Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
File: cop1W_9p20tgWlFDplt9w5y6u7E.mft (raw, json)
Hash identifier: pET8MOa26NpvD86z5NBK03oGV6H3shMNybwVeJbfl1U=
Subject key identifier: E7:9A:D2:99:6C:E9:90:1A:DF:1F:29:D3:99:17:90:B4:2B:E2:12:F1
Authority key identifier: 72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
Certificate issuer: /CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Certificate serial: 0194BBCE8811B1B7CDE5EE3ACC1546752A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
Manifest number: 0DE9
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: cop1W_9p20tgWlFDplt9w5y6u7E.crl (hash: j8U5w/rGsBnHBkDHFQc71/r5qsZ12WOHrimpMSBA7lg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:11:b1:b7:cd:e5:ee:3a:cc:15:46:75:2a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728a755bff69db4b605a5143a65b7dc39cbabbb1
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=e79ad2996ce9901adf1f29d3991790b42be212f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:64:08:07:12:04:c5:8f:20:89:47:ba:1f:
d1:ba:8c:31:7a:84:ba:ad:53:b9:c8:81:10:37:b8:
4c:8d:9a:1e:0e:54:be:27:e6:4e:f7:13:10:ea:82:
8e:ae:6e:dc:51:f0:cb:c3:9c:c1:07:b6:eb:48:b5:
6e:ed:40:35:74:f6:c1:8c:9e:db:db:89:f8:9a:82:
17:c0:1e:1c:cd:f9:0f:58:e1:05:52:25:45:2a:12:
af:61:dd:fe:5f:b5:a6:86:ea:de:59:2d:72:b0:9f:
f2:36:82:5f:f6:d1:02:0e:88:93:80:88:ae:21:e5:
aa:fb:72:0c:06:9f:41:80:47:9f:c6:50:06:b4:50:
0c:f0:80:98:af:d5:c0:fa:d7:94:bb:c1:56:3a:63:
bd:e1:02:7f:09:a6:b9:2c:93:1d:28:6d:77:d5:3c:
0b:78:b7:59:69:3b:c9:d5:01:54:03:9b:ab:3d:ff:
8c:b2:13:dc:ab:e5:69:ba:a4:ad:c3:39:d4:82:29:
78:36:ac:95:84:aa:c0:23:c2:b3:62:65:6b:2c:a7:
ca:60:37:b5:93:87:2a:b3:97:ee:37:46:ce:ae:86:
75:1a:2a:3f:3f:f7:8b:af:f3:8c:09:9f:d4:e8:a8:
4b:d9:27:6e:6a:71:71:e1:6c:6f:23:fc:03:f7:06:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:D2:99:6C:E9:90:1A:DF:1F:29:D3:99:17:90:B4:2B:E2:12:F1
X509v3 Authority Key Identifier:
keyid:72:8A:75:5B:FF:69:DB:4B:60:5A:51:43:A6:5B:7D:C3:9C:BA:BB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cop1W_9p20tgWlFDplt9w5y6u7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/58ccbc-2b73-4176-b9aa-8c378ae1860b/1/cop1W_9p20tgWlFDplt9w5y6u7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:25:cc:02:7c:d6:61:b7:1d:51:87:74:8e:79:19:b1:73:39:
ff:62:db:bc:5a:12:c6:ac:a9:78:57:3e:e6:08:fd:0b:a9:89:
cc:f7:33:94:e4:2d:07:68:d3:cf:42:9a:58:68:48:d8:97:98:
6a:9a:f1:27:41:81:ba:17:70:be:d1:47:d5:c4:e0:a3:4b:4f:
e3:6a:65:ab:a3:cd:31:02:db:d3:4a:ab:2b:bc:5e:ec:fd:3e:
c8:3d:0e:6a:2f:e0:f8:28:46:0b:2d:fc:b8:6c:ad:de:09:fd:
5b:84:8a:48:f8:77:60:dd:54:7b:03:96:a6:1e:82:68:17:c0:
7b:92:36:66:98:1c:28:e0:ae:0d:33:be:26:4c:9d:ec:dd:ec:
e6:3e:9d:00:aa:8d:c6:49:0b:d9:d3:6c:0b:fa:ff:d3:a5:60:
a5:85:c8:cb:21:e8:e1:9a:95:b2:6b:69:3e:f9:fa:ab:0f:b3:
42:6f:cb:a6:38:8f:b1:52:9a:70:9b:36:37:a3:68:2f:e3:c0:
86:36:d5:8d:02:2e:19:75:02:9d:64:eb:33:8e:02:46:e0:42:
4e:df:f1:17:5b:6f:3f:18:63:3a:d3:9e:05:d6:62:5f:e2:9e:
0a:98:de:e1:f0:6f:a6:a2:c5:bc:1c:9e:81:39:a3:3d:a2:91:
1e:ca:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:46:28 2025 by rpki-client