Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
File: Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft (raw, json)
Hash identifier: 3rZawpnvxPa+d0fl2yAvd7mWJbb8y132wjT64ZqpJWg=
Subject key identifier: F6:0B:02:A6:F1:A2:D1:F4:56:72:3E:3F:0D:D8:96:37:9A:07:CF:90
Authority key identifier: 0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
Certificate issuer: /CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Certificate serial: 0194BC730F483F63F9F0A46AAA52BD746375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
Manifest number: 057D
Signing time: Fri 31 Jan 2025 13:00:44 +0000
Manifest this update: Fri 31 Jan 2025 13:00:44 +0000
Manifest next update: Sat 01 Feb 2025 13:00:44 +0000
Files and hashes: 1: Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl (hash: HFYJ/aPONiDTaZ3WR3Mpg6r95W8n956gmdoivxnSEnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0f:48:3f:63:f9:f0:a4:6a:aa:52:bd:74:63:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Validity
Not Before: Jan 31 13:00:44 2025 GMT
Not After : Feb 1 13:00:44 2025 GMT
Subject: CN=f60b02a6f1a2d1f456723e3f0dd896379a07cf90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:a3:20:8d:46:fc:58:76:c3:4e:ad:04:71:
62:63:8a:1e:04:54:07:9b:f1:21:85:9e:97:d1:f2:
3e:0b:d7:ee:65:78:54:84:5e:b7:0b:b0:d2:63:02:
e9:fc:ce:75:a9:44:a6:b6:ce:a6:8f:cd:3c:df:75:
08:43:6a:82:fa:f7:7c:79:5d:4d:ca:7b:82:25:49:
d8:04:51:18:53:b4:5f:9e:6a:7e:24:dc:13:ef:e2:
25:ff:ee:de:c9:c3:02:6a:39:30:a4:89:c8:4b:f2:
9a:33:f6:6b:94:8b:d1:1e:0f:b4:25:fa:57:4f:e4:
cb:b1:59:51:4a:25:35:1f:b1:a7:47:ad:7b:a0:80:
48:d2:bf:22:a0:80:1e:92:8d:09:91:4f:fb:d9:19:
fa:f4:c8:01:ca:54:85:5b:4f:97:f2:12:ff:b9:cc:
18:e8:4a:de:87:fa:64:f9:2b:04:6a:ea:da:b9:60:
5d:ec:d4:2a:8d:17:45:48:03:bc:01:03:1c:66:11:
9f:9a:d2:cf:70:1b:ad:17:91:93:2d:46:eb:83:b2:
d4:90:e8:28:dc:b0:b1:17:1d:f8:fd:5c:b8:ba:49:
55:db:28:e0:72:0c:41:08:0b:ca:d9:66:63:40:f6:
c8:07:28:3d:03:62:c7:f7:15:17:1a:3f:25:3e:00:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0B:02:A6:F1:A2:D1:F4:56:72:3E:3F:0D:D8:96:37:9A:07:CF:90
X509v3 Authority Key Identifier:
keyid:0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:29:14:ef:2f:e5:da:7f:6f:98:a5:03:93:71:d0:38:a1:
b6:82:bb:fe:11:fe:dc:c5:50:e7:e5:c7:17:81:cc:c4:e9:3b:
96:3c:67:c0:ba:22:cb:36:da:25:7b:9e:59:52:59:35:c0:3b:
7a:e2:22:a7:5b:6a:d4:59:38:93:8c:f9:d8:ad:cb:4e:77:18:
11:68:c8:2c:a9:75:ae:d3:0d:4e:70:f0:f8:04:3a:94:81:2a:
4e:e7:63:6f:91:3c:09:03:66:ad:7d:83:ea:9c:ab:ec:53:35:
72:fe:77:52:59:9f:ed:b8:f8:74:7c:8b:8d:c0:6c:5d:e1:e0:
29:39:e5:47:69:0f:98:18:99:06:dc:8d:06:a3:a8:62:b7:23:
29:90:bf:88:a4:b4:a7:c8:df:95:56:74:46:84:20:32:c8:af:
e8:03:c5:87:24:f9:22:97:6e:0b:59:af:88:62:ad:39:61:60:
6a:70:e5:b5:3e:25:0d:3d:db:cb:e7:b1:74:68:e2:64:18:e3:
ba:73:80:e7:09:52:9a:da:e8:c7:62:a3:85:a6:f6:a2:71:7a:
c5:04:d0:af:70:9c:ae:5a:25:db:bb:b0:80:63:07:5b:73:08:
de:5d:5e:37:d9:3a:e3:a9:1c:3f:26:88:68:2e:cf:ba:b9:c9:
b2:5f:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:16 2025 by rpki-client