Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
File: C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft (raw, json)
Hash identifier: J8vlKUDtVyVahyBYBsmvYIg8J2haKGMoCKpImtasa8o=
Subject key identifier: F7:3E:94:47:DC:43:46:09:79:6A:FE:98:46:B8:80:AD:D0:A7:D6:58
Authority key identifier: 0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43
Certificate issuer: /CN=0b968f2ae273db0c6860e75048029685cebef443
Certificate serial: 019520A86E62AF89D256C2E574C0A978793B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
Manifest number: 0F3F
Signing time: Thu 20 Feb 2025 00:01:04 +0000
Manifest this update: Thu 20 Feb 2025 00:01:04 +0000
Manifest next update: Fri 21 Feb 2025 00:01:04 +0000
Files and hashes: 1: C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl (hash: s/lSxpcSZobQnt3MVblyEPbdWDr11/X5hcsIIP5DdXA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:20:a8:6e:62:af:89:d2:56:c2:e5:74:c0:a9:78:79:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b968f2ae273db0c6860e75048029685cebef443
Validity
Not Before: Feb 20 00:01:04 2025 GMT
Not After : Feb 21 00:01:04 2025 GMT
Subject: CN=f73e9447dc434609796afe9846b880add0a7d658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:76:e4:c3:2e:8c:2b:92:f7:a1:3b:fd:09:
26:e1:65:3a:6d:9f:e6:34:b2:9a:1b:b4:ec:eb:81:
0c:b0:bd:2a:c5:41:83:fe:65:f4:48:02:b8:a6:68:
fe:e1:58:88:62:89:d6:76:90:e2:94:2d:d5:57:3c:
6c:ff:70:e2:49:cd:95:17:2b:32:4a:d3:ef:aa:8d:
d4:f1:74:b4:2b:64:cb:cb:43:04:18:d4:77:13:f2:
95:0c:58:1b:4e:c4:50:56:bc:76:69:d5:01:d2:0d:
82:35:bd:9a:88:ca:9d:0a:76:ec:ba:93:ce:61:7a:
67:c5:d1:45:07:92:0d:5d:69:0d:e7:76:31:99:2c:
b5:cd:86:41:c6:99:a9:f1:70:3c:79:0b:2c:b2:bf:
66:72:f6:cc:c5:a5:64:a9:cd:32:ea:00:fd:00:1e:
fa:65:88:67:ec:ce:e1:96:ae:b7:94:0f:c9:a6:c3:
9c:2c:ae:3e:8d:b7:90:98:53:4b:01:8a:da:2f:ee:
50:2c:29:c5:db:55:f8:df:10:99:79:ff:3b:e8:0f:
c6:ec:bb:df:c1:57:3d:0f:09:c0:30:b6:9f:8e:b5:
1d:7c:7e:cd:ea:14:3f:03:77:5f:0b:3f:b5:d5:c7:
08:62:71:6c:49:5c:38:7a:cf:5c:61:f0:56:33:92:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:94:47:DC:43:46:09:79:6A:FE:98:46:B8:80:AD:D0:A7:D6:58
X509v3 Authority Key Identifier:
keyid:0B:96:8F:2A:E2:73:DB:0C:68:60:E7:50:48:02:96:85:CE:BE:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5aPKuJz2wxoYOdQSAKWhc6-9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/fef866-d56e-4309-bb39-278b0c20337a/1/C5aPKuJz2wxoYOdQSAKWhc6-9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a5:4a:ca:71:2d:b5:8c:00:c6:c3:de:b6:a3:e7:b5:be:24:
00:40:a8:24:35:ef:45:44:5a:3a:b5:a5:95:a3:29:fb:8b:bf:
ee:b7:95:39:ee:88:fc:b4:5d:68:42:47:0c:51:3a:29:c2:e5:
ba:13:5a:a0:56:1e:b5:54:a1:20:5a:a4:eb:58:37:5b:31:d6:
45:fb:4f:f0:6d:45:32:28:e8:64:54:df:64:fc:e5:84:80:09:
3e:1c:a3:57:cc:c5:9e:0e:89:c0:c8:7b:4a:ab:be:56:d7:56:
ba:23:07:04:45:bf:81:bd:a7:50:9b:1c:bd:e8:96:8f:b1:81:
32:9e:2c:d2:65:e2:47:15:e0:39:35:de:0c:41:de:e9:1a:16:
98:07:c6:91:56:eb:e2:22:83:ef:28:c2:75:d8:0b:3d:70:d8:
41:75:b1:c4:97:9b:0e:e9:6a:27:06:4a:41:09:15:6b:13:08:
54:3d:7b:6b:b1:de:21:d3:7f:d3:29:c7:fe:9d:10:bf:29:7d:
a2:a0:0a:4b:62:a7:95:12:52:d9:ce:39:dc:27:74:34:f9:45:
42:a9:16:2a:e5:6d:d1:e8:e4:58:11:d6:d5:dc:b6:76:3b:0c:
a0:03:67:92:ef:4d:4a:5d:4f:98:58:b0:23:07:08:ac:5e:ca:
65:73:b7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:22 2025 by rpki-client