Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
File: C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft (raw, json)
Hash identifier: WKQ1Mf3HpYfHnwdHLoTFhKpyfEqy8xyB/dCec7DcJQQ=
Subject key identifier: CB:66:88:C9:BB:86:F2:5A:AE:71:15:B3:AC:A0:F5:4D:21:97:04:2E
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 0194BC3C4650D68802F5AD987F811B161C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl (hash: x/s/pu0BeVLdNQ77k0vmYpJ5iqh94RgXU3ImFkghI4U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:46:50:d6:88:02:f5:ad:98:7f:81:1b:16:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=cb6688c9bb86f25aae7115b3aca0f54d2197042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:83:82:19:e6:5c:8f:34:5a:55:3d:93:02:
31:b8:cd:44:a6:85:42:c9:18:dc:4d:64:c8:b5:16:
a2:96:66:f6:53:c3:f4:4f:0e:54:6d:bf:0e:8f:49:
aa:3a:44:a3:e6:8b:af:4e:8b:05:30:73:c8:f5:a2:
41:f3:a7:28:d1:f0:ca:c4:98:e9:68:2a:9c:2e:81:
0c:4f:1a:28:bf:cf:0a:fc:2d:ee:4c:40:30:2f:dd:
5c:2e:f9:5c:27:4a:6c:dd:cb:0e:c4:74:9f:24:4e:
55:81:b4:da:ed:c6:88:7f:02:cf:6c:4a:f3:6b:cd:
01:05:66:a5:a7:39:0a:95:40:79:7a:89:48:59:6a:
85:2c:76:d1:aa:6b:5d:b2:f4:1d:03:5e:26:07:d4:
cd:ad:c1:4d:10:2b:bd:21:1f:a8:46:23:4f:d5:41:
80:45:a7:1e:36:5b:5a:78:12:90:5f:66:80:78:ca:
98:c9:40:ce:f2:53:bf:e2:c1:4c:a3:84:4a:9f:43:
2a:93:36:be:35:5c:c1:0f:39:4a:c8:2a:90:e8:31:
a8:0a:e8:90:92:1f:57:76:2a:f4:33:11:b8:e1:bd:
6a:1e:51:4f:9a:74:4a:f6:62:03:9e:d2:f6:9d:d2:
9c:4c:02:77:69:b7:08:d4:5d:4a:05:f7:ba:94:09:
49:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:66:88:C9:BB:86:F2:5A:AE:71:15:B3:AC:A0:F5:4D:21:97:04:2E
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7c:0d:c6:c6:e6:96:14:2e:25:c1:49:4e:d5:e2:7a:a0:5a:
19:34:f2:c9:39:f4:a6:29:07:d2:ab:46:d5:7d:16:09:3a:3c:
30:d6:9b:9b:f7:60:72:ca:28:0f:10:7f:97:b4:b4:13:c3:4b:
ce:ea:f0:67:e3:f4:35:26:73:3e:e0:f9:48:da:eb:a7:42:a2:
43:59:fa:2c:b3:cf:79:e8:3f:4e:15:c8:17:a1:46:4c:8e:69:
a7:55:15:7d:ce:94:ef:2c:4a:af:4b:68:96:13:c9:a4:8c:56:
54:61:4e:89:e6:d5:1c:40:90:d2:ff:74:66:54:bb:4b:80:57:
4b:a4:e3:ec:de:ca:18:13:9c:77:d0:f3:4c:02:a3:cc:77:9d:
a5:73:70:54:e2:e9:46:95:6d:83:6c:27:e4:91:0b:55:84:ba:
93:52:cb:e9:5d:26:5e:09:b9:c0:35:7e:cb:63:53:e1:c8:c9:
fd:35:f5:41:91:19:5c:98:d6:07:9f:79:22:4c:85:be:88:1a:
ad:24:fd:32:84:79:53:8e:99:66:96:7c:70:22:20:ea:f2:73:
ca:47:12:28:70:6f:15:8f:1e:40:3f:b9:2d:7c:ba:42:54:c9:
e8:d8:82:4b:c1:50:4f:b9:70:a9:ce:6f:1a:a1:d3:8a:3f:31:
8c:30:c3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:06:44 2025 by rpki-client