Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
File: CnbFQ62r2crl3-IchpkiCJQ3rE0.mft (raw, json)
Hash identifier: 23fXd9oFd3/K5Wbh1+kVOcGX04gk4C0gr9sPDO6VNUQ=
Subject key identifier: 0E:27:6C:4B:D7:80:11:90:05:F8:29:D0:A9:09:28:45:56:E2:06:10
Authority key identifier: 0A:76:C5:43:AD:AB:D9:CA:E5:DF:E2:1C:86:99:22:08:94:37:AC:4D
Certificate issuer: /CN=0a76c543adabd9cae5dfe21c869922089437ac4d
Certificate serial: 0194BBCEAE0F5899D5619CB22FA540CD11D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnbFQ62r2crl3-IchpkiCJQ3rE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
Manifest number: AD
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: CnbFQ62r2crl3-IchpkiCJQ3rE0.crl (hash: F+dE1DXwG73WP1l8G6IPWfyioS69ocuOheDoGYQS5Ok=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ae:0f:58:99:d5:61:9c:b2:2f:a5:40:cd:11:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a76c543adabd9cae5dfe21c869922089437ac4d
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=0e276c4bd780119005f829d0a909284556e20610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:f1:5e:cd:a5:52:41:13:d3:69:ee:b0:cc:
04:a0:46:e1:fa:3f:6a:4a:e9:0f:10:63:85:d2:53:
68:06:f1:7a:03:27:df:6a:31:5e:43:f3:29:44:d5:
f8:03:ff:2b:75:f5:66:05:44:b4:77:57:1d:d5:92:
1e:7f:a7:51:4c:4c:a9:47:67:3a:dd:95:f7:8f:52:
ca:19:ae:bb:3c:fb:dc:1e:80:ac:b8:e7:7a:de:96:
45:f2:d3:67:c2:1c:5a:85:b6:9a:e9:45:33:b8:08:
53:fa:e1:f1:ac:6c:27:74:40:a3:7d:7a:3d:d0:9b:
a2:e5:49:a0:cc:6a:65:ce:57:23:5a:72:da:1e:1b:
92:86:62:11:11:92:3d:3d:a5:a8:b3:0b:3d:09:e8:
b2:28:1d:d7:ad:b3:45:e5:e6:38:61:13:b9:f1:c9:
b4:64:fe:41:c0:40:d8:9c:1d:2d:9c:4e:67:94:81:
40:6d:25:00:03:3f:48:8d:d9:88:e4:24:91:fa:e9:
40:20:fe:7c:d1:72:7a:a2:fc:2e:eb:f0:00:ae:13:
d0:ba:c0:a0:7b:2b:2b:1e:bc:f4:74:25:99:04:59:
f8:56:53:a1:56:4f:79:83:cd:e1:28:24:75:04:5d:
9a:e7:5d:4f:27:a0:f2:e7:5d:6c:1c:3d:bf:69:bb:
44:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:6C:4B:D7:80:11:90:05:F8:29:D0:A9:09:28:45:56:E2:06:10
X509v3 Authority Key Identifier:
keyid:0A:76:C5:43:AD:AB:D9:CA:E5:DF:E2:1C:86:99:22:08:94:37:AC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnbFQ62r2crl3-IchpkiCJQ3rE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d4:1d:e1:2f:25:9f:2f:d2:fc:4b:ee:96:c6:6f:a9:5b:21:
2f:48:19:98:aa:ff:6e:27:c3:68:14:77:6b:0f:d1:ac:47:22:
51:34:9c:f8:56:1b:37:8c:d4:88:3d:8a:a5:0d:11:47:9a:b9:
cd:01:d2:f9:dc:07:08:2d:4b:ab:e5:e1:25:c9:81:9f:2a:7b:
40:bb:3f:c1:40:42:64:e5:af:47:41:3d:54:fa:fb:04:ab:48:
78:fb:e9:f0:f3:26:ff:c1:39:a4:da:45:10:bf:fa:36:9b:b0:
55:74:3b:59:39:7d:0a:40:5d:0e:56:bc:2d:75:8b:12:22:ee:
77:02:c0:1c:8c:23:ba:35:61:62:59:b0:1b:51:fc:c0:e0:1d:
99:42:4d:b3:99:dd:c4:f4:72:b7:0b:9f:69:ce:09:07:9c:85:
44:d8:1b:22:7b:8f:13:73:ff:09:b6:9f:ff:de:e0:2d:c7:94:
3d:10:03:34:ee:9b:6e:5d:ba:c2:db:6d:5f:4d:ee:13:c0:8a:
a1:1e:ff:6c:a9:f7:73:aa:75:6b:7a:09:5c:95:54:7f:eb:ca:
99:50:0e:55:2d:1e:bd:49:6c:12:5a:fa:fb:4b:ef:6e:4b:58:
7b:bb:a0:15:be:97:a4:b8:fc:f1:3a:e6:ea:48:76:f0:a3:e6:
21:6c:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client