Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: jAknStpPdk1HW78Ce9BF6h+3MyTcc1uJbRpuHvlyPKk=
Subject key identifier: FA:F5:E8:2D:0E:D7:6F:D0:43:AF:80:0A:30:A2:53:02:AD:77:6C:5A
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 0194BCE0580669E7FA78841BAF1D9DC0F815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 01C9
Signing time: Fri 31 Jan 2025 15:00:06 +0000
Manifest this update: Fri 31 Jan 2025 15:00:06 +0000
Manifest next update: Sat 01 Feb 2025 15:00:06 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: Hpjfnz1gzd8WOHV/CSjEpFS6cLHmOwJ0FdH+FvLPTm8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:58:06:69:e7:fa:78:84:1b:af:1d:9d:c0:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Jan 31 15:00:06 2025 GMT
Not After : Feb 1 15:00:06 2025 GMT
Subject: CN=faf5e82d0ed76fd043af800a30a25302ad776c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:fc:14:32:c5:fb:05:ae:3d:89:3e:9f:4f:
38:db:ed:a7:26:60:e9:f6:32:d5:7f:79:3d:8c:df:
b2:d7:6d:0c:a7:51:1b:b2:09:2e:c4:65:19:c5:1a:
77:6f:25:e7:9e:38:c0:83:a3:99:e3:53:e0:db:23:
1a:9f:4a:72:f1:65:c7:6f:d7:46:51:8b:68:a2:9c:
17:b8:b6:d6:47:f5:66:63:4e:74:52:8f:a9:36:12:
69:cd:d2:73:3d:01:f4:27:a6:0b:46:8d:1e:3c:1c:
95:e8:43:66:52:aa:9f:af:65:94:97:64:ab:3d:9c:
29:0a:41:a6:a9:b1:ef:5f:a2:ce:6f:d1:71:b5:da:
11:3f:42:f8:cd:6a:0e:52:05:09:05:fd:30:13:f6:
45:0b:d4:40:be:9d:f5:f1:af:cf:9a:42:4b:62:61:
a1:53:05:a4:e7:c0:6d:0d:ea:cb:e2:ed:da:96:17:
bc:8a:6e:8a:cb:82:a4:95:8c:9c:ca:7f:2d:7b:80:
d7:82:1a:f4:de:09:31:34:a3:67:01:23:dd:78:54:
57:d5:1a:b3:2b:95:8c:54:aa:5c:14:3c:c7:60:a6:
d9:f4:02:24:2f:c6:f1:b9:bf:93:88:9c:7b:22:92:
0f:d6:ae:b0:cf:be:f3:3b:fc:05:79:98:13:b3:96:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:E8:2D:0E:D7:6F:D0:43:AF:80:0A:30:A2:53:02:AD:77:6C:5A
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:96:28:88:4b:d5:6d:00:d8:69:52:10:79:07:9f:9f:f0:03:
26:bf:43:62:18:f0:de:b3:03:c8:cf:3d:ba:03:79:53:d3:66:
8f:bb:68:a8:9c:74:35:b1:9a:ad:4d:78:ca:59:62:c8:a3:11:
28:4d:5a:4c:64:45:ab:b3:1b:41:ea:fa:be:42:73:0f:f2:70:
c2:a1:79:39:5f:73:52:7b:1a:45:48:09:dd:f9:4d:0e:00:6b:
29:14:8b:0f:e4:17:7a:68:1e:20:42:d1:c1:33:52:6d:69:41:
37:19:55:5e:6c:d5:ba:01:ad:44:bc:eb:57:53:bd:41:e7:7b:
df:cb:37:6a:51:3e:62:0c:74:c8:0f:53:ab:ca:d8:46:c4:60:
bb:57:d7:30:77:41:4e:8c:c3:2d:59:c7:cc:54:80:e8:ea:94:
70:21:e3:de:91:0e:81:2f:44:56:dd:34:da:0c:1f:1d:d1:d5:
5a:d3:1e:f3:4b:bc:9b:23:c8:c5:c9:a2:ad:44:c9:61:52:ad:
64:59:12:e9:56:16:07:b1:49:89:ab:67:d8:50:59:48:09:d6:
ad:c3:54:c4:37:e8:82:14:ef:db:f4:9c:32:3e:a6:24:2c:4c:
3e:a2:de:75:85:e4:a1:84:50:2e:2e:28:5a:75:99:a9:f7:68:
8a:0f:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client