Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
File: C_TOA4nPk-LVfggvG-xh2oJy__E.mft (raw, json)
Hash identifier: pFFU7aPF7CEVo0nWsgce6tNRcXvP7beAurk3V6jR54o=
Subject key identifier: C7:5F:8E:7F:04:2F:A3:BC:4A:97:6D:43:43:93:C8:94:44:38:8A:47
Authority key identifier: 0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
Certificate issuer: /CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Certificate serial: 0194BCAA22B14C17428BF9E3936F4F783791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
Manifest number: 0CF8
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: C_TOA4nPk-LVfggvG-xh2oJy__E.crl (hash: C0FhZj/ikgr0JGaquj+s/tQwz+Wf65KDjP80+T1A9es=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:b1:4c:17:42:8b:f9:e3:93:6f:4f:78:37:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf4ce0389cf93e2d57e082f1bec61da8272fff1
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=c75f8e7f042fa3bc4a976d434393c89444388a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:2a:a4:93:31:8b:18:d7:9b:97:71:33:0d:
b7:33:a5:58:fa:29:39:2d:a4:f7:58:3d:16:d3:d7:
cd:d0:50:2b:31:75:4d:fb:ca:68:9c:6d:7a:b7:51:
5e:ee:b2:f6:f3:33:c7:d4:a1:a2:e8:19:13:2f:f4:
48:c9:e4:e0:94:32:b7:47:6c:71:79:48:91:fa:00:
91:85:c0:c0:83:d4:67:b6:c3:a2:57:25:83:dc:bd:
92:ef:55:d0:d9:5a:1a:2a:7a:96:c5:d6:e9:ca:a9:
09:d6:7b:35:2b:bd:8c:1b:17:2b:03:cb:9f:ae:da:
ce:e7:8b:08:94:20:b3:53:fa:ab:c2:c0:aa:7a:f2:
4c:41:4d:09:7b:5c:22:fc:fb:87:14:56:09:92:d5:
87:a4:9a:28:77:ca:f7:1a:68:29:dc:de:f0:17:a9:
e6:79:93:d7:36:24:3b:64:31:62:20:fe:29:40:e5:
18:3f:9a:aa:0c:07:e2:1d:93:c3:e5:f9:ef:83:68:
3a:6b:e8:ab:9c:b4:98:2e:5a:47:0e:df:5f:77:e7:
8f:5f:f1:ff:36:e1:24:02:a0:c6:44:10:a9:81:f3:
36:0d:fa:55:bb:c7:92:10:eb:0b:cb:4a:28:d2:09:
fd:68:83:c9:be:47:c9:11:03:d9:dc:cb:ac:be:0f:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:8E:7F:04:2F:A3:BC:4A:97:6D:43:43:93:C8:94:44:38:8A:47
X509v3 Authority Key Identifier:
keyid:0B:F4:CE:03:89:CF:93:E2:D5:7E:08:2F:1B:EC:61:DA:82:72:FF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_TOA4nPk-LVfggvG-xh2oJy__E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3ac783-9fab-4623-894c-5628faefe11d/1/C_TOA4nPk-LVfggvG-xh2oJy__E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b2:e8:b2:14:a3:60:e3:96:f6:0e:ad:cc:2e:ec:a9:c0:96:
9f:66:03:de:e7:1d:4c:f3:db:42:0c:b1:1a:54:93:a1:72:3c:
59:a6:49:a8:94:74:16:56:bd:6a:01:aa:3a:ea:33:2d:80:3a:
57:1d:2e:56:7a:1d:28:be:55:73:f1:fd:fb:c1:a0:22:64:d3:
0f:de:ff:c7:16:3f:72:fb:8f:5f:b2:32:f3:ae:44:5d:3a:55:
bc:76:a1:de:73:2e:9a:7c:9d:d7:ba:aa:7a:f4:89:94:7c:ec:
f8:67:3c:7f:9d:81:27:55:05:14:c9:ca:8b:64:36:c1:56:39:
96:42:ea:71:e4:62:e5:e9:0b:7e:80:5c:09:a6:e1:b6:97:27:
b0:72:ef:fe:82:eb:1b:5e:ac:61:55:86:c9:4e:70:aa:ea:32:
34:36:63:ca:17:0a:bd:90:f3:c4:63:62:3a:ce:dd:18:a8:33:
2b:8e:db:af:e8:3d:2e:34:de:67:a9:6a:ca:18:c5:31:6c:9a:
1e:4c:a2:3b:af:c9:19:37:4f:4a:7b:77:64:37:2a:74:40:64:
6d:fd:47:33:27:66:23:0d:9e:e0:12:19:17:7a:fe:ca:1b:24:
ae:9b:7d:32:44:d7:1d:8b:6a:5b:c5:81:61:a0:0e:38:6e:ae:
a7:ca:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:19 2025 by rpki-client