Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft
File: C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft (raw, json)
Hash identifier: 7dInH5HkXlI2Umuue0If1YWkn5rY2etkw+Gq+Pvh9+M=
Subject key identifier: D5:3B:54:87:5C:A4:7B:69:CC:E8:4A:FC:F4:01:00:E4:10:89:5C:5D
Authority key identifier: 0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
Certificate issuer: /CN=0bf0b3626b73b11eca157ae9153a38b4d433cd8b
Certificate serial: 0185521CA703AC83C3B134DEC5A3556D945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft
Manifest number: 0BEB
Signing time: Tue 27 Dec 2022 05:44:47 +0000
Manifest this update: Tue 27 Dec 2022 05:44:47 +0000
Manifest next update: Wed 28 Dec 2022 05:44:47 +0000
Files and hashes: 1: C_CzYmtzsR7KFXrpFTo4tNQzzYs.crl (hash: Ol1XflFWz3AxujKzjzvZ/VQ/+wWT4AC0YDHrLgIhW5o=)
2: utXK1WE9beMlP2gKYeOSmxBJSP4.roa (hash: Pc1LNJiAmaTALc/6BybnmXKdNZ7EAUny0vDQRn3BAs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:1c:a7:03:ac:83:c3:b1:34:de:c5:a3:55:6d:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf0b3626b73b11eca157ae9153a38b4d433cd8b
Validity
Not Before: Dec 27 05:44:47 2022 GMT
Not After : Dec 28 05:44:47 2022 GMT
Subject: CN=d53b54875ca47b69cce84afcf40100e410895c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:b1:1d:c5:a7:cf:d9:cd:42:85:2e:23:eb:
39:90:c5:c4:c0:25:88:66:91:42:53:06:83:bc:fe:
90:a4:58:c0:51:ff:db:3d:c2:24:d3:6f:6c:ed:8c:
1c:16:52:97:b1:4e:bb:da:47:94:4a:4d:6f:36:d4:
db:ca:f6:61:c7:86:d7:4d:6f:4c:d8:a1:23:a7:45:
a9:ce:39:f9:46:82:b2:32:07:73:ea:de:ed:f2:f3:
b1:3d:da:a2:d5:cb:10:c8:55:be:1b:52:71:d9:ce:
27:5f:10:ef:75:51:9f:5c:7b:c9:84:a9:fb:0e:be:
f6:b5:8b:6a:53:be:e1:23:e6:3e:56:c3:3d:c7:77:
cb:7d:33:9f:01:7f:29:1b:a6:a4:da:85:34:0a:f3:
08:e0:38:33:47:f7:77:2f:07:d4:8f:05:cb:bc:21:
2e:a5:8e:46:59:22:50:db:a1:70:6c:e8:82:9e:50:
1f:5a:02:a4:ad:35:27:3d:ac:3d:fb:26:ff:ea:43:
dd:a1:00:f6:1e:bb:cf:ac:54:4b:20:52:67:84:10:
17:12:91:f3:ae:64:41:92:db:79:a4:f5:61:0b:64:
5b:a4:06:1b:dc:45:04:5c:0a:a2:2a:d0:2b:19:cb:
fc:18:fc:76:10:6f:51:b5:84:72:d5:88:67:1d:39:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:54:87:5C:A4:7B:69:CC:E8:4A:FC:F4:01:00:E4:10:89:5C:5D
X509v3 Authority Key Identifier:
keyid:0B:F0:B3:62:6B:73:B1:1E:CA:15:7A:E9:15:3A:38:B4:D4:33:CD:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_CzYmtzsR7KFXrpFTo4tNQzzYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2a22e1-ebef-41d8-9346-521a2531c22a/1/C_CzYmtzsR7KFXrpFTo4tNQzzYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1a:fd:c6:4c:6e:62:92:8e:1d:a4:56:43:e7:27:e8:49:cf:
70:89:d4:49:f4:83:ba:85:52:be:48:7d:2b:11:8b:41:69:4a:
4d:04:56:dc:8b:99:79:3e:16:7a:f9:d8:d2:d5:c8:2d:bc:d3:
42:f3:45:de:4b:99:aa:b5:14:ca:df:63:16:93:55:f9:ac:c1:
80:6a:7c:da:fc:42:ed:dd:d8:17:20:80:ea:6d:d8:f9:d1:5e:
f8:95:15:5b:35:36:6a:3a:b7:48:7d:cb:74:e9:c2:e8:50:2c:
df:b9:53:19:2e:8c:d6:e7:7a:4a:bc:46:d0:e1:26:ce:6f:40:
fc:96:64:86:c0:91:01:0c:10:1b:15:e0:a1:3e:14:44:ee:5e:
f3:4e:83:75:fc:7c:4b:3d:97:73:59:a6:49:dc:95:df:51:9a:
6f:85:bb:bc:a8:a6:ef:0e:15:74:10:ec:87:53:5f:3b:b8:ed:
cf:b7:e8:fe:77:1e:71:51:fa:f0:45:a5:9b:3c:88:e9:99:99:
86:5c:ca:7b:94:d4:f1:db:ae:dc:70:6f:68:d5:6a:66:13:4f:
ab:7d:0e:72:a2:8d:0f:98:7f:bf:18:56:fc:22:91:6b:0d:49:
b3:53:a6:fa:c7:0a:6f:33:17:44:0a:34:c7:dc:0d:e6:75:2a:
fb:82:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:49:03 2025 by rpki-client