Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: sUoQijvLm/qEdYfItQEqOH91mOm4zKKxRznCpub1Y4k=
Subject key identifier: 74:FA:71:08:C3:FF:AB:00:8C:65:97:0F:05:8A:1F:AD:46:4D:E6:9A
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 0194BBCEF1257460B605D70A4C05312D1576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 0C45
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: TXYYRuKGIW3+dAwLw8lbHs5caaH68ZjiOTsqV/KV8Lo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f1:25:74:60:b6:05:d7:0a:4c:05:31:2d:15:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=74fa7108c3ffab008c65970f058a1fad464de69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:9a:63:27:63:56:2a:4a:06:f0:9b:5e:d7:
75:d0:9b:3a:eb:e7:dc:5f:a0:ae:44:19:3e:19:ce:
96:b0:63:f2:a4:4d:a4:0e:85:07:3a:a7:d6:24:5b:
02:ac:13:5a:2d:e5:e6:2d:ca:a8:0c:90:6b:ff:2f:
8c:bc:f7:e7:36:ff:f3:6f:df:ce:12:d9:f0:5e:05:
fa:f0:2e:22:90:b9:cd:32:1f:6b:45:1a:e9:13:0a:
58:79:5a:45:e6:27:01:12:74:2f:26:d1:fc:89:47:
d0:d4:49:e6:20:bc:ab:c7:91:9a:12:60:83:8f:14:
e6:72:2d:24:e2:8a:b9:06:d8:0f:44:47:de:4e:f5:
58:ad:3a:68:24:9e:76:c6:1f:24:04:2f:ca:96:62:
af:ce:5c:b8:c9:f6:93:eb:5e:04:59:74:45:0b:48:
d5:af:b6:a1:2e:94:d2:5c:3f:40:a5:69:c9:3f:a0:
4d:f5:c3:52:f1:e1:8a:be:21:7d:01:16:e6:bc:10:
74:2a:33:6f:eb:49:c2:be:36:d4:65:1f:7a:8a:37:
00:61:bc:0d:6d:1b:5e:2f:12:80:d6:6d:26:6d:af:
fb:79:fc:6d:01:f8:de:42:4a:c5:69:8e:dd:7d:c5:
8e:f6:ec:61:de:e5:a0:59:dd:eb:81:c2:db:0b:00:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FA:71:08:C3:FF:AB:00:8C:65:97:0F:05:8A:1F:AD:46:4D:E6:9A
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f1:3d:c0:42:5b:b1:80:38:9c:3c:3d:db:15:76:73:d4:86:
26:6c:0b:85:73:5c:5e:00:dd:8b:46:8b:08:42:12:fa:ee:68:
fa:d1:13:6c:87:53:c7:7a:b7:fe:33:76:d8:8c:2e:9f:1d:b0:
0a:3f:9a:51:7a:05:c3:32:70:7a:60:09:93:02:2f:b0:58:5a:
e3:39:7a:f7:45:a2:98:0c:87:d5:b4:84:92:e0:bd:ad:75:8a:
bc:5b:11:e0:58:55:5c:78:b5:26:a7:61:dd:fb:39:76:ac:6a:
6d:9a:ae:a6:04:66:1d:10:72:82:3d:7f:6e:e2:33:0c:1d:cc:
9e:bc:b3:2f:bd:a7:f1:51:1d:c8:8a:73:50:58:8f:ef:f0:1f:
c2:1d:3b:01:3b:3a:e8:e5:7e:56:4b:9c:c4:c7:43:9a:db:b4:
bd:40:64:e0:d9:2a:11:07:b9:4f:a6:c7:bc:ff:35:d5:6d:ea:
7d:49:4a:03:f2:62:65:1c:8b:ff:e6:ed:3f:0a:be:86:80:2a:
14:cd:ff:b1:bb:fa:13:5a:e5:e5:91:0c:bc:63:78:24:4e:24:
6b:86:e9:fd:fa:2d:ff:87:92:02:c5:ce:b3:c0:58:23:d3:a7:
c5:0f:e7:61:19:7b:8f:92:88:95:e5:b4:63:02:50:08:dd:f4:
12:fc:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:51 2025 by rpki-client