Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
File: cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft (raw, json)
Hash identifier: kxoYYwy/eNwz6H8CeRz2c61dNKasnBNFinLXWBUGQ9c=
Subject key identifier: DA:93:4C:29:9E:36:3C:6B:71:FF:08:45:8E:62:A1:0A:65:07:BF:CA
Authority key identifier: 72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
Certificate issuer: /CN=7232a04fc19d91b50d56836793235ece32ac2834
Certificate serial: 01951C5E66272E89F62855B23B1C25194F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
Manifest number: 07CF
Signing time: Wed 19 Feb 2025 04:01:43 +0000
Manifest this update: Wed 19 Feb 2025 04:01:43 +0000
Manifest next update: Thu 20 Feb 2025 04:01:43 +0000
Files and hashes: 1: cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl (hash: sxDycyBrIWYQQ/63xxnMURdl7hYIWxlWEqLIsJ9Ul1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:5e:66:27:2e:89:f6:28:55:b2:3b:1c:25:19:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7232a04fc19d91b50d56836793235ece32ac2834
Validity
Not Before: Feb 19 04:01:43 2025 GMT
Not After : Feb 20 04:01:43 2025 GMT
Subject: CN=da934c299e363c6b71ff08458e62a10a6507bfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:ed:2c:23:9a:d3:d1:a8:c5:a6:9c:c0:9f:
a7:19:77:25:04:da:9d:88:68:33:61:f7:0d:45:5d:
58:3f:8b:ef:5d:3e:d9:f4:f4:70:b7:00:4a:ae:fd:
d0:80:87:c3:6a:4e:64:9a:04:a3:08:ba:75:c1:ad:
2f:9a:50:69:65:da:c1:c6:38:db:f4:e1:bd:03:bb:
03:4e:7f:42:07:ef:9c:d9:9b:59:67:01:83:0d:16:
38:cc:71:9c:ef:96:f1:27:c2:b7:53:d7:e7:8e:29:
37:2b:b4:00:90:6d:91:db:b5:38:8a:e1:70:32:25:
81:97:1b:ad:5d:6b:92:74:e9:65:39:9f:36:0b:71:
b8:07:b3:d2:59:0b:46:12:e2:ec:85:00:64:f8:bc:
60:08:ea:6f:9d:d4:9b:39:a3:8b:a3:ca:6d:54:02:
83:43:3f:2c:57:71:d6:9a:05:5f:3d:07:4a:7d:98:
a2:25:ce:a2:c3:61:84:67:4e:e2:e0:dd:bc:38:f3:
56:8f:26:58:5a:84:b6:9c:79:f2:75:7d:db:8a:f9:
9f:65:93:19:8c:56:06:6e:18:4b:4c:15:fd:b0:51:
54:17:2e:54:c4:87:16:de:d0:66:5f:b9:3a:19:8e:
a8:a7:73:10:9c:80:74:b6:59:d5:02:d8:12:a2:46:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:4C:29:9E:36:3C:6B:71:FF:08:45:8E:62:A1:0A:65:07:BF:CA
X509v3 Authority Key Identifier:
keyid:72:32:A0:4F:C1:9D:91:B5:0D:56:83:67:93:23:5E:CE:32:AC:28:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjKgT8GdkbUNVoNnkyNezjKsKDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b35a7a-8ed4-4351-9b7a-ac83969421cc/1/cjKgT8GdkbUNVoNnkyNezjKsKDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:86:cc:7d:0a:1d:29:d9:46:aa:0e:73:91:96:07:11:03:b6:
17:a4:7f:0a:26:07:ab:44:ca:eb:ea:af:ab:08:07:b6:b8:ea:
89:bc:bf:47:ba:1e:39:59:07:43:71:80:b1:9e:67:f6:53:fc:
1d:e9:aa:53:ff:f4:74:f6:99:94:b7:4d:03:48:67:c9:d9:0e:
be:81:8e:52:5c:37:bb:ba:d2:2a:50:51:82:cf:31:1b:35:6f:
48:01:fa:29:ef:51:a0:5b:74:e7:26:b7:db:c9:17:c8:ec:3a:
4b:75:10:b8:d0:84:eb:bf:11:c8:70:7e:ec:9e:13:dd:8a:60:
d5:b6:83:55:1f:74:e7:55:01:e3:92:c7:31:81:aa:b0:cb:e5:
ff:c9:99:64:f9:0c:e7:85:b4:19:99:9e:71:0c:79:ff:70:78:
a9:a7:4c:e5:fb:d2:c7:86:10:66:07:3d:5a:98:81:b6:12:e6:
90:16:bc:87:25:7a:86:41:e1:86:4f:68:84:6d:d1:bb:aa:99:
21:c5:ac:bc:a3:b7:51:5f:38:75:7a:36:ed:e4:5e:d1:87:69:
36:b0:7b:f7:73:3c:04:06:8e:f7:80:de:19:27:3e:99:e3:c7:
3f:e6:b1:63:b7:5c:e1:d3:2e:47:eb:a3:a1:ba:e4:b6:8b:16:
1c:46:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:12 2025 by rpki-client