Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
File: CoRnuQcocepoG1eg2AHdo4xr_3U.mft (raw, json)
Hash identifier: 8oQz5ST3FC2Om6wiu+mSto/Gx7FJRBoQiHLzdjzMU9M=
Subject key identifier: 9C:DF:0C:BF:A4:9C:C2:5C:E3:89:1E:13:B3:AF:A0:BB:8F:A7:09:B9
Authority key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Certificate issuer: /CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Certificate serial: 019546D9BED7AF83252311DC8D5F1DBAC2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
Manifest number: 04A1
Signing time: Thu 27 Feb 2025 10:00:29 +0000
Manifest this update: Thu 27 Feb 2025 10:00:29 +0000
Manifest next update: Fri 28 Feb 2025 10:00:29 +0000
Files and hashes: 1: CoRnuQcocepoG1eg2AHdo4xr_3U.crl (hash: knnH8zspIjZBPJcLTjnrPkY6sBK2pcWHj1s3eHZi8zo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:d9:be:d7:af:83:25:23:11:dc:8d:5f:1d:ba:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Validity
Not Before: Feb 27 10:00:29 2025 GMT
Not After : Feb 28 10:00:29 2025 GMT
Subject: CN=9cdf0cbfa49cc25ce3891e13b3afa0bb8fa709b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:b4:be:07:32:8c:fc:dd:8d:e8:ef:2c:62:
58:96:41:f6:dc:76:52:2d:0d:ed:cf:73:e2:21:c9:
ec:2a:e3:dc:e9:33:ca:98:57:22:d6:b4:c6:a5:c9:
98:01:90:7b:92:d3:63:50:b0:fa:db:6f:ea:76:50:
bb:4a:fd:a9:10:ec:97:f4:6c:2d:89:a7:3b:05:f2:
7c:aa:67:1a:69:00:b9:3f:a8:eb:4f:3a:4f:7c:22:
19:1f:3e:d4:76:49:ff:ef:7d:b9:12:76:30:4a:f2:
ed:1a:ad:78:b2:18:31:13:ed:2b:4d:e2:57:b1:d7:
c5:ca:77:a4:39:02:60:a4:cd:b1:64:6f:93:f8:7f:
5f:c4:c1:6b:fd:ca:67:d4:07:11:e1:d7:cc:e7:f9:
d5:ca:15:26:e8:d8:4c:03:a8:63:81:ef:21:8b:b6:
e1:0d:83:95:2e:cb:72:40:a5:8b:f7:3a:42:f8:5e:
57:04:7d:45:34:b3:48:72:38:25:05:be:09:d0:5e:
97:59:6f:4d:ff:3c:0e:34:2e:85:32:07:20:55:b3:
e9:12:7a:ea:6b:e9:22:93:64:94:d1:95:da:a3:d9:
f6:b1:d6:c0:1b:95:aa:df:25:56:a1:bb:c8:d3:89:
b0:61:da:04:e4:fe:08:22:3c:b1:a0:d9:1f:0e:81:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DF:0C:BF:A4:9C:C2:5C:E3:89:1E:13:B3:AF:A0:BB:8F:A7:09:B9
X509v3 Authority Key Identifier:
keyid:0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:dd:8a:c6:0b:e1:3e:ab:cc:4a:31:45:ee:93:11:69:4c:
99:1c:17:7b:b8:bc:6a:2c:75:57:4e:b5:76:ab:53:52:f6:e6:
9a:af:61:2d:6a:d3:b3:1d:2b:90:65:36:70:36:39:4e:6a:f2:
a7:7b:80:27:f9:f6:fb:e3:d2:e3:99:1a:d7:b2:6f:5c:c4:47:
bb:00:02:35:b0:5d:5e:82:5b:47:23:37:f4:3f:75:f8:ce:4d:
6a:03:80:7c:08:4a:2f:b3:4f:bf:eb:8b:21:de:88:1f:72:82:
6b:b7:c5:93:fe:eb:b9:50:a5:7f:dd:83:de:f8:d3:56:46:bf:
a0:09:85:b6:01:8b:f5:da:e3:40:5d:47:79:96:93:1c:83:7e:
47:5c:94:b4:d7:dd:f4:b9:24:40:9d:81:7c:30:cf:fc:9b:58:
d5:67:6d:52:0e:a7:df:e0:e9:a3:c9:2b:da:69:23:17:6b:ee:
03:7d:8c:b7:04:6f:3e:77:a3:0c:f7:19:2d:89:e3:81:92:7e:
c6:b4:f9:7b:e0:e0:a2:dd:03:44:fd:d9:e6:79:9a:af:ec:5e:
36:b7:fb:7b:4d:c5:a5:79:e2:5c:bb:58:3d:6a:53:52:cb:28:
23:a7:55:20:75:6a:19:5e:83:d3:af:cc:85:4b:6c:10:e2:15:
43:28:fb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:30:12 2025 by rpki-client