Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.mft
File: CnoSd-8dVkFUmMcSqUP1MAa2zRc.mft (raw, json)
Hash identifier: e/Yo99CuucGYBNipi4gDBaiIIT1ntoTrTZbVylL/0wI=
Subject key identifier: 27:F0:CB:EF:9C:1C:61:C3:B8:2D:BC:9E:17:A4:14:79:BF:81:16:36
Authority key identifier: 0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
Certificate issuer: /CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Certificate serial: 0187795BF9FF97CDDBC1988B7D13BDDB7C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.mft
Manifest number: 0D27
Signing time: Thu 13 Apr 2023 06:44:43 +0000
Manifest this update: Thu 13 Apr 2023 06:44:43 +0000
Manifest next update: Fri 14 Apr 2023 06:44:43 +0000
Files and hashes: 1: CnoSd-8dVkFUmMcSqUP1MAa2zRc.crl (hash: PjzplU2OF236aT74C4Y8ziKZadMKxg7ABsTHK0DLKN0=)
2: mLHY6APDzy9ibMY9kSMM1Nqu7mc.roa (hash: 2vgil1OLrsyrNYnckQVsaCP8jQL2UV5oxzEJuWr3sPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:5b:f9:ff:97:cd:db:c1:98:8b:7d:13:bd:db:7c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7a1277ef1d56415498c712a943f53006b6cd17
Validity
Not Before: Apr 13 06:44:43 2023 GMT
Not After : Apr 14 06:44:43 2023 GMT
Subject: CN=27f0cbef9c1c61c3b82dbc9e17a41479bf811636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:c5:8f:e6:fa:fc:6f:03:a4:a1:cf:b5:85:
21:06:ee:38:b1:1d:c4:6c:00:95:2c:e6:59:55:95:
a4:4a:6f:05:32:cb:22:4c:57:c5:a5:16:b6:00:70:
98:0f:e6:0a:77:ca:fe:61:6f:f7:e4:7d:46:ed:00:
af:90:25:c0:a5:2d:51:c9:0b:48:c6:57:a0:0f:74:
73:c0:5e:95:1d:24:5a:c2:dd:38:2e:f7:04:42:1c:
67:bf:19:4c:d4:00:ab:48:e3:c3:7b:82:29:f6:cd:
c4:0c:c3:2f:61:52:05:61:04:0e:2b:ce:87:dd:b0:
b1:a2:99:53:6c:89:76:da:32:bd:a5:7a:a4:29:53:
b1:bb:03:6f:dd:a2:db:92:0d:ca:15:3f:84:d8:93:
39:d2:6f:e7:f9:78:ae:2d:83:f6:92:b3:25:55:dd:
e1:30:2e:d4:d2:9c:84:9b:ef:04:2a:a0:a4:5c:94:
5d:d2:c7:0c:af:34:3f:2b:d4:01:89:e2:76:24:df:
49:c4:54:d9:94:ac:43:c2:16:74:23:9f:6d:f1:e0:
48:62:ae:31:58:e0:5b:ec:af:96:da:e0:50:15:c8:
5e:16:5a:33:6e:67:d6:1d:46:d7:e7:79:c5:a2:9b:
e4:4a:cc:03:01:cc:b1:0b:a2:a4:83:6e:a8:ed:18:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F0:CB:EF:9C:1C:61:C3:B8:2D:BC:9E:17:A4:14:79:BF:81:16:36
X509v3 Authority Key Identifier:
keyid:0A:7A:12:77:EF:1D:56:41:54:98:C7:12:A9:43:F5:30:06:B6:CD:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnoSd-8dVkFUmMcSqUP1MAa2zRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/658206-b52b-45f0-ba5d-53e5a99b6708/1/CnoSd-8dVkFUmMcSqUP1MAa2zRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:13:d7:53:cf:ed:93:43:10:75:b5:a0:22:bb:12:4e:7a:97:
82:46:99:5d:8a:f7:74:24:d6:7a:a2:b8:e5:e8:dd:5e:aa:71:
85:8e:d2:24:63:e4:04:a2:5b:e7:26:1e:c1:0f:07:4a:9c:3f:
d9:85:82:3c:1d:9d:d4:a1:20:8a:13:f1:69:20:3a:a5:e1:8c:
9b:83:89:fa:98:dd:52:19:39:5e:a1:b4:97:f7:e4:5d:6d:c3:
00:e7:6b:a0:12:56:f2:dd:a5:b4:d8:e7:a1:57:aa:25:63:1b:
45:27:bb:58:39:28:b9:cd:c4:b3:16:cd:84:91:19:19:46:e6:
e3:fa:0f:14:93:c3:d9:16:05:10:b1:63:09:2b:91:44:27:88:
b0:f8:36:08:67:68:aa:fd:f5:1d:49:3e:92:ef:af:94:12:47:
67:d1:c3:8c:2c:07:69:68:83:39:c8:40:a4:a5:f1:00:84:cb:
b5:a7:89:26:33:14:67:25:bb:04:e1:d2:2c:48:55:e2:a9:fb:
1e:45:15:3a:ba:17:72:8a:ab:54:69:df:5c:50:c4:25:2b:4a:
72:76:18:da:75:7a:6b:14:22:23:27:e8:2c:99:09:f3:b6:03:
bc:6d:01:de:77:bd:63:f2:af:c8:3b:f5:19:33:1f:71:53:fb:
45:61:22:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:27:09 2025 by rpki-client