Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
File: Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft (raw, json)
Hash identifier: VC5I3G0aJ+EL+FCHazfle9wsGI0eTb8iXpreYJzpehM=
Subject key identifier: 9E:AC:76:C3:6A:A0:78:75:94:24:2A:CE:E2:15:58:91:04:6E:FF:11
Authority key identifier: 0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
Certificate issuer: /CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Certificate serial: 0195A38DBE807E0B59C38CBB1B36D5165286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
Manifest number: 0575
Signing time: Mon 17 Mar 2025 10:02:10 +0000
Manifest this update: Mon 17 Mar 2025 10:02:10 +0000
Manifest next update: Tue 18 Mar 2025 10:02:10 +0000
Files and hashes: 1: Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl (hash: wlP7CIV36NBL+b6Gt3T5PkGoMZ07/aJsWCaPC3iqaoQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:8d:be:80:7e:0b:59:c3:8c:bb:1b:36:d5:16:52:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1922e1f7215075cdfcbc7453bbc08867ffd253
Validity
Not Before: Mar 17 10:02:10 2025 GMT
Not After : Mar 18 10:02:10 2025 GMT
Subject: CN=9eac76c36aa0787594242acee2155891046eff11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:2e:48:6f:ae:94:8e:72:47:6c:ad:1c:9e:
96:aa:1e:a9:17:3d:59:e8:b7:b5:e3:ed:3b:93:79:
e9:54:33:87:cc:39:13:a1:8d:35:77:ab:63:f4:f9:
53:34:cc:2b:8f:7b:4e:2b:16:43:97:18:a9:34:6a:
f3:d5:56:41:87:64:41:9c:19:d9:4a:77:9e:69:41:
6a:1d:7d:4e:ee:ac:5e:9a:b3:d5:31:8f:30:75:06:
da:80:d9:67:2d:00:e6:5e:2f:37:61:26:44:18:2d:
7c:a0:e2:c1:1c:8d:9f:32:60:76:22:f2:9b:d4:9e:
2f:59:e9:9c:c9:55:dd:4a:6f:c1:a4:81:08:fb:02:
44:0f:0f:59:b1:42:27:f5:56:99:c4:cf:84:b8:f8:
db:80:df:ca:af:4c:89:d2:67:02:c4:39:d6:1f:08:
cd:06:f0:22:54:24:14:ab:54:79:09:f6:c4:5f:68:
13:46:d0:d4:ea:d6:d6:df:c6:4a:b2:ab:48:4e:51:
51:17:0e:40:b6:b7:6c:f0:ab:52:c3:d5:43:61:01:
93:1b:58:50:68:6d:9a:36:18:c5:6e:23:09:0d:7a:
59:ba:ab:24:86:2a:cb:c7:0e:b7:57:e3:79:84:54:
e5:ee:8f:1b:f7:24:75:fd:45:98:a9:ce:bc:b2:4a:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:76:C3:6A:A0:78:75:94:24:2A:CE:E2:15:58:91:04:6E:FF:11
X509v3 Authority Key Identifier:
keyid:0B:19:22:E1:F7:21:50:75:CD:FC:BC:74:53:BB:C0:88:67:FF:D2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxki4fchUHXN_Lx0U7vAiGf_0lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c7fb27-1f7e-4ad4-ab84-242301f9aa10/1/Cxki4fchUHXN_Lx0U7vAiGf_0lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:17:8e:41:13:f4:62:d3:12:2f:28:74:be:ed:57:84:b7:
9d:02:3c:03:20:0c:2b:84:84:73:e7:25:58:0b:fe:fc:b5:33:
a8:c0:93:87:de:20:f2:4d:d6:90:66:9a:95:ae:d6:c4:ae:b5:
32:c0:1b:fe:71:0e:9f:50:66:3b:3a:30:dd:51:1e:2f:95:ea:
9c:17:e8:48:80:db:18:25:96:37:d1:86:e2:8d:6a:3c:5e:de:
50:91:56:26:96:e4:58:9d:8f:1d:44:b6:5f:98:14:2f:cc:0e:
3b:83:3c:e8:19:ee:d4:20:e1:09:91:eb:ef:67:1d:44:38:a6:
4a:c1:48:e7:35:5b:13:14:01:8a:53:3d:48:21:1a:f8:d6:85:
71:ed:b7:93:68:33:d6:62:62:30:9f:04:c8:7f:62:ab:6b:51:
a0:a2:7d:a2:eb:16:cf:a4:cf:e7:da:8d:6b:09:3e:d0:e1:af:
37:76:e2:72:14:12:72:7e:1e:be:c2:0c:17:bd:68:15:8e:a5:
4f:08:13:6a:8d:8e:b6:0b:1b:78:8f:71:85:e8:49:a1:19:df:
7f:74:2c:6c:96:65:d0:69:5f:43:e8:a8:ed:15:37:0d:53:88:
36:32:e3:d7:11:dd:2e:b3:da:5e:2f:09:32:84:22:79:75:d3:
38:9a:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:52 2025 by rpki-client