Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: 9sGQEjfHdMZtx9ZFV4sGz6osGjqVOVrSqD8fn8U9zwo=
Subject key identifier: C3:56:7E:15:D5:63:1E:F0:34:58:0F:19:10:35:D2:8A:67:8F:8A:69
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 0194BBCE1DF66CF7CC8E050F13922C28F9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 07BB
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: BKunj3IsyxundanpRmCD4rq16Y9ett2KFoNHU/2QOnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:f6:6c:f7:cc:8e:05:0f:13:92:2c:28:f9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=c3567e15d5631ef034580f191035d28a678f8a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:12:51:5b:13:13:c8:7d:7d:21:f9:22:7c:82:
86:61:fb:a8:35:68:bc:de:19:5c:b5:6e:32:82:d8:
3d:fa:24:35:f8:0f:5f:74:65:8b:93:a9:23:df:e9:
cf:d6:5d:03:f9:ef:7b:31:e1:09:22:9e:6e:cc:3a:
91:10:97:cb:62:35:45:cd:ff:de:3a:8e:51:0a:9f:
99:2e:b2:a5:48:12:e9:7a:04:24:b9:38:7b:75:6b:
12:bf:24:b2:90:48:57:a6:14:9d:3a:59:76:22:bb:
aa:4d:12:7b:c1:3c:d8:a9:ef:9b:8b:02:05:2e:92:
31:bd:6e:3e:d2:f1:2c:76:64:67:e7:73:09:94:11:
5a:19:5c:5c:eb:cd:16:74:ba:bd:1f:72:2a:55:c8:
1c:e7:c1:61:81:41:c0:ea:1d:11:04:bd:7c:ee:55:
9e:6f:e1:e9:47:15:1e:8b:2e:39:a5:03:f6:76:27:
9b:42:d9:4e:35:51:46:08:ff:92:72:87:ab:d9:33:
fb:7a:c3:87:32:60:ef:2d:10:bb:50:62:c3:fb:8a:
13:26:7d:42:59:62:88:04:26:11:20:3f:2a:99:bb:
31:30:d2:c6:dd:c8:95:4a:33:2b:b3:4b:ea:2a:8d:
cc:57:bb:08:88:8f:e3:38:83:35:7f:7c:bd:31:4d:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:7E:15:D5:63:1E:F0:34:58:0F:19:10:35:D2:8A:67:8F:8A:69
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a7:c2:05:43:8d:01:89:27:cc:74:f3:54:48:84:3c:14:94:
60:ba:3e:d9:9d:4c:6f:f5:9b:09:77:93:49:ec:05:23:f4:fa:
79:39:af:e6:d5:cf:43:db:73:c9:00:01:a7:e2:94:c6:8f:22:
f8:0d:7b:42:52:21:f3:c6:81:be:70:f5:82:ea:90:d8:17:6e:
59:4a:f2:c4:b6:bc:ac:3a:ec:19:a4:38:03:a6:3a:37:9c:2f:
7f:1a:7d:5c:0c:2c:7d:38:05:3b:a6:ff:3b:d0:e8:62:bf:55:
77:38:2c:b1:bd:50:52:d0:e7:c5:f8:10:cb:61:92:c7:78:fa:
48:db:76:30:2e:9e:c1:f0:e7:31:11:97:17:21:44:a3:2e:c2:
e6:64:c6:22:ac:dc:1a:ce:7d:56:1b:6c:5a:21:fa:4f:9d:53:
6f:91:af:a3:1f:fd:5f:f3:71:6d:10:3a:f9:bd:7f:ce:d5:9e:
2b:a8:87:f0:44:5d:6b:f4:99:a1:b3:0a:4d:60:ac:52:77:0d:
df:e2:7a:80:94:dd:d3:1c:c8:a6:66:72:05:8b:37:df:b7:3f:
c3:ad:1a:91:58:50:bf:71:43:ec:f5:9e:af:a0:6e:aa:9e:86:
06:a1:dc:12:59:b2:6a:94:3e:06:9c:81:d3:98:f8:ec:2b:d8:
9b:7d:d0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:41 2025 by rpki-client