Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: kdqNOXFU32z593OLw33a6+umhpHzgoP21VoTZO2Yj74=
Subject key identifier: 67:A9:72:27:53:D6:FA:8B:B8:3E:E8:7A:08:DF:69:CF:F8:8A:A4:56
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0194BBCDBA88EE21372E56B32F2FB6D28BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 0308
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: IeMKKU/A6NDbBpi4QcoFVtoj90SZG1jiXkXwkb+QC6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ba:88:ee:21:37:2e:56:b3:2f:2f:b6:d2:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=67a9722753d6fa8bb83ee87a08df69cff88aa456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:0c:00:d3:5d:dd:bd:e5:99:33:b4:26:c7:
84:04:09:fb:ad:60:11:95:e1:ab:ff:c1:25:02:93:
61:02:23:f3:6e:80:dc:69:79:ea:ca:4c:3b:3d:34:
12:be:47:9f:b1:f3:a4:80:49:8b:76:2d:37:89:5c:
f4:32:57:88:ba:dd:35:82:2f:a5:bc:87:6e:7c:d2:
45:58:af:82:16:3e:61:fd:5d:22:75:a1:30:fb:f4:
9b:c1:59:30:a4:cd:ef:ad:7e:9f:8a:f2:fe:e7:17:
33:b3:60:bc:9e:50:f2:77:69:eb:8f:93:ba:0c:34:
65:67:ba:c8:1b:d4:76:ad:cc:57:03:1c:56:a5:7d:
48:35:e3:04:30:b2:e9:56:53:d5:c5:93:71:c7:3e:
67:1b:d0:99:2d:10:e0:d4:8a:2b:8c:f7:7f:b8:c3:
fe:22:82:8a:b2:10:48:30:0d:ee:47:62:2e:5a:89:
f5:6f:2b:46:05:eb:a6:1e:80:84:c6:16:65:6a:a9:
2b:db:a1:f4:d5:5d:d3:78:c0:7f:b1:85:3f:a0:53:
1d:83:7d:b0:e0:54:32:24:de:3c:30:8c:f1:0b:55:
fc:5b:4d:14:03:8e:bd:d8:d4:5b:e8:c6:26:14:e8:
8e:31:41:00:4b:4c:7e:95:fd:9d:1a:d8:d8:02:c6:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:72:27:53:D6:FA:8B:B8:3E:E8:7A:08:DF:69:CF:F8:8A:A4:56
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:72:93:57:c9:47:ec:ea:16:b4:01:87:6c:57:7a:3d:cc:21:
89:c2:04:de:4b:8a:15:7d:70:1e:4e:57:23:26:87:ba:c5:73:
d2:18:54:46:d2:2c:0b:c2:b7:29:78:c9:5b:58:1b:70:63:c9:
dd:f5:0a:20:9e:cb:60:9d:c2:d6:69:04:77:c6:d2:06:c5:16:
e3:2e:d5:e0:52:c7:0f:cb:45:82:d0:70:37:80:08:cc:ff:06:
4e:35:f3:18:cd:03:e5:6c:e8:20:e1:2c:4e:56:60:e1:9e:ca:
9b:cf:31:cb:f7:3c:72:5b:ce:08:e9:f3:b5:44:aa:b2:97:93:
94:67:1e:9c:2b:ea:e9:70:82:af:24:fa:2a:ea:25:bb:8d:f9:
dc:77:21:31:c6:ee:22:59:2b:8c:d9:a9:98:e9:88:51:e9:fa:
a4:af:fc:f6:78:af:10:df:65:a0:7c:2d:24:1b:c4:34:a6:7f:
ee:96:11:3c:62:06:cd:66:2f:c3:49:03:c9:d4:3d:fd:6d:d9:
b6:75:e5:47:90:45:f4:ea:05:df:42:93:ca:5d:67:79:40:96:
1e:67:b4:d9:72:0b:b7:1d:0d:2a:c4:c8:bd:aa:db:16:d8:de:
2f:dc:b1:e0:b0:7a:eb:b8:e9:6f:f3:13:f1:7a:fb:32:50:2d:
0a:c0:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:14 2025 by rpki-client