Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
File: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft (raw, json)
Hash identifier: +Aktq7iDez5fJecTzb1CfbREHNvJfpHp+E0HsWM3HeA=
Subject key identifier: 49:A3:A2:F7:99:DD:51:ED:46:18:25:DD:C1:32:F9:74:DF:CE:17:D3
Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e
Certificate serial: 0194BD1812124B6D630934F38462BD0392E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:58 +0000
Manifest this update: Fri 31 Jan 2025 16:00:58 +0000
Manifest next update: Sat 01 Feb 2025 16:00:58 +0000
Files and hashes: 1: cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl (hash: bgOb92+0ty4k1rgze0sCb1FGftbLy6445H/vka7p/nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:12:12:4b:6d:63:09:34:f3:84:62:bd:03:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e
Validity
Not Before: Jan 31 16:00:58 2025 GMT
Not After : Feb 1 16:00:58 2025 GMT
Subject: CN=49a3a2f799dd51ed461825ddc132f974dfce17d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:06:fd:3e:19:40:93:83:31:74:68:fc:d8:
72:b6:45:a1:dc:da:2d:e3:86:4d:0e:5f:38:f5:1a:
20:14:ed:d4:39:63:96:0d:a9:35:5e:43:4e:8d:7a:
6a:7a:49:a5:8a:80:72:3c:fa:c6:f6:ea:7c:c5:8b:
d2:20:f4:20:0b:d6:8b:7f:46:48:05:60:09:6c:7c:
0e:e4:b6:40:fd:e9:b5:79:e9:d7:9b:da:e7:03:44:
d1:c0:b7:61:5c:9c:07:bd:58:0a:6e:6e:dd:bc:ac:
56:19:db:f0:ac:98:ea:14:3e:eb:74:5c:90:38:1f:
ba:35:8c:55:21:38:d9:c8:f0:6e:51:c9:f0:6b:35:
b9:d3:d1:6d:ba:92:d5:bd:83:64:b3:e7:16:b8:29:
b3:9d:27:32:42:42:d3:ae:70:5e:40:39:b0:36:1f:
a7:aa:49:3d:cc:e7:e7:a8:a3:73:b1:e6:ce:7a:51:
9e:a9:76:4c:1c:8f:e4:8d:47:d7:b8:fc:ea:dd:9e:
f2:4d:13:5c:79:72:29:24:07:22:f3:cd:08:fd:12:
70:68:1b:66:1a:3c:dd:4f:d0:e0:8e:41:d2:2b:b1:
1c:01:69:c2:67:31:74:71:4a:d7:19:27:a4:c6:7b:
3c:b8:ff:1f:fe:ad:9f:ad:e2:bf:f2:80:f9:ca:5f:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:A2:F7:99:DD:51:ED:46:18:25:DD:C1:32:F9:74:DF:CE:17:D3
X509v3 Authority Key Identifier:
keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:93:78:e6:27:97:c1:6d:5c:66:17:b1:a8:b9:15:9b:9c:ad:
a7:c1:9e:5b:41:28:b6:a1:b9:72:de:e5:c6:86:c2:cb:ac:3f:
93:df:65:17:96:58:98:a3:d7:d0:9a:d9:28:6e:9d:c4:ed:36:
43:b1:90:f3:55:d4:e7:a8:31:7d:7c:42:54:a8:42:55:3d:69:
bb:9e:1d:66:45:d9:58:53:c7:63:28:e2:39:33:ec:c5:21:4c:
3b:25:24:66:91:8d:05:7a:19:dc:1c:db:ed:f2:fa:49:88:fa:
d7:9f:00:8e:20:70:76:62:4c:00:28:a3:83:3a:b8:c9:af:1e:
30:be:9d:4d:cc:de:a6:1f:42:5b:c7:79:ce:46:c7:df:fc:02:
16:68:66:22:a8:b2:9e:c6:57:8d:64:da:c3:49:e1:51:13:0f:
31:2c:ca:5b:36:c9:d9:dd:8c:89:ef:c0:90:7b:11:e4:8a:82:
e5:29:ca:6b:e9:db:1d:67:a7:cc:55:44:2a:0a:94:d7:b6:0f:
08:16:05:6d:3d:72:1d:e4:a3:9d:8b:90:36:d6:0a:7d:fb:90:
11:8b:a4:d5:ff:b1:47:6a:81:9e:78:8d:1f:e6:de:16:e0:29:
a7:30:1a:8e:d4:95:9e:ab:b5:31:f0:f6:ba:9e:6b:52:38:85:
3d:f8:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client