Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier: 3ceClIJt7j431FpkO9QiSVLJuDMIjXLIskXQHh6WMxs=
Subject key identifier: D3:86:BE:11:09:1A:76:E7:BB:34:8D:74:80:1A:48:A9:2F:2C:FE:C7
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer: /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial: 0194BC72A928931E78EE6F3EABAD5A0A7A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number: 0DB8
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: 4rZzU4eqTLNde7Go1skAGcCKU7hdw6ymJNBfJFPEuXc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:28:93:1e:78:ee:6f:3e:ab:ad:5a:0a:7a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=d386be11091a76e7bb348d74801a48a92f2cfec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:bb:c2:d3:0c:32:2b:c6:60:7e:7f:e1:49:
c6:5e:d0:8a:74:cf:bc:c5:7d:f3:41:e6:c6:01:3e:
d2:57:c5:6a:94:7f:10:d0:2c:66:a3:ff:e2:70:f6:
b2:8d:7b:e9:be:08:67:ff:b2:96:20:7d:a1:c6:f4:
3f:d7:23:c7:c6:1a:01:64:2c:41:93:69:90:c3:36:
4d:35:5e:39:9e:20:45:22:89:b7:b7:37:56:58:1f:
a8:f2:0b:c9:b5:b9:5b:d9:89:12:c3:b4:9e:69:62:
3e:ed:03:b7:81:43:19:8f:08:95:e5:4b:b7:99:be:
90:3e:67:4a:7f:10:42:87:56:0a:e2:14:52:21:ad:
27:77:ba:d9:80:f2:54:39:44:c9:1b:33:66:c1:8b:
60:64:dc:40:6d:41:2e:9c:37:2a:c1:77:07:6c:ee:
e6:4f:43:ed:01:27:8d:03:8b:0e:5d:9a:43:94:4e:
14:89:12:94:52:c4:dc:ea:01:ef:ec:ad:d1:9a:52:
f5:93:ae:cf:45:19:78:ba:38:58:1d:bc:18:f4:b9:
c0:d2:d1:79:a6:d6:84:7e:11:c1:4c:65:bf:b1:e3:
ad:23:a7:e2:d2:e6:c5:8b:39:a6:94:3e:3f:0d:6f:
87:7e:d1:fe:aa:c8:02:29:0c:1e:5a:28:d0:e5:80:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:86:BE:11:09:1A:76:E7:BB:34:8D:74:80:1A:48:A9:2F:2C:FE:C7
X509v3 Authority Key Identifier:
keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9f:ad:3a:91:26:ee:a8:32:eb:94:bc:68:3b:9f:98:3e:2b:
3d:04:5f:5c:43:48:79:c6:99:5c:90:49:cd:4b:c6:17:3e:1e:
35:47:29:b5:fc:d1:d9:aa:d8:96:d6:b7:47:2a:8f:c3:c5:fa:
76:75:bf:cc:94:b1:69:3a:b6:87:41:8c:4b:c5:f8:ee:49:fa:
27:0e:bc:82:f9:f8:0f:b7:0a:bb:54:aa:1d:3b:ae:ee:ac:4e:
c7:39:51:5e:61:e4:d8:79:34:6d:0b:87:b1:36:4d:52:fe:00:
24:37:13:d0:40:d0:83:ed:59:89:a5:9d:1a:60:3b:f6:6d:e0:
0d:ed:0d:86:0f:00:bc:e3:76:18:6d:df:84:52:58:bb:44:3b:
96:b9:79:e0:93:38:88:06:31:81:3d:a4:ad:b1:37:d6:60:46:
43:c9:6d:10:e3:f1:9b:a8:e7:5a:67:43:ad:10:d2:8e:d0:fc:
6d:b2:f3:3c:e0:e1:9e:31:92:43:ee:29:79:93:33:08:4c:9d:
1f:6c:76:ae:23:36:9a:22:38:68:f8:44:4f:cc:4b:21:4b:04:
2c:ca:f7:d2:79:6f:d9:ff:2c:66:4b:fc:05:96:7b:73:a5:39:
77:82:be:07:07:e0:59:e6:6e:35:f6:95:56:8d:c7:49:be:af:
b0:6e:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:54 2025 by rpki-client