4b:fa:f3:ff:51:b2:38:25:
bc:b8:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 17:09:30 2025 by rpki-client