Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
File: CoRnuQcocepoG1eg2AHdo4xr_3U.mft (raw, json)
Hash identifier: 4CJCVELy5jPtsXkC4YQgCdDhDykx7908m3wfLXhS/tU=
Subject key identifier: 7F:CB:28:E9:27:C8:F5:83:8A:8E:4A:54:38:4E:1A:2D:1C:7E:17:4E
Authority key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Certificate issuer: /CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Certificate serial: 0194BBCDEAC5D55834EB1A2FC462EC009465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
Manifest number: 0459
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: CoRnuQcocepoG1eg2AHdo4xr_3U.crl (hash: wipM1CQVzWyVXRud0qbldjkdD72bnoUkVQeKK3k0//M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ea:c5:d5:58:34:eb:1a:2f:c4:62:ec:00:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=7fcb28e927c8f5838a8e4a54384e1a2d1c7e174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:9d:64:61:3d:f6:c0:92:e8:d2:bf:b0:d9:
c7:38:b2:37:69:32:85:cc:0b:9f:4c:ef:e8:29:7b:
63:b1:cb:db:6e:b5:a8:88:4a:77:2c:7a:45:54:d9:
87:e1:0d:93:4f:aa:16:ae:d1:94:57:cc:d0:b9:fe:
0b:89:d8:63:57:60:10:0f:98:03:c7:08:ff:2c:05:
83:85:8b:e0:b1:5d:4f:46:d1:1a:05:b9:ac:b6:0e:
66:0e:a2:e5:30:f2:4d:54:85:c1:19:9d:fe:94:ef:
75:56:17:8c:88:f4:cb:77:72:56:92:79:f3:7a:df:
8c:3d:56:7e:c0:97:ce:ad:a2:32:5a:da:8a:21:37:
e7:9d:72:b0:f4:fa:fa:1f:cd:10:87:a4:ee:e8:12:
cb:69:83:64:4c:be:0f:8b:2d:01:a3:27:13:85:f8:
4b:29:fa:df:bd:39:04:48:fb:7d:0e:81:ab:17:09:
f3:29:28:e9:70:a0:72:c0:86:e9:62:a7:cc:56:ab:
bc:4b:dc:ce:cf:d5:ca:0e:ce:e8:88:d1:b8:a3:2c:
3f:7c:0c:2f:3e:c1:c2:f4:1a:e9:99:2d:b7:5f:80:
72:95:d5:4c:61:c3:f3:23:a4:94:be:6e:24:13:ed:
fd:f7:53:da:32:55:4d:9a:53:63:13:29:bf:79:58:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CB:28:E9:27:C8:F5:83:8A:8E:4A:54:38:4E:1A:2D:1C:7E:17:4E
X509v3 Authority Key Identifier:
keyid:0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5e:12:05:70:51:55:da:36:9c:ae:5d:ef:04:99:9f:b7:67:
37:15:78:9f:e6:0a:ce:f8:39:63:95:41:4f:0c:13:1f:c4:aa:
07:d5:12:89:7c:4d:6e:7f:66:b6:c2:4f:38:d2:90:70:34:f2:
48:3e:e3:1f:b7:f8:a8:66:ff:29:bb:31:e5:f4:f8:6d:78:10:
84:0f:1a:1b:aa:fb:84:91:ae:4f:ac:9d:d8:64:95:70:74:eb:
e8:b1:f3:f3:d0:49:7f:d6:4e:9d:9d:ac:d5:c1:a6:f5:1e:dd:
74:03:da:a6:26:ac:93:e4:0e:b3:bd:08:dc:51:f6:ac:36:76:
1d:0c:65:e3:5e:9f:61:19:90:04:89:e6:18:26:56:64:15:d7:
86:c1:d6:cc:1d:ad:2d:67:19:6c:a8:6e:81:b3:59:c0:a4:7b:
bc:2c:95:82:52:4e:a7:7e:39:70:84:3a:a3:8d:d5:c1:4f:f0:
0d:13:2b:d6:43:e3:dc:1c:d6:b0:a2:e2:ee:42:7c:cf:38:10:
53:ba:52:b1:de:54:b7:f4:35:90:c0:d8:5a:8d:fb:be:f6:b1:
31:f0:15:2a:47:d2:59:05:3c:d6:b9:b9:83:51:2e:5b:1d:0a:
a5:07:0c:4e:e6:2b:b5:11:7a:46:e4:d3:56:2e:b3:76:44:39:
bb:d6:81:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:08 2025 by rpki-client