Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: o8OPxXd6LZnG52Xc9KJUvxXA42bofgxsND1H1o715Ek=
Subject key identifier: F6:BB:64:32:E1:07:A0:DE:22:F2:3D:EA:EB:50:7D:3B:D2:F0:AD:57
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 0194BBCE3680645E73CB053DA673580D2D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: R1rLLgO6g0dDGbqH5HLOGmt4sDwjUn66ujkjtjwfOlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:80:64:5e:73:cb:05:3d:a6:73:58:0d:2d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=f6bb6432e107a0de22f23deaeb507d3bd2f0ad57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:e4:28:84:b8:13:58:e1:c6:45:01:5d:48:
0e:ac:f2:dd:b3:6d:29:36:e9:5a:5e:39:33:0b:be:
32:93:ea:00:de:8b:50:58:3e:24:fb:6b:68:c1:19:
44:fd:02:89:19:f9:61:ab:a3:0f:f8:5d:d4:8a:81:
9a:2d:3a:8f:6d:de:0c:bf:0c:51:3a:76:81:df:7a:
ba:5e:31:16:05:63:ff:63:c3:6b:f8:1b:9d:1f:db:
03:78:a1:b1:d8:00:9d:3d:26:0d:1d:f4:cd:eb:8c:
56:fe:03:fa:c2:db:f8:fa:4d:e5:20:1a:88:4b:44:
3d:0d:47:dd:f1:c3:be:9d:fb:7b:fb:fa:1e:26:8f:
6a:67:19:19:47:f9:dc:86:3e:86:ca:65:7e:0b:31:
9b:4a:10:9f:76:25:81:ba:7d:66:26:73:32:6f:f6:
46:ec:cc:41:f5:8b:7a:4f:b8:e5:e2:cd:0d:49:65:
7e:55:4d:71:23:69:ba:58:50:83:ed:79:5c:f1:08:
e4:03:16:54:fe:73:a3:ed:5a:12:87:9b:ca:f1:6d:
a7:12:52:c0:56:c2:13:91:e2:bf:de:c3:4f:c9:8a:
85:29:5b:31:3d:fe:ce:d4:5e:78:b8:7e:ba:c4:ce:
95:65:12:5a:ef:ef:43:99:88:22:fb:ef:f4:eb:85:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:64:32:E1:07:A0:DE:22:F2:3D:EA:EB:50:7D:3B:D2:F0:AD:57
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:07:8d:4d:bb:89:7d:f2:44:1f:38:be:b4:58:77:dd:72:8e:
28:80:59:bd:a2:2c:a9:88:37:91:de:32:cc:5e:55:a4:fe:a3:
c9:f9:fb:e2:ba:5f:d1:44:48:e4:9e:66:26:ba:4a:c1:35:6d:
ca:8f:60:d4:88:bc:e2:be:45:be:d8:5d:50:86:85:38:50:35:
e2:57:1b:15:c0:e3:fd:2d:e7:95:8b:ad:49:0e:17:09:92:16:
75:cc:a1:8b:22:1b:21:24:8f:a6:50:3f:66:36:7f:a5:7f:18:
bd:30:43:02:ca:79:25:12:e4:9c:5b:a0:d7:c7:fb:fa:e2:95:
52:8b:62:16:53:89:93:c0:df:5b:98:14:1e:66:6f:b0:79:ef:
ff:59:64:93:b5:ed:eb:3d:ce:89:03:b0:2b:78:ec:1a:39:d7:
d4:07:fd:0a:da:16:5e:96:87:e8:e9:dd:bb:47:d9:9f:b7:1a:
82:0d:61:27:64:41:de:3d:5e:76:af:09:38:99:39:4c:39:5b:
f2:eb:6d:e7:40:de:9e:37:2d:9f:a5:14:f3:17:49:ae:63:c6:
12:f5:83:7f:cc:c3:23:8d:8e:cb:03:3d:b3:cc:5b:e5:fe:96:
cc:85:3f:96:d9:3d:1a:77:9b:a3:c3:23:5d:af:f2:e2:c0:d3:
4c:ab:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:55 2025 by rpki-client