Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: s/XLYre30p1PYRUfqTk6ElHN2zbxNN5JEoyWl6rGepA=
Subject key identifier: 20:9A:49:A6:A8:26:1F:AC:D9:C7:0F:9B:B3:A8:92:42:A9:E2:46:EC
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 0194BCA9B75E9D51A50CC4E77B90CE61BE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: 8Il3uJNuHnl487i2SlM52gds9xM/2/k70wEwUAgWQ8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b7:5e:9d:51:a5:0c:c4:e7:7b:90:ce:61:be:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=209a49a6a8261facd9c70f9bb3a89242a9e246ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:98:5d:27:2b:6c:d6:47:ec:be:e9:97:98:
4b:50:61:20:fa:8e:82:a0:c2:15:66:5a:5f:ef:a5:
8e:f3:08:43:ad:2e:11:ba:1d:db:51:47:75:c3:98:
76:ee:ad:41:69:53:83:ba:2d:9f:06:23:2d:ac:1e:
68:80:24:d5:69:26:e9:84:e1:63:89:6f:46:88:c8:
12:b7:7a:8c:3b:b4:38:32:70:a9:5b:f7:4d:95:da:
2e:63:16:5c:46:50:56:df:86:97:29:89:99:37:80:
39:1e:59:32:c5:af:9a:0e:d3:d4:a3:3c:4e:db:bc:
c9:be:02:51:12:10:cd:27:5b:97:d2:54:48:6c:37:
e9:bb:0d:b0:63:16:c9:09:ba:d2:c6:48:2b:23:94:
58:8b:42:1c:62:8d:c6:d7:26:85:04:1c:54:97:ea:
b4:d5:c0:36:61:3c:ea:1b:03:c6:29:ee:35:41:ea:
19:73:ad:2d:28:94:d1:5c:03:8f:af:d1:e7:fc:96:
4a:fb:b2:47:ae:d2:b0:15:c3:1d:1a:de:dd:88:45:
e8:b2:1d:a9:af:d8:59:ed:dd:3c:40:a7:c9:58:16:
1d:a4:43:b9:82:b6:cb:ec:15:72:b9:02:42:39:d0:
80:4b:5c:20:b9:e6:60:7e:59:98:ab:c1:77:89:96:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9A:49:A6:A8:26:1F:AC:D9:C7:0F:9B:B3:A8:92:42:A9:E2:46:EC
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:25:01:0e:dd:e2:a7:30:6c:8d:e1:5d:b5:ee:bc:2e:5b:a6:
da:d7:00:ff:95:62:0f:53:18:70:a1:96:10:51:b9:75:be:b4:
fb:27:3f:df:7a:90:c7:fb:1a:a7:7a:b5:5e:fb:b6:64:eb:11:
06:df:3d:d3:ae:93:a8:48:68:a1:11:5f:a5:3d:ca:65:4a:18:
b4:1f:18:a5:53:03:95:f8:2c:67:29:d0:4d:04:13:ed:0f:ee:
a3:6d:e1:eb:db:d3:48:65:2d:5f:35:5e:8b:68:67:97:4b:30:
19:9b:a5:22:19:89:68:9f:3e:ce:b6:93:d7:1c:dd:62:c0:b6:
f2:17:cd:24:6c:2b:48:56:9e:d8:99:6c:49:0a:8c:47:b4:bc:
79:0a:c8:66:54:64:f4:90:20:e8:ef:2c:e9:84:44:a0:d5:3c:
58:00:ab:28:9c:5d:06:57:bb:4a:0f:90:88:bc:f4:fb:e6:d4:
9b:fc:15:53:1e:80:9c:99:01:1e:29:51:f7:6e:5b:b1:eb:84:
3f:6c:e1:97:5e:7d:e0:9b:92:79:57:62:5f:bf:99:db:24:83:
b4:5c:0a:ed:db:61:0c:0a:3e:4b:50:cf:31:3a:ac:53:28:14:
4b:42:41:d7:cc:c6:c1:7c:5b:e2:05:56:02:a2:6c:66:2a:ef:
e6:d7:59:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbdenVGlDMTne5DOYb5jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz
ZWY1MjQwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
EygyMDlhNDlhNmE4MjYxZmFjZDljNzBmOWJiM2E4OTI0MmE5ZTI0NmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaCYXScrbNZH7L7pl5hLUGEg+o6C
oMIVZlpf76WO8whDrS4Ruh3bUUd1w5h27q1BaVODui2fBiMtrB5ogCTVaSbphOFj
iW9GiMgSt3qMO7Q4MnCpW/dNldouYxZcRlBW34aXKYmZN4A5Hlkyxa+aDtPUozxO
27zJvgJREhDNJ1uX0lRIbDfpuw2wYxbJCbrSxkgrI5RYi0IcYo3G1yaFBBxUl+q0
1cA2YTzqGwPGKe41QeoZc60tKJTRXAOPr9Hn/JZK+7JHrtKwFcMdGt7diEXosh2p
r9hZ7d08QKfJWBYdpEO5grbL7BVyuQJCOdCAS1wgueZgflmYq8F3iZZ7NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCaSaaoJh+s2ccPm7OokkKp4kbsMB8GA1UdIwQY
MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt
NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1
LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSUBDt3i
pzBsjeFdte68Llum2tcA/5ViD1MYcKGWEFG5db60+yc/33qQx/sap3q1Xvu2ZOsR
Bt89066TqEhooRFfpT3KZUoYtB8YpVMDlfgsZynQTQQT7Q/uo23h69vTSGUtXzVe
i2hnl0swGZulIhmJaJ8+zraT1xzdYsC28hfNJGwrSFae2JlsSQqMR7S8eQrIZlRk
9JAg6O8s6YREoNU8WACrKJxdBle7Sg+QiLz0++bUm/wVUx6AnJkBHilR925bseuE
P2zhl1594JuSeVdiX7+Z2ySDtFwK7dthDAo+S1DPMTqsUygUS0JB18zGwXxb4gVW
AqJsZirv5tdZyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:58 2025 by rpki-client