Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
File: cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft (raw, json)
Hash identifier: oSklCI3+2NI2fZSY/AaraH73uCVxRI/vdMOiwBCBVG0=
Subject key identifier: 3F:B5:A6:D4:E0:D0:28:48:51:86:CF:00:77:64:75:C1:8B:E8:60:B0
Authority key identifier: 70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
Certificate issuer: /CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
Certificate serial: 0194BD17616F9573FD06BC63C0D11293EAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
Manifest number: 01D4
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl (hash: 9jYaUWnDG5mTQ/FNnueQ0wkuapVfhgyCHNZTshcsKgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:6f:95:73:fd:06:bc:63:c0:d1:12:93:ea:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5a061315670b5bf26e277c92c3894d72cd3c5
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=3fb5a6d4e0d028485186cf00776475c18be860b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:c0:88:66:4a:4b:17:6c:81:ac:be:0b:43:
c8:dc:cc:7e:99:b6:3f:00:5e:2c:e0:02:b2:16:51:
cb:3d:6b:3a:e3:9d:a4:0e:e9:0e:22:5e:38:a2:6a:
f7:dc:22:00:47:c6:02:37:39:9d:9b:5b:a8:68:c8:
0b:b6:75:30:62:51:f6:f1:b2:a6:a5:22:26:4e:c8:
da:b0:95:d7:c4:5c:8f:aa:50:bb:36:29:b7:ef:c9:
1b:d7:5a:5c:47:1d:7a:0d:9a:d7:51:c4:07:51:8d:
fd:8c:70:c6:fe:75:51:c0:60:81:83:24:2b:92:64:
10:63:37:b6:e3:ae:10:2a:41:6b:e0:e1:a3:65:fa:
52:98:59:13:3a:ad:ab:4d:a8:4d:79:d0:76:17:ef:
d1:22:ff:e3:05:e6:14:ec:ee:a8:9a:3d:b6:d0:86:
fd:50:9e:96:4a:ed:5c:41:d0:75:3a:f3:e9:4b:37:
33:39:c5:9b:90:7e:d2:07:82:06:72:2d:95:31:d8:
a0:b1:15:da:73:8c:96:05:9b:3b:3e:c8:6e:b8:7b:
9f:db:9d:41:9f:ed:d8:00:66:5d:55:20:65:b9:7a:
5a:45:25:14:06:47:aa:19:ea:fa:fd:39:48:40:49:
a6:9b:33:0c:c5:48:c6:b7:3e:9b:13:4e:ee:84:19:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:A6:D4:E0:D0:28:48:51:86:CF:00:77:64:75:C1:8B:E8:60:B0
X509v3 Authority Key Identifier:
keyid:70:E5:A0:61:31:56:70:B5:BF:26:E2:77:C9:2C:38:94:D7:2C:D3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWgYTFWcLW_JuJ3ySw4lNcs08U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/746d3a-13be-492e-8cb3-62aa054a7851/1/cOWgYTFWcLW_JuJ3ySw4lNcs08U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bb:5c:48:66:81:1b:63:b2:ee:8c:8e:f3:a2:9a:c5:26:d8:
76:64:3c:b6:56:b7:64:18:b1:20:5f:f4:f3:54:0f:b4:dd:3f:
19:ec:f6:2c:94:1c:ba:7f:43:54:76:fd:be:e0:c6:5e:58:f0:
5f:a5:7a:24:9d:79:dd:e5:03:12:50:1f:f8:d3:62:2d:45:ad:
71:ba:fe:df:8b:b4:ad:8b:a1:ac:1f:f4:7a:07:dc:40:30:0c:
8b:0b:3e:33:62:14:0a:aa:bb:fb:c4:af:32:be:ea:e7:0a:5b:
67:dc:bc:79:95:e5:83:75:30:45:2b:6d:9f:3b:5d:69:de:bb:
e6:ac:7a:86:88:b9:38:4a:01:c3:36:1a:db:3d:1e:84:83:84:
fe:df:bf:9b:11:bf:e0:1c:6a:19:d8:ee:ae:c2:d4:84:14:19:
19:01:7e:fc:1f:de:85:5d:1f:2f:00:55:55:6a:bc:28:79:ed:
fd:84:d9:de:07:a5:a3:ff:5e:24:ca:a4:c0:49:0a:d3:78:7b:
7f:4a:72:0d:64:72:a8:a8:e7:33:4a:c8:4b:76:f2:06:4e:d8:
21:ce:0d:b3:72:03:19:77:9b:d8:b5:36:1e:22:94:eb:d4:98:
86:86:51:f4:00:1c:3c:5e:6e:39:44:04:1c:9f:d7:00:79:e6:
1b:47:c9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:34 2025 by rpki-client