Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: skXVZwDM79h/BvpBG5VgL1wEICbPFf6DRTIxQN/haJs=
Subject key identifier: 1D:D1:44:D3:2D:A4:30:DC:0E:4C:92:C6:93:77:79:04:EA:2E:2B:07
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0194BBCEA50D59C7C8D345E47048B2F7A289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0719
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: 0FTK1WvJaqrLVbNwBsbFR/WsG/Iwy2sgrJuJTSzO9jg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a5:0d:59:c7:c8:d3:45:e4:70:48:b2:f7:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=1dd144d32da430dc0e4c92c693777904ea2e2b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:36:ae:56:89:2d:88:87:62:08:9f:43:77:
f9:ef:3c:09:0d:a4:cb:27:0e:83:4b:05:89:94:fd:
ca:ce:1a:3b:43:d8:c3:57:26:0a:be:df:6b:a5:b9:
87:9a:ae:10:91:41:b6:fd:79:1b:96:29:18:73:fc:
44:44:17:d6:23:a5:ff:ee:b1:07:40:e6:21:78:d8:
d4:de:ae:ee:f7:af:d2:d1:2b:8c:a9:44:7d:0b:00:
82:6e:0c:1e:b5:cc:77:59:bb:66:60:e5:68:67:b6:
f0:b4:4b:b4:91:a3:36:47:84:07:4c:c0:24:c6:dc:
96:63:6e:e7:c5:32:d1:00:77:7a:0f:e4:9c:bb:26:
0b:45:91:0d:6a:5a:91:ed:51:f1:e2:54:e1:03:40:
3b:bc:ab:d5:4a:f2:16:ee:ea:40:5d:5b:a5:80:c8:
c3:5b:70:e7:18:a0:69:02:8a:08:ca:55:d1:63:e3:
fb:4e:3c:d3:00:3e:fc:b9:09:77:f5:31:d4:14:c7:
88:2a:00:e3:6f:dc:21:f9:b3:28:1c:2e:e0:51:8b:
70:28:c5:c1:3f:70:e0:5d:8f:b9:97:16:fb:34:ea:
9c:0d:77:55:e5:bb:85:9b:da:10:a2:ee:a2:f5:cb:
09:17:80:c4:ee:b8:ea:4e:a6:95:de:3f:3e:4f:42:
ad:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:44:D3:2D:A4:30:DC:0E:4C:92:C6:93:77:79:04:EA:2E:2B:07
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f5:fa:27:ca:a4:9e:57:80:ad:51:6f:b9:c7:bb:32:4d:13:
9e:fb:16:9f:ac:68:57:5c:06:ef:af:3f:79:5e:74:17:29:87:
4e:bb:87:ec:fb:87:01:38:a4:27:f3:b0:d4:a2:e3:07:08:5c:
9f:0c:93:cf:9e:84:8d:f7:aa:6d:eb:96:72:12:d2:5f:74:ae:
ce:88:62:d5:a5:d3:b0:53:88:44:77:a5:a8:aa:92:bf:a3:66:
55:b4:79:f0:67:e0:d5:fb:08:8c:90:88:6b:ce:4f:12:68:eb:
6e:83:c0:07:fb:07:7b:e6:78:50:45:48:cb:1f:6c:da:c6:0f:
01:d8:3d:ac:1e:40:ab:07:35:f6:de:d0:6b:e7:37:e4:be:91:
c9:93:d6:6b:db:98:22:49:68:6a:d6:81:cf:49:ad:bd:b8:6b:
88:1b:be:bf:89:6a:8a:85:6f:4e:a7:a1:bc:fa:bb:d6:ac:14:
50:7a:2a:47:40:4a:09:da:f5:99:a0:c6:9f:c6:da:39:a4:33:
11:0e:ed:67:bb:14:72:6a:b6:be:3c:c7:7f:56:b5:f9:a1:c2:
96:02:68:68:ff:60:37:10:15:1f:12:94:f2:69:38:7d:30:66:
8c:8a:ae:2b:66:39:8c:82:95:43:89:a4:0a:f1:a7:d3:7a:7f:
c0:24:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:46 2025 by rpki-client