Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json)
Hash identifier: pBzeY8Esve3P6u5wb3Z53WjQPDxoL3QUUdrWoVJH0x0=
Subject key identifier: 44:41:4F:3B:2E:8D:6C:55:5F:16:2B:BD:5F:00:82:23:4E:A7:45:AC
Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Certificate serial: 0194BC04E4F3013834E6C4397DF7BAB85AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
Manifest number: 0226
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: AGwRl5m74AmBd9f6zt7vuPyV+Bw80XneP2utkUWMhVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:f3:01:38:34:e6:c4:39:7d:f7:ba:b8:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=44414f3b2e8d6c555f162bbd5f0082234ea745ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:7b:0d:ed:57:a8:86:eb:4a:78:2c:03:b8:
de:47:79:ed:d7:5e:93:39:f9:cb:6e:dc:44:9e:6b:
12:39:d8:e6:56:32:6e:39:2d:00:e2:eb:40:5b:2e:
ca:cb:e0:70:26:47:ef:5e:14:bb:7f:fe:cd:46:7e:
10:cc:c5:79:6c:3a:de:dd:37:36:18:48:70:bf:0e:
03:23:44:b3:c0:0b:e0:2b:9a:29:bb:9c:05:77:49:
f3:7d:52:44:7b:61:00:7c:2a:14:51:1d:e7:57:87:
07:f6:f7:d0:58:17:74:f0:17:61:98:e5:62:5e:1c:
49:2e:64:c7:62:57:33:76:54:7c:23:03:41:5e:01:
0e:68:b0:31:32:aa:fd:98:ed:4d:86:e5:9a:1e:78:
d9:c8:6d:32:06:ac:d9:6d:c9:ed:59:f1:ec:5c:22:
5b:60:bb:3e:5f:f8:5b:81:ba:18:9e:20:97:a5:1b:
8d:2f:95:8c:d8:37:84:1f:8e:a4:ff:bb:87:e1:17:
52:01:10:6e:6b:91:c2:e4:58:57:88:e2:71:fe:ee:
5e:5d:ae:02:5c:75:f5:eb:4d:47:65:8d:e5:56:e7:
09:48:f9:12:19:3f:aa:7a:29:1e:ef:04:2d:c3:97:
1b:6e:61:8a:e0:22:92:e8:8c:56:62:92:e9:01:ec:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:4F:3B:2E:8D:6C:55:5F:16:2B:BD:5F:00:82:23:4E:A7:45:AC
X509v3 Authority Key Identifier:
keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ef:ec:bc:37:d5:38:76:b8:5a:68:96:ef:8c:c0:a1:ff:1e:
14:2a:c2:4c:29:f0:1f:50:ac:c6:3c:e8:bc:79:53:db:5a:30:
6d:27:ec:f8:a9:0b:f9:25:d7:dd:85:a7:91:15:de:4a:a0:4e:
7b:fd:bf:3b:da:e8:0c:40:c2:97:68:bf:cb:fa:69:7c:ff:39:
5a:f3:b0:a6:ff:39:4d:ef:96:24:58:83:45:38:50:0e:13:d1:
ca:f7:e1:b1:af:de:fd:a1:ca:69:40:94:2e:95:f4:91:6e:f3:
53:c4:b3:c6:c8:d7:28:9c:be:ad:89:bc:5a:83:42:1f:1c:04:
c8:57:8d:e8:29:3e:a2:15:a8:79:38:e1:6a:0f:82:9c:cc:a6:
9f:b9:d8:5d:f8:31:22:9f:8c:3b:54:75:17:80:80:72:6e:49:
4f:cc:3f:08:04:8e:8b:30:35:20:98:31:ee:a2:b1:ab:ee:d4:
be:43:5e:9f:06:97:af:ba:25:2d:a9:8f:c2:4d:13:03:77:68:
de:3b:be:0f:1b:94:14:49:ed:f6:ae:82:9f:23:75:54:81:fb:
9b:ee:94:59:61:c5:87:4c:4a:43:84:ec:7d:6a:49:bd:cf:3b:
f2:62:2d:1b:12:b4:02:be:f8:2a:95:8e:fb:26:8c:3c:c1:30:
fd:5d:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:48 2025 by rpki-client