Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: e/GOwBkgnboCsNQUZgk53EyDWBxz/wF23pq13KPowpI=
Subject key identifier: 6B:B1:A3:35:E0:1D:D6:42:7C:72:5E:63:69:23:12:48:17:19:CF:7C
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 0194BBCEC8ADA7C2B6FD23F93748915B2391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: c/Ay4DF4MYfUcdH4xXCw6/r1eoLQBEP2DAdCoJ9HHKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:ad:a7:c2:b6:fd:23:f9:37:48:91:5b:23:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=6bb1a335e01dd6427c725e63692312481719cf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:3c:f1:d6:ca:e7:ef:d1:c5:71:1e:ca:1b:
c5:84:f0:1a:32:a5:85:df:16:7d:6f:8f:cf:53:2d:
21:d9:71:20:f7:7b:04:38:4e:1e:45:ad:66:3c:7c:
40:2f:78:52:7f:4b:66:70:45:14:7b:af:c6:94:3c:
b4:b7:6d:09:bf:d6:bd:b5:c5:a8:54:1e:f4:79:0a:
22:51:f6:02:57:17:b2:a8:1a:64:7e:e7:d2:08:2a:
4e:1c:76:d5:6d:b4:b6:3b:01:e7:94:6f:85:f8:1d:
b3:20:ca:88:a6:8b:5a:08:54:16:b8:12:f4:bd:a7:
a1:c4:b1:d2:82:11:04:5f:97:76:b9:58:53:4f:77:
7b:03:1b:33:88:24:ab:06:b7:e5:43:f5:a2:32:a1:
81:c4:7b:61:d4:cd:2f:1c:43:74:04:36:ad:1b:ca:
a2:a7:28:e3:26:0f:7e:a9:10:5a:25:a2:d1:f2:96:
d4:6e:a9:50:3b:a6:0e:bb:a5:77:57:46:2c:1a:22:
92:28:25:13:a9:df:3f:cd:c6:01:bc:26:ee:7d:77:
64:6f:bd:83:eb:2c:0c:00:7d:d5:99:63:49:44:67:
c3:bc:33:f8:1e:a1:52:ed:6a:79:39:6d:24:07:a3:
f1:87:a1:d8:a2:06:6e:c5:e5:a3:9a:55:3c:ea:c5:
60:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:A3:35:E0:1D:D6:42:7C:72:5E:63:69:23:12:48:17:19:CF:7C
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8a:d9:5a:d0:af:da:f5:4b:4f:6b:f2:dc:be:e9:c1:bd:2d:
43:93:44:01:ca:59:77:ae:ed:12:1b:13:e5:ec:52:7b:d9:cf:
08:c5:ee:50:83:cb:9f:5f:a7:58:db:9f:af:3e:e8:a6:ba:58:
3c:55:0e:31:bf:cb:1c:d8:a1:92:e1:ce:38:6f:d7:b0:97:94:
d2:74:86:83:3a:19:7c:19:6e:d7:31:c3:96:2a:89:bd:a7:81:
b7:fd:98:a2:bc:b0:fc:e7:8f:13:2f:4b:19:6c:98:4b:a0:46:
01:1e:1a:81:0a:2f:f2:15:c0:c4:cc:15:5f:92:43:84:72:b8:
da:16:c4:43:06:17:76:07:64:3e:7e:2e:d2:b5:c2:bf:fd:eb:
6e:5a:66:fd:6c:30:9c:e4:f2:8d:88:78:34:7a:eb:29:15:ea:
f7:d3:8e:13:3e:36:f0:cd:9c:d5:ed:7c:1f:7c:ed:72:2c:91:
00:39:73:85:e4:70:fe:aa:e2:ba:f0:5c:2b:b1:c1:f4:ef:54:
8c:20:c4:71:5a:a8:79:fb:96:67:0d:4c:be:1a:5e:be:19:d3:
b7:b8:8e:18:5d:66:2a:1e:8c:a9:b0:16:28:23:ec:c8:9f:6e:
cc:ab:08:46:1d:7d:98:8e:78:13:54:d3:a3:b3:5b:dc:b5:e3:
92:a6:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:18 2025 by rpki-client