Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
File: ckWEKSHz0CDU2AReUrsQ_PV-r28.mft (raw, json)
Hash identifier: IqcyWR29sXHYpuUvHDwVDCJ8L9OJdD9/FjdSOCbBRVc=
Subject key identifier: 91:8E:B8:E2:42:03:AA:78:4F:A3:D1:52:41:66:E2:88:DB:9C:4B:FA
Authority key identifier: 72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
Certificate issuer: /CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Certificate serial: 0194BC3BD161FCB1D00D064627C9E7449AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: ckWEKSHz0CDU2AReUrsQ_PV-r28.crl (hash: l7LvvhsJsBTTfm/8t0ViKLlrurWSGzViOmlb9z6cimk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d1:61:fc:b1:d0:0d:06:46:27:c9:e7:44:9a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7245842921f3d020d4d8045e52bb10fcf57eaf6f
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=918eb8e24203aa784fa3d1524166e288db9c4bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:9b:6e:31:72:28:3c:34:65:f4:64:4a:a1:
b2:fe:9c:34:5a:a0:c0:34:29:10:9a:18:fb:41:24:
19:bc:37:da:eb:f9:92:c2:44:6b:2d:92:35:0f:c5:
34:85:eb:a6:84:81:57:16:70:6f:55:58:3c:a2:23:
63:52:7d:1d:40:af:be:c0:be:98:20:85:51:9f:c0:
1f:53:af:9e:47:53:25:10:39:2c:c5:13:9b:cb:47:
e7:5c:8c:d9:cf:e4:e1:47:3b:b0:33:60:4a:bd:94:
09:ee:f9:48:6f:18:a0:3a:31:5d:6a:e2:c3:c6:71:
96:d5:2e:46:cb:17:88:dc:2c:3e:b6:f9:91:53:0d:
9c:d5:ab:9e:19:26:ff:25:4f:2c:a2:21:3b:4d:c8:
9b:b5:62:4f:d5:41:a0:8c:03:de:2c:ce:71:50:97:
ec:14:5a:80:ff:35:2a:17:cb:5f:ee:d8:f8:53:84:
68:46:3a:59:4c:e7:d2:60:7c:4e:1a:b9:57:95:8c:
5c:80:e0:d8:24:72:6b:8b:10:e1:87:64:f0:82:24:
83:66:b0:8b:23:47:63:36:58:f5:04:6d:83:0a:e3:
33:f4:82:d4:3e:c2:77:6c:11:7d:b0:ec:e7:d9:32:
39:cc:fd:b9:d9:a7:aa:b8:7d:5c:90:dd:c1:a3:11:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8E:B8:E2:42:03:AA:78:4F:A3:D1:52:41:66:E2:88:DB:9C:4B:FA
X509v3 Authority Key Identifier:
keyid:72:45:84:29:21:F3:D0:20:D4:D8:04:5E:52:BB:10:FC:F5:7E:AF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckWEKSHz0CDU2AReUrsQ_PV-r28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/71f422-e092-4189-8d3c-8e258efedffa/1/ckWEKSHz0CDU2AReUrsQ_PV-r28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ca:2a:75:45:fb:60:5d:f1:43:b7:62:22:66:32:91:07:c1:
ff:7b:14:13:c6:e6:97:43:16:c9:4d:a6:1d:81:29:48:6a:09:
de:35:97:c2:9c:e4:cc:df:46:73:02:0f:15:ec:32:1f:ef:ff:
5d:53:e5:32:98:38:1a:73:51:ca:f7:c2:21:75:e3:b2:cf:f3:
95:69:ce:30:03:a7:67:3a:9b:27:77:c1:d6:a0:dc:72:fb:a9:
ba:b7:e7:03:2b:82:14:66:38:c4:8b:68:d4:a4:e5:08:0a:77:
02:af:1b:f8:af:f7:15:77:ae:ee:7e:ce:38:3d:2a:ec:b1:72:
bc:21:a3:09:55:0c:e7:1b:bd:51:4a:dd:2b:e7:f9:ef:fa:55:
9c:36:ba:dc:97:ba:99:e9:92:2f:44:8f:32:94:ee:a5:f1:77:
f5:ad:d5:15:94:91:1b:2d:4b:5f:84:f3:61:b0:81:04:f3:0f:
72:b4:12:e1:1a:bd:3b:fc:d0:43:62:0c:3e:6c:a7:da:aa:09:
f7:27:bc:30:bc:2d:bd:cd:fc:a2:39:d8:f5:da:37:70:dd:70:
90:2f:15:2c:72:d4:0a:4b:36:b2:88:f0:4d:e2:3f:0a:c9:1d:
b1:82:61:e4:88:75:46:2a:81:56:f3:6d:8a:22:d3:0c:5c:9f:
8b:69:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:39 2025 by rpki-client