Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: U/hYtxneoDf349kvrbTfHJSHsv/HNsV5LP/lVOMY5eE=
Subject key identifier: 6D:94:F1:C8:09:62:84:CE:98:C5:42:A7:34:9F:4F:6C:4E:56:24:21
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 0194BCE0718677CF5A53E4EAB47E4A2AE9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: F7
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: ZX+51tmXhybWG0DPG6tVaZIm1NcNi1j2dgp7MRHDphY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:86:77:cf:5a:53:e4:ea:b4:7e:4a:2a:e9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=6d94f1c8096284ce98c542a7349f4f6c4e562421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:bf:02:de:49:ec:ec:1c:70:22:3d:07:82:
22:f2:a2:5a:d4:61:fe:32:9f:c6:7e:39:34:51:93:
84:e6:b4:0b:a7:0b:02:7c:90:7d:6b:01:c1:a3:b3:
78:e2:f4:e6:a7:fd:64:e8:d1:f6:bc:3c:84:3c:12:
a2:84:4a:15:f7:41:e9:0a:4c:40:1a:4a:20:93:18:
05:e0:84:38:e2:8d:a6:41:fe:98:e9:1c:7e:5c:6e:
95:72:44:b7:ec:6d:ff:4e:21:37:8b:1e:e7:5c:9e:
e7:5b:70:45:08:ec:64:ea:d1:5a:89:db:50:df:57:
5c:e8:c9:c7:70:67:49:5b:72:27:01:0f:27:8d:82:
ea:b5:d6:b2:9b:15:71:15:30:0e:93:4b:95:8a:6d:
3c:bf:fa:69:e4:19:45:91:ec:03:37:a3:f1:0f:f1:
f0:f8:0c:97:da:4c:4c:df:45:b4:fd:5c:d6:15:8b:
c4:e1:90:05:cf:9a:98:19:86:94:a5:14:db:b6:13:
e8:08:be:00:4a:50:27:2b:53:9a:8e:0e:2b:24:f4:
e9:51:a2:5a:85:e8:7d:d1:bc:af:0d:83:1b:fb:e7:
1d:50:87:2f:39:08:0a:7d:33:b0:d5:c6:55:24:9f:
e6:9f:db:d7:d3:76:f4:ef:ff:a5:3b:7c:33:28:4e:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:F1:C8:09:62:84:CE:98:C5:42:A7:34:9F:4F:6C:4E:56:24:21
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:bf:8f:85:9d:b7:90:96:71:2b:1c:a3:3d:96:81:8f:c1:
02:44:bf:00:00:c2:e1:19:85:7a:98:96:e6:be:d9:76:d7:ce:
22:9e:d4:9d:5e:bb:40:2a:1d:95:97:ba:2b:00:e9:04:49:f3:
5d:cf:72:cf:8b:76:08:6a:b1:96:d8:47:60:b2:aa:ca:78:25:
01:19:15:50:1a:c5:b0:58:12:1d:33:26:db:3f:c0:08:f1:3e:
7d:89:11:8a:aa:be:7c:b8:03:28:e4:51:76:bc:88:f0:7a:39:
86:c2:4b:ef:4a:89:a9:71:d7:21:2f:29:ae:2b:69:9e:dc:02:
d6:65:16:b2:38:e2:9c:12:ba:68:64:9d:a1:f9:54:65:42:c8:
46:48:30:05:45:04:d9:87:d8:ab:9b:97:8a:d6:d3:52:57:a7:
9d:bb:f4:2a:54:89:72:0d:b4:d1:74:f0:7f:20:32:a1:a4:f9:
37:2b:5a:75:48:7f:c2:b4:f7:db:03:ae:03:39:77:16:12:8a:
a7:a9:b8:31:d4:f5:a9:45:98:29:95:d6:b0:12:7b:f9:12:d9:
28:a1:31:0d:04:76:11:55:35:7e:f3:ec:dd:38:64:5f:d8:39:
9c:be:dc:ae:67:c2:f8:f4:1e:68:e7:f2:44:e5:d9:93:f1:3a:
7d:cb:7f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:17 2025 by rpki-client