Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
File: cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft (raw, json)
Hash identifier: PhG2sf+kyc2YRDaMWJt+gZUbF+SkGeRx9wxU25B5V1E=
Subject key identifier: 51:6B:08:00:AE:18:AF:6A:23:B5:18:5F:50:02:95:1C:5F:D6:89:3D
Authority key identifier: 72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
Certificate issuer: /CN=7232a04fc19d91b50d56836793235ece32ac2834
Certificate serial: 0194BBCED89A69F8E1E87E36DF4E2DC8BC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
Manifest number: 079D
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl (hash: Kvj2i7lQF7Uh14YnKXX6S8WDo+sIRGKkqsfwWGUMBQY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d8:9a:69:f8:e1:e8:7e:36:df:4e:2d:c8:bc:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7232a04fc19d91b50d56836793235ece32ac2834
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=516b0800ae18af6a23b5185f5002951c5fd6893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:53:03:01:db:d2:81:ad:9d:e9:7e:4c:31:
49:aa:83:d1:4f:cc:76:cb:fb:82:a6:df:6e:9f:c8:
9c:c2:b3:1d:c2:70:82:c5:3b:27:04:34:5d:65:70:
57:01:72:5d:8b:38:f5:df:42:8f:66:5d:bf:68:81:
5c:e3:78:b2:6a:b0:db:76:2c:00:cb:6b:9e:9c:ee:
f7:08:bd:be:a9:7c:87:40:eb:15:92:5e:66:f7:69:
8c:c9:20:b9:cb:5f:36:9a:09:fc:fe:47:7b:23:8f:
21:7d:02:69:6a:20:45:8c:53:bb:c2:5c:02:e7:fa:
ae:2e:af:ec:33:99:eb:91:16:72:cd:4d:1a:c1:d0:
07:4b:5a:b5:fb:0b:00:ef:51:80:34:73:7e:46:c9:
72:7e:17:82:1f:f7:be:89:4f:f3:b9:df:f7:a6:5e:
2a:8b:ad:31:81:51:27:f6:ba:d6:f4:be:f6:e5:fe:
b6:7a:b9:18:5a:9b:44:65:c3:f2:ba:81:83:a3:f4:
ef:43:a7:7e:b3:d1:95:5e:a5:9c:f9:20:a5:90:18:
22:11:db:30:63:e4:a5:32:b4:68:b9:88:aa:f2:9a:
f3:9b:33:ad:e1:94:a0:35:d1:18:95:04:0d:e3:69:
3e:5d:eb:04:18:21:6f:61:6d:a2:da:af:f6:27:37:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6B:08:00:AE:18:AF:6A:23:B5:18:5F:50:02:95:1C:5F:D6:89:3D
X509v3 Authority Key Identifier:
keyid:72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:b5:f0:0b:13:db:ad:df:82:e9:ce:83:fc:38:4b:2c:8d:
2b:b2:85:92:f6:56:d5:18:0c:db:be:80:d6:59:9a:66:26:5a:
9e:c7:d4:99:d3:e6:1d:bf:e3:93:bd:26:15:87:ec:1f:05:73:
db:ad:c5:32:e6:c3:45:57:45:ab:56:c6:c2:99:13:0e:b3:c0:
2b:bd:4e:fb:c9:b7:eb:eb:75:f9:39:25:3d:22:23:41:af:c2:
97:6b:63:a1:24:70:ad:a3:95:cb:aa:16:54:d7:0d:8c:d3:5f:
8a:15:d4:f1:3e:f4:f9:00:e3:e3:41:3c:eb:e7:41:9c:14:6b:
b3:24:0f:c9:69:dd:87:e5:f8:1e:64:62:95:e2:6b:5b:35:95:
00:6d:54:b7:e9:eb:23:6d:d1:df:ab:69:56:fa:bb:49:10:c0:
d0:44:a9:a4:61:c3:f5:30:7d:78:71:c0:48:ee:67:c9:75:8b:
7f:4e:83:74:24:2b:f8:0c:a7:55:aa:44:dc:66:86:e7:c0:f1:
de:b7:7a:cb:00:dd:ef:a4:05:c1:8f:6f:ef:23:eb:96:df:be:
f4:2e:5b:da:71:0b:66:1c:6e:58:27:89:a8:bd:25:7a:90:b4:
47:9a:0f:c2:71:68:90:bf:27:d2:51:04:fa:cb:c5:a7:56:e6:
41:16:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client