Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
File: COKNBckBhf5-Yq8c7iXIg7b-IjY.mft (raw, json)
Hash identifier: uScwxZdMDRNxWDgJaOOJ2iB8hM9G5OXGCtg7uzEQymA=
Subject key identifier: 45:33:1C:6D:D1:7F:D7:F6:FB:1F:F8:F4:0B:58:C6:DC:71:54:E9:4F
Authority key identifier: 08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
Certificate issuer: /CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Certificate serial: 0194BD1755AEB8DF9695A576939862FAEC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: COKNBckBhf5-Yq8c7iXIg7b-IjY.crl (hash: bquoT1Cuvlrco4VhwQXY3r4lEOvC2vAgrhXkZIXP9BI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:ae:b8:df:96:95:a5:76:93:98:62:fa:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e28d05c90185fe7e62af1cee25c883b6fe2236
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=45331c6dd17fd7f6fb1ff8f40b58c6dc7154e94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:08:21:bf:68:b2:3a:8a:9f:5e:6b:be:1b:
69:9a:21:0d:59:3e:ef:03:9b:ed:7f:6c:e0:96:84:
ad:d0:5f:2f:b7:72:4b:12:99:39:cc:d1:41:46:0e:
d7:60:54:35:da:64:b5:24:87:13:c8:74:40:b0:6c:
31:1c:2f:48:be:04:f5:c7:32:b4:b4:3b:bd:81:15:
bf:0e:56:0b:14:86:9f:57:89:89:92:35:a9:86:b7:
e3:54:54:66:fa:9d:2b:3b:0e:17:6b:2b:22:0d:43:
ea:ec:a6:1e:aa:d0:01:4e:a2:d3:3c:6a:3c:31:2d:
47:70:e6:4a:18:24:23:f9:96:ee:b8:50:0a:1d:e0:
90:f3:5d:2c:ea:40:22:3b:c2:a7:77:ca:56:e6:7d:
af:21:ac:40:74:b9:49:ee:ad:b5:6c:af:60:f9:37:
b1:96:a5:3d:5e:f1:00:23:40:25:a1:6b:17:35:8b:
88:a8:23:04:f1:cc:f1:08:4f:b1:9f:85:a0:43:5b:
d6:75:43:d4:5e:9a:70:03:de:b0:74:20:86:a8:f4:
39:04:17:23:5e:41:bf:d0:3e:59:8e:f3:d3:73:5b:
ef:bb:ac:50:ac:a5:79:f5:f6:b9:db:7d:93:79:61:
7e:fd:a2:cd:99:c6:e6:21:b1:ca:b3:b5:9c:a1:39:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:33:1C:6D:D1:7F:D7:F6:FB:1F:F8:F4:0B:58:C6:DC:71:54:E9:4F
X509v3 Authority Key Identifier:
keyid:08:E2:8D:05:C9:01:85:FE:7E:62:AF:1C:EE:25:C8:83:B6:FE:22:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COKNBckBhf5-Yq8c7iXIg7b-IjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8d2ba7-c6b7-470b-85aa-0c47a41f3a90/1/COKNBckBhf5-Yq8c7iXIg7b-IjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:df:21:82:47:67:e1:2c:22:15:74:41:ac:8a:4a:3e:eb:
5e:0e:ac:ec:6b:b5:2c:29:8d:cd:93:82:9e:45:fa:08:9b:25:
70:29:8f:ea:a4:60:2b:8a:4d:ee:75:4b:00:9c:42:0f:42:e8:
03:44:83:c6:73:52:97:d9:37:92:b0:b0:7a:73:89:37:9c:bb:
21:8e:47:b8:a9:68:72:2b:b0:fd:3a:53:ee:4f:8c:57:17:af:
f4:5b:af:0c:48:8e:03:46:a3:63:d4:28:ce:73:77:19:0d:c2:
1e:40:bd:e1:5e:89:12:fd:d9:a8:e7:db:99:19:df:ec:b5:f5:
a1:f9:6f:9c:5a:ce:14:dc:06:64:ca:73:ae:45:bf:87:0f:66:
be:bf:c6:a3:47:52:e3:bf:65:8a:99:b6:af:b2:9d:72:ef:09:
24:bf:1b:91:1d:36:16:38:9f:db:75:cb:da:7c:c0:13:57:21:
3c:b2:13:04:09:8e:52:54:1e:7b:1f:46:a8:47:03:09:51:c6:
47:58:1f:d1:7c:d1:a4:a7:c3:eb:7a:8f:cc:9a:96:b8:fa:45:
61:aa:23:1a:91:9b:f2:17:9b:dd:a0:3d:ba:23:10:f0:58:74:
bf:04:fb:7b:d7:f6:2d:95:09:9a:ec:0c:3d:dc:75:01:49:03:
da:1c:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:53 2025 by rpki-client