Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
File: chgSXs-7IR7fwt4EcvlkqobL6Z4.mft (raw, json)
Hash identifier: A8gAeRxbLQBeT4pmUvcqj2dSMrqxilS4aECVkQmTOFA=
Subject key identifier: C3:2B:4C:26:10:9A:86:EA:88:E3:A4:4D:18:F0:02:9C:87:54:3C:CC
Authority key identifier: 72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
Certificate issuer: /CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Certificate serial: 0194BBCEF2B3D576AED075A30AC1AAFBF10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
Manifest number: 0B0F
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: chgSXs-7IR7fwt4EcvlkqobL6Z4.crl (hash: PzODerhWJtAUoH012xG+MikgUK7SP536f6/MCgFEwa0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:b3:d5:76:ae:d0:75:a3:0a:c1:aa:fb:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7218125ecfbb211edfc2de0472f964aa86cbe99e
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=c32b4c26109a86ea88e3a44d18f0029c87543ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:1a:0d:8a:cd:8c:23:0c:1a:b7:fb:3f:51:
48:22:48:90:fc:bb:11:a8:7c:c4:44:fa:6b:55:32:
f4:48:15:59:df:2b:97:94:2a:6f:56:8b:47:52:e6:
99:e4:8f:c3:bc:fe:a4:a8:41:6f:86:92:16:81:51:
dd:56:f5:64:21:3e:97:c0:e2:9e:a3:29:d5:ec:78:
78:52:1f:51:dc:6d:a7:f8:be:c6:4a:61:ad:e9:09:
f6:88:be:43:86:fb:5c:cd:8e:c9:a2:63:8c:47:c8:
75:8b:95:b7:60:dc:99:be:e6:bd:ae:6d:f1:b1:b0:
34:f9:eb:2b:a7:f1:fb:99:4d:35:ff:93:3a:8e:6c:
1f:a7:38:15:9d:e4:c3:f3:77:31:d0:45:83:1d:87:
d7:dd:22:e4:b9:c8:2b:0b:2b:20:3d:7a:4d:78:b1:
f0:68:68:1e:30:51:9b:aa:44:f8:87:a6:c0:21:8d:
61:e5:85:01:74:22:e2:96:88:37:52:ef:90:73:a7:
8d:26:f6:5c:3a:74:aa:eb:ec:43:17:a2:ff:ae:f5:
36:0d:7a:e9:2e:54:00:9e:76:7d:20:7d:10:47:9f:
3b:29:d2:38:29:74:25:33:c2:96:44:54:2e:8f:80:
99:2e:8c:43:08:a5:9c:b4:06:9f:71:23:3f:25:ed:
df:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:4C:26:10:9A:86:EA:88:E3:A4:4D:18:F0:02:9C:87:54:3C:CC
X509v3 Authority Key Identifier:
keyid:72:18:12:5E:CF:BB:21:1E:DF:C2:DE:04:72:F9:64:AA:86:CB:E9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/chgSXs-7IR7fwt4EcvlkqobL6Z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/37e5cb-d9ee-45d3-95ab-0db0fd74db32/1/chgSXs-7IR7fwt4EcvlkqobL6Z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:55:a0:1c:45:9a:54:67:71:d8:87:e1:c3:b7:e5:4a:f1:a1:
c0:a1:01:e0:95:a4:f8:be:c0:e8:07:18:0d:18:94:50:c7:54:
c1:34:9d:bc:53:74:0c:f0:1c:fa:50:37:83:93:6f:01:e0:64:
9d:12:90:ba:cf:fe:00:af:dd:4d:70:54:3d:03:ea:cf:ba:53:
6d:b5:a1:09:4e:71:e7:4f:87:80:af:77:21:be:89:4b:12:ae:
a8:a2:e1:ab:99:b1:1c:6e:d3:9f:90:42:6c:68:39:3e:f8:3a:
a7:bc:67:22:55:f8:bc:0c:03:f8:aa:25:84:9d:4f:be:82:5c:
05:00:9a:83:ad:e3:cb:36:1c:8a:95:ad:99:03:3c:1c:ab:d5:
c1:2d:80:a7:86:a2:56:fb:f1:b1:63:2f:27:d6:bc:b4:bc:21:
cc:3e:2a:24:53:5c:91:8b:cb:0f:95:eb:ad:da:c3:b9:19:3b:
b1:03:4e:38:ce:c9:9c:eb:a6:6d:98:e4:e7:00:21:bb:81:c0:
0e:be:32:3b:2f:75:6c:ea:66:c7:1b:93:b3:13:c1:a9:61:91:
46:d4:7c:ac:83:c9:6f:9a:26:c4:f0:bc:65:cb:5a:e4:ed:ea:
0d:3d:d1:19:02:00:fe:32:02:5f:ba:dc:22:c8:91:4c:02:c7:
eb:6a:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:26 2025 by rpki-client