Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: puoCofgK3CPUjy6jLLWNTWwUb9Wz6DeGEcibcd51XEc=
Subject key identifier: BD:01:23:AB:D9:FF:C4:D4:0A:BD:43:1C:08:51:7A:C0:44:1F:85:55
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 0194BBCDBD1141DB1EFBA27A91C6D2199FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 05B8
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: 31ZZtdyqoufjQsONpBqSM4EJvIalKOI45iUTuIRJ73A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:11:41:db:1e:fb:a2:7a:91:c6:d2:19:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=bd0123abd9ffc4d40abd431c08517ac0441f8555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:ca:ac:5d:29:78:f4:bb:04:7c:ee:49:76:
39:66:10:1f:5c:51:d9:f5:6a:00:8e:d5:34:98:8c:
ec:1b:b3:77:6f:d4:7d:0b:03:9f:1b:40:ba:cb:1c:
7d:ed:08:52:41:2d:a9:fb:6e:8e:fa:44:a9:cf:7a:
ea:f0:40:df:38:54:b1:40:b3:ed:09:09:1b:5f:a0:
4c:94:d9:63:f6:b9:a7:8d:70:0e:71:36:bd:47:35:
0b:a4:ab:a5:65:e1:6d:1e:11:64:36:04:c7:56:da:
1d:c5:5c:66:c7:f0:2b:02:de:04:15:c2:6f:b4:9a:
d7:c9:50:ca:59:a8:f1:9d:9c:dd:10:93:ad:2d:9d:
d6:ce:ca:ac:68:b3:34:3a:73:b9:b1:84:9c:dc:2a:
99:5e:ca:bf:9a:e0:83:37:55:a1:05:9b:1d:7b:6a:
d7:8f:3d:40:06:98:a1:a5:6a:d2:10:4d:0f:d2:a6:
69:26:6b:01:0f:03:3e:98:48:77:a2:f7:d8:4a:9b:
a4:fc:1a:d8:d6:a1:20:f7:b5:44:1f:fc:a5:89:f1:
4b:a6:36:7b:07:9f:c5:7f:23:ef:85:4f:0e:c4:fd:
35:6c:ee:7e:33:8a:fd:55:74:8b:8c:83:77:92:a6:
31:a3:81:80:95:86:bd:ae:c9:f7:d0:83:be:56:f1:
f8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:01:23:AB:D9:FF:C4:D4:0A:BD:43:1C:08:51:7A:C0:44:1F:85:55
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e9:9b:fb:2a:ce:a1:b5:fb:46:bc:f3:53:61:d6:c3:e4:89:
64:f4:8c:ca:54:d9:ed:7b:f0:4d:ba:ae:37:8a:6f:06:b1:45:
80:82:ed:31:8c:08:f0:2e:9d:1b:a4:46:4c:1f:15:e8:b1:fe:
ee:e8:a0:e2:cd:7a:48:d2:37:80:09:22:e3:5d:7b:1e:3a:b0:
d8:c3:f3:fe:22:eb:89:0e:dc:72:4f:ac:dc:33:cd:c3:87:28:
ec:57:9e:15:20:b2:1f:9c:8f:2d:5c:b7:b0:08:1e:84:0a:f1:
e2:f9:8d:a0:2a:d9:65:ff:86:06:02:21:1c:c2:3e:a5:f5:f9:
85:5b:c1:f3:4e:97:72:5d:47:ab:16:5c:2c:de:e6:6f:e8:92:
8d:e2:3a:c1:ec:d1:13:b8:7d:43:a0:43:a2:fc:51:4a:1a:44:
7c:5f:d5:b4:06:44:dd:90:2a:ca:ba:04:dc:53:ed:26:5a:62:
e2:fc:3c:77:bb:70:c8:15:f4:c7:a8:aa:d8:b7:8d:67:52:a5:
c3:b6:5e:33:3e:07:b0:5e:d5:53:b6:7a:56:14:68:31:85:8f:
cd:00:69:01:a9:5f:bb:4e:3f:07:9a:59:90:5f:b7:33:3c:a1:
d7:80:d0:7f:bb:ea:68:8f:8c:f4:53:17:09:7d:8a:70:7f:c1:
0d:21:51:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:05 2025 by rpki-client