Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
File: coCW6KzXbpqhfz62eAQG49pWPtI.mft (raw, json)
Hash identifier: yzoV0cttTGgk+x6ZewUSYTVRIC3mQNq5wadtX9Li5YA=
Subject key identifier: CD:79:34:07:45:2E:A1:F0:C8:0A:18:98:6D:79:A3:E0:EB:DE:50:E0
Authority key identifier: 72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
Certificate issuer: /CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Certificate serial: 0194BCA9862EF9FE02F052C44CD59B5AB5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
Manifest number: 12E4
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: coCW6KzXbpqhfz62eAQG49pWPtI.crl (hash: OPg0f8bsQ2E3RjuTGXczA8Np9czfySchXGsq1VZFvj8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:2e:f9:fe:02:f0:52:c4:4c:d5:9b:5a:b5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728096e8acd76e9aa17f3eb6780406e3da563ed2
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=cd793407452ea1f0c80a18986d79a3e0ebde50e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:50:4a:ad:51:4e:35:8b:d4:83:a4:93:00:17:
49:67:73:60:45:c6:5f:34:2b:14:54:e6:fc:c2:2f:
3e:0b:1b:78:8b:d5:9a:df:c1:9a:e8:fe:d5:26:6e:
c9:49:de:62:19:0c:b6:4a:1e:e5:6f:f2:c3:b0:1b:
3c:5e:71:7c:4c:05:39:92:54:fa:6e:63:cb:63:f2:
13:6f:82:32:f7:8c:ab:e7:fb:77:3a:73:80:eb:65:
c5:95:3a:62:55:a2:72:82:1d:60:ac:a0:9e:0f:2c:
f3:26:c3:52:7c:8a:3f:47:ba:23:3c:91:66:7a:54:
00:6a:f4:14:9a:cb:7e:50:3d:41:55:1c:9e:ea:6c:
79:26:79:90:d1:67:05:b1:9c:fe:57:d0:83:37:36:
fc:38:a9:61:a5:f4:d5:dd:44:9d:d6:48:9c:3b:bd:
6c:8a:ac:1f:f9:bd:3f:9e:bc:d8:c5:ac:94:ca:f0:
e4:ff:a8:43:ea:49:94:a7:95:07:03:dc:dc:21:20:
a9:ae:bd:30:83:20:00:9c:4b:3e:01:f7:f5:8c:fb:
50:17:87:81:20:9d:4c:fa:b8:38:13:92:7e:cb:a9:
d2:9c:d8:ab:39:9d:72:7a:0c:17:7d:27:97:37:c8:
cc:30:5b:87:11:9c:0e:aa:c6:a0:e1:fa:93:a1:cf:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:34:07:45:2E:A1:F0:C8:0A:18:98:6D:79:A3:E0:EB:DE:50:E0
X509v3 Authority Key Identifier:
keyid:72:80:96:E8:AC:D7:6E:9A:A1:7F:3E:B6:78:04:06:E3:DA:56:3E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coCW6KzXbpqhfz62eAQG49pWPtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bf144b-aab5-407e-904f-c1734d50cb3b/1/coCW6KzXbpqhfz62eAQG49pWPtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:08:dd:89:66:9b:5c:aa:94:f0:99:31:29:ed:2e:af:f3:
31:76:66:aa:68:77:fc:78:08:da:4e:24:6e:aa:34:15:53:55:
1d:34:fe:e4:b8:6b:c7:a7:08:45:98:d5:11:f7:c3:79:a8:7b:
ad:ec:ae:46:25:e2:8b:39:ce:fc:91:68:b8:b5:d9:e9:21:6d:
03:1d:9f:fd:0c:46:92:26:0e:99:af:b0:9d:9c:c0:3f:11:09:
9c:64:2c:4e:a0:7f:fd:f5:7c:d9:e6:6e:3d:8b:aa:29:84:47:
46:72:5b:6e:f5:ae:4d:4f:cf:f9:53:4a:de:aa:ba:3b:38:59:
75:18:4a:67:1c:bd:b6:c8:de:95:ee:fd:e9:b0:f6:37:39:0f:
f1:bf:4d:87:b1:8f:81:41:7f:db:b9:4a:09:7d:d5:fe:9a:85:
a1:b5:bf:9f:4a:a6:b6:79:37:fa:fa:41:f8:85:c6:f9:87:7d:
e0:e7:8e:b8:30:5d:e7:27:bb:ac:f2:74:5b:0d:c3:3a:c6:e7:
3d:5e:01:d9:24:1a:04:06:bc:6d:4a:4f:93:e0:8f:95:d9:48:
e0:2b:37:05:cb:eb:6c:a7:77:8b:5c:79:ab:e4:b2:be:f7:34:
3f:84:a8:7a:8a:6f:5c:25:f8:79:49:9e:72:c1:4b:f9:7b:64:
49:06:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:53 2025 by rpki-client