Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
File: CRRy5SBHtfd1PvFSbdo47UKL_kc.mft (raw, json)
Hash identifier: CoMmFcg/egcTcaBhdrIEr/geAQNQn+xpiPgC2a9W9+A=
Subject key identifier: 5C:93:CB:9E:EA:4D:9C:3F:F6:12:DF:FD:51:A8:76:2F:8B:E4:5F:A0
Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47
Certificate serial: 0194BC04BBB8832E3AFEB8EC578592C1BD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
Manifest number: 0AFC
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: CRRy5SBHtfd1PvFSbdo47UKL_kc.crl (hash: W0nfqt48yWsnYBkkwyFxw3TqfWC3EIZNOtYSljI6LGQ=)
2: YFKVeEBJZW1VH1lMf1z8k2XR2dw.roa (hash: ktDo2PZ71KEenNsxjiVRbbwqRhzDhrH0f5p3Dle1h/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:b8:83:2e:3a:fe:b8:ec:57:85:92:c1:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=5c93cb9eea4d9c3ff612dffd51a8762f8be45fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:bf:a3:bc:96:aa:a1:6d:3c:f3:f2:87:92:
39:2a:3f:f0:c6:81:dc:f7:d8:11:14:35:e9:a8:b3:
33:c4:85:ab:1e:8d:b8:21:d1:08:bc:b1:9a:f2:aa:
7b:ed:96:ff:b7:ce:5d:40:3c:42:b7:1c:9a:0f:9f:
a8:3e:89:5e:d2:91:64:73:38:2d:c9:32:16:ec:63:
2e:d7:34:30:ef:1d:7e:d0:ef:13:6a:32:fd:5c:4b:
34:57:de:2c:a4:46:4f:73:f2:74:ac:69:1e:90:78:
05:d6:41:1e:82:ec:77:14:b2:2b:f9:b2:4c:db:72:
81:eb:fc:9e:97:9e:16:71:25:e7:47:d2:b1:89:a3:
9d:f6:2c:ac:0b:3d:d6:8e:d4:f2:e2:95:89:d0:f4:
49:b8:f6:09:40:a7:ac:da:cc:5d:c2:4d:0c:b8:b9:
4e:26:2d:bb:a7:27:62:bb:2d:f7:f4:c0:e7:f4:05:
19:0d:cd:b5:b8:e4:bd:ed:f4:31:61:71:f6:92:e3:
b4:45:df:10:ec:ff:c6:a8:33:91:ae:fb:46:28:1f:
04:49:cd:d1:08:f3:32:d7:93:b1:d2:ac:27:64:1d:
95:a6:8a:49:df:ba:05:8a:e3:d1:2d:f9:01:eb:54:
d7:cb:17:ae:f1:0c:e4:bb:01:c7:10:b1:c9:93:af:
6a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:CB:9E:EA:4D:9C:3F:F6:12:DF:FD:51:A8:76:2F:8B:E4:5F:A0
X509v3 Authority Key Identifier:
keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:49:24:16:e9:a4:fd:f7:8b:97:9a:60:eb:c4:91:9a:a4:7e:
45:c4:52:71:a5:d2:7f:c0:9d:b1:a0:53:90:a7:e7:3c:7c:a3:
e0:fc:96:53:93:85:8e:0b:55:01:f3:cd:55:36:1d:70:a8:89:
bb:0b:e5:66:b1:0a:a1:39:5b:d8:61:13:c0:45:3b:c1:a4:c7:
fd:58:bc:8e:ec:44:bd:e7:3e:64:e8:e4:87:28:42:59:e5:66:
69:8b:99:49:e6:9b:7a:a7:8a:c1:c2:3a:06:16:ad:77:c8:21:
9b:61:e6:78:55:91:99:55:18:a7:ba:0c:e2:5c:bd:b5:9c:02:
bb:fd:07:ff:e2:e1:0b:31:f0:bb:c4:02:53:d3:34:fb:d0:c4:
0a:50:db:4e:51:b1:6c:87:b6:cd:44:87:0f:2e:db:9d:3e:0b:
13:cb:c6:2b:f4:0a:86:6a:47:87:0e:f0:9f:0a:54:27:7b:ab:
05:2d:f8:84:2a:4d:d9:e4:ef:e2:66:6f:4e:1c:53:03:89:fb:
d1:8e:58:52:72:79:ca:44:fe:67:e2:9f:eb:28:fe:1a:67:c1:
92:4f:e6:1c:fc:a7:7b:74:43:c4:39:01:3e:b1:db:2f:b8:fc:
43:e4:c5:58:46:42:c2:2d:65:57:c2:d9:79:48:4c:42:58:7e:
f6:13:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:58 2025 by rpki-client