Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier: tbaPIX3GuZ941p8eb7l7CltUl0axuzVg99au0vMJKUU=
Subject key identifier: 07:B9:6B:E1:75:45:72:CC:E0:9D:AD:6F:6F:DB:C3:29:6E:D1:E6:A9
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer: /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial: 0194BD85695772AF07BCBFA1655DBDFFAA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number: 02FF
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: BroaQcPMRS7PmoH78xw4lS5rJi7nWmuVMO8SzQ9uYAE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:69:57:72:af:07:bc:bf:a1:65:5d:bd:ff:aa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=07b96be1754572cce09dad6f6fdbc3296ed1e6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:d7:e1:3c:41:a7:5e:cd:5d:2c:1e:a4:c2:
67:86:46:27:38:5c:fb:f9:4f:5d:b5:ab:12:43:c7:
e5:06:6a:de:8a:ad:cd:4f:5d:7e:3b:42:e8:24:44:
61:a1:a4:3f:58:86:66:f9:15:30:2e:2c:12:37:b5:
29:8c:8b:56:c0:18:a7:a6:1f:34:49:e0:f2:22:a1:
7b:4f:59:96:66:39:28:d9:91:26:c3:e0:f6:df:b3:
e5:44:c2:76:1d:3f:67:b3:a7:77:6d:8e:17:c3:6e:
09:54:71:0a:f5:6e:76:fe:97:ec:62:6f:53:70:cd:
b2:cd:71:94:0c:02:f1:6f:35:e2:27:38:35:8d:52:
af:41:35:53:83:7a:ec:e6:e8:da:94:e6:06:ac:9e:
24:2c:7c:f4:40:81:ea:c8:67:a8:d3:da:48:a2:a1:
1d:83:1f:54:b2:14:51:ad:ae:a2:26:11:ec:44:36:
e2:dd:f8:dd:61:27:65:5f:7c:39:a4:96:d9:97:4d:
7e:c4:e5:89:fb:eb:e3:a0:93:cf:57:0f:ac:96:d5:
46:e0:39:68:fa:bd:d7:f1:ac:5d:86:d1:00:40:4a:
eb:e6:11:43:57:bb:0e:f5:f9:11:2f:c3:ea:09:18:
e2:10:8e:a8:c8:3d:0c:60:cc:c0:39:9a:55:d5:ce:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B9:6B:E1:75:45:72:CC:E0:9D:AD:6F:6F:DB:C3:29:6E:D1:E6:A9
X509v3 Authority Key Identifier:
keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:17:cc:94:f2:69:47:d8:f6:96:d8:45:95:be:b0:e3:05:23:
46:b8:f5:81:20:d5:81:d4:13:9c:ee:04:ee:a3:ba:e9:b5:0e:
77:b7:57:ef:19:1f:4f:16:a5:cb:73:ff:b9:7b:0f:2c:e5:54:
88:d0:c8:e2:ae:3b:18:8a:e8:ce:85:a9:c0:b6:67:48:26:4b:
52:62:35:3a:43:09:ac:b9:bc:02:04:83:c0:fc:90:1c:53:38:
d5:1b:1d:5a:89:78:59:b9:05:86:08:1e:83:c4:d5:b6:6c:1d:
6b:eb:25:ef:7f:fe:b1:d4:26:e5:62:0f:7d:78:10:33:82:19:
76:43:38:c3:41:0d:55:50:8e:b3:d1:fd:21:d9:43:9f:2c:a4:
28:e1:5e:36:36:11:0b:15:9c:e4:cc:d5:47:fc:16:87:2c:94:
77:46:64:d8:75:02:c4:37:4d:ad:ca:d6:e7:9a:a9:69:a9:f7:
85:77:4a:b6:eb:44:b3:98:32:11:37:ab:99:e3:49:4d:16:fa:
4b:c4:ba:32:9c:de:73:b5:da:7d:0d:2b:8d:b5:d3:3f:78:6f:
dc:3d:9e:cf:d4:6e:6c:42:a2:79:6c:c6:1b:e0:82:b9:95:0c:
6b:0c:66:05:e9:4c:5f:f6:03:2e:06:10:79:74:cc:db:89:aa:
97:9b:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:25 2025 by rpki-client