Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: xfvMZCPWQ6fLTso9XKgnxzdeC1QjrYutiddQAi10nGs=
Subject key identifier: 6C:41:2E:C4:37:98:57:53:4B:EC:E4:5A:53:3A:02:84:83:24:08:08
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 0194BC3C11FDDCAA9914712A7756748BA2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 0FA9
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: Io2abF3x9Px7V1CS+VC5ay9Z1X+YuezggJ0RfzB0AiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:fd:dc:aa:99:14:71:2a:77:56:74:8b:a2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=6c412ec4379857534bece45a533a028483240808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:cc:ad:4b:d9:16:33:00:63:a9:c8:7f:10:
2e:c3:0d:72:8b:38:a5:0a:63:01:af:32:bf:bc:36:
5f:64:0f:6c:85:3d:43:10:66:f9:21:74:bc:6a:24:
97:e9:d7:39:76:cf:1b:a0:25:dc:e8:d0:4b:f6:b0:
c6:a2:00:5c:89:3c:02:46:ec:85:cc:8a:0e:aa:3f:
70:09:97:eb:62:e9:fc:51:12:0d:42:6b:67:3b:98:
e9:c6:e6:5d:fa:46:53:fd:8d:78:b4:e8:1f:b3:8d:
ad:22:87:3d:fd:36:b3:ba:52:dd:ea:1d:3c:d3:0e:
fb:71:e7:1c:df:c7:56:ca:5b:fc:a4:07:58:f4:ab:
34:09:81:f4:2e:17:fc:44:00:10:8d:0d:e7:ef:0c:
0a:49:52:39:07:cc:80:42:6a:fa:7c:9b:92:d5:86:
0e:13:f4:c5:06:89:da:e3:fb:10:52:8f:19:e3:fc:
29:01:3f:62:e2:31:01:3d:45:4f:c5:8e:b4:43:e5:
18:88:0f:1d:38:d5:d0:5f:ab:f7:54:22:93:5c:4f:
1f:26:1e:fc:30:fe:2f:ca:f4:eb:c4:05:19:67:bf:
c4:d2:96:f3:69:b4:0a:dd:76:69:7d:f4:27:cc:41:
cf:bd:54:da:96:b1:80:ff:c4:0d:66:30:90:17:e9:
b1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:41:2E:C4:37:98:57:53:4B:EC:E4:5A:53:3A:02:84:83:24:08:08
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:22:37:89:6e:d7:a2:fa:4b:4e:62:10:35:4d:5f:76:d8:
df:50:d7:71:ec:01:30:1b:58:2b:bc:97:c5:5f:bd:77:48:75:
f7:d0:e6:97:48:bc:2f:98:f1:ed:1d:30:47:06:8e:ad:a8:c2:
13:d0:99:a4:ec:19:05:ff:2e:de:4f:a8:46:69:2a:42:b6:67:
94:2b:d1:54:50:f4:0c:25:38:f8:f4:10:50:0f:4b:14:c1:18:
80:aa:50:00:64:63:2c:f6:4b:fd:50:9e:98:7d:a1:84:cd:16:
65:fd:62:6f:24:68:cf:23:e5:f0:20:6d:79:dd:34:32:3c:3f:
a7:b3:9f:5e:1c:1c:5e:80:cd:51:d6:a7:fe:da:26:2b:54:62:
a1:db:3e:b7:81:ef:f5:2b:2c:83:4c:e2:15:ee:64:74:34:59:
cf:fb:a4:dc:7f:5c:18:7d:4b:0c:66:f6:7d:c5:8c:3d:80:64:
ec:a4:ac:64:83:f0:0c:7e:47:00:3f:fb:21:53:64:61:7c:75:
5c:8c:d2:a5:27:c8:2c:35:c5:2f:20:01:94:09:98:22:d8:83:
0a:15:a8:65:bc:70:46:7b:76:92:b0:b3:cf:67:70:fb:84:c3:
9d:a8:be:bf:1e:58:01:d6:0f:35:27:94:fc:37:f0:8f:8b:11:
57:a3:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:07 2025 by rpki-client