Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
File: C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft (raw, json)
Hash identifier: 9xm9+A32CnNnMSVMHQqmOph1l5325iXk2KgjxHtQnYQ=
Subject key identifier: A2:08:0F:6B:8D:91:2A:B2:D9:3C:DF:E6:BD:DF:FA:3C:21:5C:A4:B5
Authority key identifier: 0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43
Certificate issuer: /CN=0b968f2ae273db0c6860e75048029685cebef443
Certificate serial: 0194BC3C73054322303A026067A9AEF05504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
Manifest number: 0F0B
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl (hash: CLjb/43sljz3BZqZF5K9hy1sTrgECxj1waCljINIt20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:05:43:22:30:3a:02:60:67:a9:ae:f0:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b968f2ae273db0c6860e75048029685cebef443
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=a2080f6b8d912ab2d93cdfe6bddffa3c215ca4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:9b:91:a1:7d:e6:85:8b:9b:69:f1:f7:d3:
b9:b6:d2:a3:d6:f3:dd:34:74:22:e5:11:0f:85:cf:
a9:97:07:7d:d6:22:20:60:7c:40:e8:2f:49:f6:d9:
a1:5e:62:cc:55:15:a9:a1:dc:0d:cc:e1:14:0d:81:
cd:67:81:6b:93:b1:e0:a8:08:51:33:c4:42:da:3b:
fa:44:ed:29:d7:48:da:58:19:0f:15:1e:f0:68:b2:
a8:3d:ba:6c:a6:71:48:25:49:5d:45:8c:06:eb:7b:
33:02:e8:9e:bf:3f:5c:12:a5:d4:51:0c:3a:f0:6c:
e9:04:00:dc:e6:c2:e5:cb:9e:77:79:3d:53:ea:22:
1a:d7:d6:f0:53:48:bb:b8:d4:80:4d:95:12:88:cd:
99:ed:4a:95:6c:54:f5:f5:f8:05:85:71:51:d5:61:
17:68:fd:3b:32:65:7d:46:0a:06:dd:16:3f:e8:8d:
35:bb:46:f7:6e:03:59:8d:fa:3b:75:a8:e8:82:ad:
b2:a8:51:aa:be:99:1e:ea:10:31:38:fe:bb:1a:b8:
43:61:5d:4d:75:2e:a2:1e:96:4e:9b:6b:c1:04:8a:
b3:ea:c6:8c:3e:97:a8:23:22:51:a7:19:c3:f9:8e:
ff:89:9c:2a:35:4c:17:42:24:0e:be:6b:93:22:27:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:08:0F:6B:8D:91:2A:B2:D9:3C:DF:E6:BD:DF:FA:3C:21:5C:A4:B5
X509v3 Authority Key Identifier:
keyid:0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:39:a8:8e:0b:9a:10:32:9c:43:1f:70:2c:60:7a:d4:b2:fd:
57:d8:91:10:66:df:52:c4:84:7e:48:5e:c5:a0:51:29:49:33:
f1:45:06:2f:cf:d7:91:13:f8:1f:89:25:ba:4f:1b:9e:64:c3:
b3:b4:02:4a:bc:0f:a9:ff:e0:f0:68:77:5e:91:06:f4:44:71:
9e:07:2e:a7:ab:2b:3c:dd:13:00:97:73:e9:53:29:76:a1:1c:
c9:af:ed:ff:97:ed:33:f0:01:af:bb:76:f8:7b:e9:4d:ff:71:
b5:7c:5a:1c:50:37:28:04:2a:5d:da:f1:77:11:da:40:b0:a1:
3c:e5:9a:cb:4e:bd:6f:0e:28:7d:2f:04:97:fb:e8:9a:6f:77:
53:03:f4:1c:e8:d7:c0:cc:ed:97:50:6e:3d:f0:b0:78:86:b1:
ae:3a:6f:26:6c:93:98:87:54:55:4c:32:10:74:8a:2e:30:bb:
b8:d9:08:73:9d:e6:25:bc:6f:a2:11:7f:f2:a6:f2:5e:84:ed:
ad:cc:ca:a8:5f:6a:27:ef:03:26:00:7b:bf:12:f7:44:61:33:
ae:b0:c1:bc:fc:2c:ea:94:46:95:d7:ee:db:60:d0:9c:0a:a9:
da:87:04:d4:96:32:54:e8:a2:ef:42:05:42:f8:bd:5e:6f:83:
50:76:2d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client