Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
File: CS6YqFX-4C89_wcy1-GHkvOv92c.mft (raw, json)
Hash identifier: Oyfo2gYoGk5QoPMzVqKnf8bJ5fvPiAHyUaLUCquL/6k=
Subject key identifier: 69:3D:F8:7C:D2:49:CD:53:28:65:9F:16:09:7A:F1:06:FF:89:E2:16
Authority key identifier: 09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
Certificate issuer: /CN=092e98a855fee02f3dff0732d7e18792f3aff767
Certificate serial: 0194BCAA09CF15D8041F1E17F59B5D7B121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
Manifest number: 02A9
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: CS6YqFX-4C89_wcy1-GHkvOv92c.crl (hash: IOFcjKE5iHyTrndup/uCTBZ4fmEiEGumam+7sFAR+E4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:cf:15:d8:04:1f:1e:17:f5:9b:5d:7b:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092e98a855fee02f3dff0732d7e18792f3aff767
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=693df87cd249cd5328659f16097af106ff89e216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:95:dc:9e:11:b0:65:43:57:6d:d5:ef:76:
6b:13:72:c0:a6:89:3c:c1:c6:51:51:71:05:bb:1a:
d4:c3:8b:b6:3b:31:2b:90:71:52:95:c4:b3:48:6b:
9d:45:a1:64:b6:9e:9f:e3:a6:12:f6:a7:71:2b:04:
23:0a:fe:b1:fb:62:ec:0d:a4:5e:58:b9:6c:61:d8:
30:bf:a9:10:e0:23:b8:24:72:eb:b6:f1:ee:41:8e:
32:2d:d1:0d:d0:70:47:2b:9a:a7:1e:d8:fe:87:73:
e5:24:c0:2c:fb:bb:b7:ac:8e:2b:fb:0d:f6:14:7a:
74:42:c3:ef:ff:4c:b6:6b:25:12:96:47:28:f4:4a:
54:65:db:65:9f:6c:55:41:f4:0e:54:9a:b1:59:84:
56:59:0a:a1:a5:47:ab:da:75:71:aa:21:44:c9:f5:
01:fe:e0:5a:10:83:2a:31:b6:e3:30:d4:e9:98:ce:
08:47:ab:4f:ce:61:41:6b:2b:6c:9c:c6:39:24:13:
be:d6:e3:3b:c5:3e:8f:74:69:1f:53:ae:7e:a6:54:
18:25:1f:7a:83:cf:c5:6b:fd:24:f2:ce:02:90:ae:
1f:ed:31:6b:03:9f:2d:60:70:e3:8d:27:72:e4:b2:
09:af:09:28:e1:85:3c:c2:59:9f:84:1d:33:88:39:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3D:F8:7C:D2:49:CD:53:28:65:9F:16:09:7A:F1:06:FF:89:E2:16
X509v3 Authority Key Identifier:
keyid:09:2E:98:A8:55:FE:E0:2F:3D:FF:07:32:D7:E1:87:92:F3:AF:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CS6YqFX-4C89_wcy1-GHkvOv92c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/07bab4-2ff9-4554-8234-be7771f18249/1/CS6YqFX-4C89_wcy1-GHkvOv92c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c4:6c:24:20:d8:69:eb:e1:f6:bb:df:a8:de:dd:e0:fc:12:
97:e0:81:39:f5:ad:79:96:ac:1e:5f:c4:85:7f:32:5e:a6:32:
6b:d7:89:c4:c5:81:e2:bb:c0:ea:43:6b:48:5d:57:29:3b:40:
9b:42:82:f7:a5:ce:20:8e:4a:81:00:aa:1f:8e:7c:6f:4d:91:
87:60:52:d8:aa:b4:5e:91:4d:f3:8e:13:30:c1:e5:71:41:26:
f0:8b:22:50:ab:dc:1b:9d:20:bc:90:f0:9e:6c:ea:cc:1d:8b:
b6:fd:b7:ec:56:dd:dd:f0:7a:23:f7:68:58:a9:c0:7b:a6:f1:
0b:6d:1e:d8:15:6c:81:a0:2c:66:e9:89:88:79:15:37:d0:8a:
0a:f6:ff:93:2d:df:cd:75:a6:f6:7d:8a:0a:7e:52:8d:12:1c:
f8:1b:3f:44:a0:fb:6d:30:71:14:65:cd:3c:a3:2a:37:1a:37:
8d:aa:ff:1e:ea:c0:fd:4a:a8:2a:5a:33:7c:5a:a5:29:b5:c2:
cb:bd:6b:c3:31:b3:cb:52:ff:e7:af:e3:fb:41:35:33:30:7d:
1d:17:35:c2:59:80:b9:a8:e0:c0:34:18:6a:4d:f5:67:9d:11:
d2:3b:77:42:fa:fd:79:f9:2c:42:47:e4:d1:9f:53:a2:ce:4f:
82:cb:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:24 2025 by rpki-client