Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: rpJb53xXPLy9JrAdKA/8YnXAhfHxkfuQspobELjaMtk=
Subject key identifier: 23:AA:70:27:C4:BF:E9:42:C6:01:96:36:F7:DC:AD:12:29:90:8E:2E
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 0194BBCDD1483F0F00AE068CAFC215130B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0CFD
Signing time: Fri 31 Jan 2025 10:00:15 +0000
Manifest this update: Fri 31 Jan 2025 10:00:15 +0000
Manifest next update: Sat 01 Feb 2025 10:00:15 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: GLSYBH46OKKLR1zPpFMeRI7GgYPLrWyej/Oc5T6cUI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d1:48:3f:0f:00:ae:06:8c:af:c2:15:13:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Jan 31 10:00:15 2025 GMT
Not After : Feb 1 10:00:15 2025 GMT
Subject: CN=23aa7027c4bfe942c6019636f7dcad1229908e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:b1:bd:18:7c:23:8f:a5:48:16:37:b8:d3:
62:79:44:34:85:ab:a4:8a:8c:f6:5e:10:f1:91:56:
e1:f8:f4:bd:2c:5b:39:eb:30:fa:59:87:d5:4e:a8:
a4:fd:64:af:14:82:f4:9d:d4:ce:02:6e:88:92:e8:
c2:f4:64:c3:68:31:c4:fd:20:34:2f:d6:5e:4a:9e:
1c:7d:b1:47:bd:8d:7f:e9:3f:37:69:8e:7f:e9:1e:
80:4a:61:81:6c:73:a2:90:dc:7e:c7:bc:04:ac:00:
1a:0c:1f:32:b2:99:e9:df:8b:da:f8:db:c2:24:ee:
77:cf:70:6b:20:ac:a0:dd:d9:d2:39:19:01:24:5f:
2a:b8:17:57:83:11:0c:40:0d:78:9d:08:27:d2:41:
93:76:b0:1c:b6:a3:b2:06:ea:13:b9:ec:bb:44:74:
01:4c:1d:94:cb:94:be:fd:e6:4a:de:9a:bb:6d:8e:
f1:ec:c5:1f:9f:72:7e:89:7e:97:b5:f6:69:be:86:
4f:a8:40:37:20:ff:07:76:9e:6a:1d:23:94:06:d3:
e6:ac:cd:32:bb:19:33:4b:27:0d:ec:69:54:90:8b:
9a:20:f8:90:f8:02:3c:c5:b9:62:17:1b:3e:80:51:
e5:4a:ee:9e:56:c9:38:e0:a9:c3:32:5f:9d:24:ac:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:70:27:C4:BF:E9:42:C6:01:96:36:F7:DC:AD:12:29:90:8E:2E
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:60:16:7d:83:d1:d1:65:3f:41:8d:7e:88:e2:d6:17:ee:
30:ef:c1:94:a4:82:0e:7c:59:40:46:49:af:c4:ef:38:cd:08:
9e:be:28:ce:48:4f:b8:8d:16:53:02:06:ee:9e:f9:73:a0:d3:
ad:6e:6b:3e:29:99:2e:42:ec:44:4f:dd:61:60:64:60:88:6d:
ed:eb:47:b8:96:3a:eb:0a:27:ba:84:ce:7f:57:50:f3:e2:d6:
6a:de:44:6e:ed:72:07:86:f1:08:17:82:4c:56:c8:dc:48:78:
f5:74:79:7a:02:09:6a:32:4e:45:fa:4b:77:b1:10:17:15:cc:
35:04:36:e2:9f:4d:3d:d8:fb:63:b8:44:c4:06:41:28:a6:89:
83:f6:9a:b6:db:52:83:dc:c0:66:c5:18:5a:75:ab:ac:67:65:
2e:b9:4e:7e:ca:64:22:49:73:0f:9f:3d:1d:8b:85:4c:48:95:
09:6b:77:25:25:36:89:26:09:cd:5d:b0:5f:8a:a4:ff:d9:c3:
a6:f1:31:70:1c:61:32:ae:9d:74:5d:17:92:0b:55:cd:05:c4:
3a:15:d8:3e:68:e1:31:af:2c:82:ce:dc:c5:91:32:eb:f2:0f:
1f:f4:ff:6a:31:c7:c0:55:e5:76:75:c7:1b:20:2e:2d:6d:8d:
bb:c1:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client