Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: YaAuM4bnFUKiVIBynyJ9cGhU4b+LZ+WrKAeIaQo0484=
Subject key identifier: 8C:B7:38:1C:17:4A:F8:41:AE:4C:BB:95:92:C8:EF:A1:13:2A:05:79
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 0194BBCE9E51C24086CF4F6FA3628EFF3411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 0DD9
Signing time: Fri 31 Jan 2025 10:01:07 +0000
Manifest this update: Fri 31 Jan 2025 10:01:07 +0000
Manifest next update: Sat 01 Feb 2025 10:01:07 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: tyWM0oS9N6kfRI7YlYlQFe4i7FD0GG3lWUe5sLvxcww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9e:51:c2:40:86:cf:4f:6f:a3:62:8e:ff:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Jan 31 10:01:07 2025 GMT
Not After : Feb 1 10:01:07 2025 GMT
Subject: CN=8cb7381c174af841ae4cbb9592c8efa1132a0579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:c5:e3:21:5f:fa:09:7d:1c:a9:89:63:1d:
9c:1f:28:b4:57:18:db:79:1f:1a:12:fa:99:62:06:
3c:c9:ac:0f:b2:79:37:f6:90:cd:a0:94:38:fc:f2:
0f:65:14:be:f8:d4:36:58:b0:65:fa:75:98:84:6c:
2e:87:c7:c3:55:ef:62:26:5a:18:dc:14:98:1a:d8:
01:df:61:e7:a8:d4:c9:fc:57:db:c4:60:ac:52:fe:
17:6e:06:38:eb:ad:45:cf:13:e6:95:62:43:a4:23:
69:74:03:ad:59:26:5a:87:ea:f4:26:74:de:62:08:
fe:ec:a4:be:73:a8:83:cf:a3:6b:56:3d:fc:4c:a6:
4f:b8:27:ae:1a:cc:77:44:32:59:1d:7a:09:7e:c5:
d6:13:42:0c:54:4f:0a:18:1a:bd:08:7b:a8:25:a9:
fa:42:7a:d0:ba:df:cc:5d:94:58:5c:92:b5:a1:51:
2b:d6:b1:0f:22:1c:9e:b7:d6:b3:10:ef:b9:8b:69:
81:ac:7f:6e:d9:95:6e:fc:44:d3:22:39:e3:25:9d:
0a:66:a0:db:51:4a:de:c0:de:ed:0b:27:55:22:2b:
91:ad:76:bc:b0:53:92:a1:d2:36:3c:ca:f4:6f:7d:
67:ea:34:ce:dc:77:48:32:b7:dd:0e:78:fa:80:f6:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:38:1C:17:4A:F8:41:AE:4C:BB:95:92:C8:EF:A1:13:2A:05:79
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:5a:dd:61:16:bc:1b:ff:70:aa:dd:77:07:5c:c8:f6:d4:
04:94:de:c8:46:6e:fe:77:4a:d7:82:30:2e:11:e7:4b:ad:ab:
01:bd:27:a5:ab:c6:f2:66:f9:0e:98:1a:35:5f:b2:c0:53:4d:
e4:0c:c2:8c:f7:0a:13:54:4e:1c:8f:42:a1:d2:2d:ad:d0:b3:
be:bf:34:6f:e7:49:89:e0:70:f8:e0:b9:20:cf:9d:73:5f:c3:
f3:52:16:3a:52:f4:3e:65:51:01:5e:bb:c6:b9:e1:f3:d7:ca:
37:13:98:b8:9f:27:98:17:32:2c:1b:64:6a:d5:fc:84:88:6d:
e8:2b:07:a6:50:fb:71:05:c4:5d:9c:07:50:57:9a:b1:45:ae:
a9:f6:47:4a:e3:92:a9:f4:b2:67:65:31:06:8b:27:bc:7d:90:
07:3a:fe:02:ea:dd:be:c1:5b:e8:0f:79:92:92:0d:52:94:c7:
fa:7f:a2:d0:64:f2:13:0c:3e:3b:3d:63:e1:99:ff:67:dc:7d:
eb:5a:e7:41:5a:e6:7c:b4:a7:dc:9b:bf:2b:28:d8:01:67:fd:
57:a1:af:6f:0e:e6:84:bc:39:5b:de:c1:35:b4:3e:2b:25:be:
dc:8a:10:8e:6f:3f:e7:48:e7:0f:75:bc:63:30:9b:b1:72:41:
5f:89:d0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:55 2025 by rpki-client