Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
File: cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft (raw, json)
Hash identifier: 0tNZ4En+HPyUIolWgbpHuj8vSnugTHFRfSNmwZWXfQw=
Subject key identifier: 4C:81:15:D0:17:95:E9:2F:63:F8:45:7B:27:07:41:DD:D4:A5:81:39
Authority key identifier: 70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
Certificate issuer: /CN=709a8efafa785401012c4590da63440a3456d0ce
Certificate serial: 0194BD4EB812BFE275233FE5AE7CB585A355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
Manifest number: 01E3
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl (hash: phZB+Sl0/yr2uhz179PXIoToB3SQVcKLTFDEijidlL4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:12:bf:e2:75:23:3f:e5:ae:7c:b5:85:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709a8efafa785401012c4590da63440a3456d0ce
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=4c8115d01795e92f63f8457b270741ddd4a58139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:9e:5d:35:a2:c7:73:ec:40:96:09:f6:6e:
5a:28:a9:3c:96:cc:48:b0:46:b0:97:58:16:a1:0c:
ca:ba:7f:e3:ef:1b:3f:2f:80:c4:08:38:a9:32:86:
80:a2:ad:a9:9c:ef:f5:d6:f2:2c:d7:e2:9e:8d:5c:
8f:ee:18:62:4d:b6:b1:f2:24:ae:4c:87:62:90:73:
8f:f5:bb:7b:4b:6b:b5:c3:c7:80:43:65:82:fe:85:
91:f5:3d:e0:b5:d8:87:56:9b:6f:d3:d2:18:bd:07:
b4:1d:14:02:32:98:ad:e3:58:db:9c:09:e2:1c:34:
93:34:c3:f5:e4:04:16:4d:fc:f7:cb:ba:55:e1:f5:
fa:07:c7:6d:28:35:9a:c7:26:5f:f9:fd:b6:fb:de:
58:4c:3d:25:7e:b3:7e:21:bf:f0:b2:65:5f:3c:bf:
59:f5:8a:2a:4e:64:4f:e2:50:ad:1b:3e:19:54:0b:
d1:cc:17:2f:64:20:08:6a:78:8a:0b:5c:67:0c:5c:
28:59:3a:c5:07:bc:a8:8a:b5:89:c6:19:14:6f:14:
88:50:39:17:c4:75:97:f7:42:3c:f6:82:3b:9b:c7:
1a:69:0f:52:f7:fc:36:8e:63:8c:09:60:38:c2:ba:
00:5a:b0:9c:d4:f2:8b:d4:19:86:85:af:64:34:32:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:15:D0:17:95:E9:2F:63:F8:45:7B:27:07:41:DD:D4:A5:81:39
X509v3 Authority Key Identifier:
keyid:70:9A:8E:FA:FA:78:54:01:01:2C:45:90:DA:63:44:0A:34:56:D0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJqO-vp4VAEBLEWQ2mNECjRW0M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/fb5a4f-198b-4711-9a73-c02945b483ee/1/cJqO-vp4VAEBLEWQ2mNECjRW0M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:85:5f:7d:03:16:b7:75:b6:6a:7e:6f:ff:98:de:88:67:2d:
ac:9a:1d:cf:71:4f:61:88:61:c5:84:ae:2f:87:57:8e:a8:ae:
7c:79:50:b0:58:56:e5:a2:70:a6:a4:37:88:01:8c:fe:4b:0f:
bf:52:d7:ce:61:bf:99:ce:08:33:be:59:8d:01:07:4e:18:5f:
e8:fa:df:77:e8:fd:53:89:3e:a9:d8:05:b0:7b:e6:1f:f8:7b:
e5:d0:38:78:ab:cb:7c:66:39:95:b6:98:3f:7f:8a:98:75:4e:
b3:4c:0d:e2:cd:6c:cd:d2:2e:6f:13:13:02:69:94:b2:73:c4:
39:a1:36:7b:9d:bb:d2:32:e3:6f:cb:26:dc:e2:44:0a:96:52:
80:11:4a:2e:b6:57:31:19:35:f0:78:b2:e1:d8:9a:47:0a:b8:
95:40:29:8b:d1:8f:07:4d:ad:2b:6a:b7:a8:b8:99:c9:65:78:
45:44:7c:7f:04:6e:ac:22:77:c3:0c:36:b1:ac:94:9f:62:83:
98:3f:5b:e5:70:81:a0:d1:2e:fb:1c:4d:8a:67:1c:8b:5f:04:
25:ac:35:84:b5:06:e0:9b:94:39:53:b5:73:38:e3:01:ba:1b:
63:fc:ed:e8:ec:b8:6b:5f:7f:81:51:a6:e3:2a:31:fd:d6:8e:
6b:0c:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:41 2025 by rpki-client