Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
File: CnbFQ62r2crl3-IchpkiCJQ3rE0.mft (raw, json)
Hash identifier: iwEGqdrcwrhjgVItTAfri3svAoDM+4aQc6uZifRvOZc=
Subject key identifier: 20:20:50:67:CC:5F:8E:3D:1A:78:E9:5F:14:83:CC:F9:D6:A2:DE:87
Authority key identifier: 0A:76:C5:43:AD:AB:D9:CA:E5:DF:E2:1C:86:99:22:08:94:37:AC:4D
Certificate issuer: /CN=0a76c543adabd9cae5dfe21c869922089437ac4d
Certificate serial: 01955A2AD0D8217158F55A597B8259500190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnbFQ62r2crl3-IchpkiCJQ3rE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
Manifest number: FF
Signing time: Mon 03 Mar 2025 04:01:50 +0000
Manifest this update: Mon 03 Mar 2025 04:01:50 +0000
Manifest next update: Tue 04 Mar 2025 04:01:50 +0000
Files and hashes: 1: CnbFQ62r2crl3-IchpkiCJQ3rE0.crl (hash: llVJOtvs7VM8hd5goglO0jT9LB/27DAgNdAyTU5TsZ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:2a:d0:d8:21:71:58:f5:5a:59:7b:82:59:50:01:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a76c543adabd9cae5dfe21c869922089437ac4d
Validity
Not Before: Mar 3 04:01:50 2025 GMT
Not After : Mar 4 04:01:50 2025 GMT
Subject: CN=20205067cc5f8e3d1a78e95f1483ccf9d6a2de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:66:b2:08:c7:a9:a4:60:53:bb:ef:8d:73:
85:29:50:2c:cd:d8:9d:1c:52:e4:5f:47:f1:e9:e4:
b7:de:b0:51:26:e7:7e:85:4e:87:79:ce:fd:8d:d1:
cb:ea:1d:b4:10:ea:c4:a7:0e:3a:8d:e3:b4:d7:2b:
53:25:90:ec:7b:11:e1:3a:13:09:ee:6b:b5:8d:92:
f0:52:d3:a7:59:3a:f6:3f:82:cb:40:06:6c:0a:4c:
a7:95:49:29:41:c8:4d:ee:f7:32:91:be:67:46:bc:
29:75:16:52:84:0e:34:e7:68:df:62:0e:8f:5f:15:
7b:ec:f1:7f:8d:7a:d1:48:68:7e:25:d2:2f:c3:5d:
18:5c:5e:0b:d9:c2:74:88:ff:a3:01:83:1e:54:24:
d2:17:43:94:d1:77:d7:5f:2b:6b:3f:d9:79:f1:50:
13:46:dd:93:cd:eb:c9:70:0d:b2:c7:52:fc:29:30:
f1:f9:69:1b:84:a2:66:d8:82:e3:47:78:52:8e:a1:
f8:98:c3:b0:0f:b6:f3:f7:83:29:69:4a:94:77:77:
29:a9:49:99:f9:80:5c:26:96:a7:0b:36:42:8a:c9:
cc:25:76:6b:6b:b0:72:17:2b:d6:33:ed:f8:44:86:
cb:6c:21:e2:0b:99:54:da:aa:02:39:94:38:7f:62:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:50:67:CC:5F:8E:3D:1A:78:E9:5F:14:83:CC:F9:D6:A2:DE:87
X509v3 Authority Key Identifier:
keyid:0A:76:C5:43:AD:AB:D9:CA:E5:DF:E2:1C:86:99:22:08:94:37:AC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnbFQ62r2crl3-IchpkiCJQ3rE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/085de6-e195-42aa-b596-49e2f5638024/1/CnbFQ62r2crl3-IchpkiCJQ3rE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:bb:d4:fe:3c:2a:b7:00:75:f5:22:c1:52:91:be:aa:6c:
cf:c8:df:73:38:09:9c:cb:89:43:67:84:07:2f:e7:08:1c:f5:
5b:b0:a6:82:d0:5f:a7:91:9d:e4:af:6d:cb:b7:78:9f:45:fd:
f2:1c:fc:c0:7f:6f:d9:16:67:d7:2a:43:bb:09:25:c4:f9:3f:
e6:7f:b7:e0:d4:03:6d:d5:4d:6d:8a:f1:74:f5:9c:17:f6:3e:
b0:65:49:f0:58:ff:70:2b:1c:f9:cf:96:c1:2b:03:c8:7c:b6:
a5:a9:e0:00:02:e0:7b:af:1c:c5:aa:a0:a1:b9:67:7b:18:8d:
e0:69:78:04:ec:91:de:14:03:8d:34:8d:4f:5c:c6:f0:00:2a:
f9:34:84:89:64:e4:3a:87:d3:36:e2:fb:4e:25:04:ca:8e:e4:
ef:96:ba:2e:44:9f:64:bd:0c:8b:cd:40:02:a8:87:ff:57:49:
17:6d:c8:13:d1:11:8a:99:d8:af:0c:36:15:29:86:8a:13:05:
07:c5:9f:1c:eb:28:8a:20:98:09:b6:0f:4f:6b:1a:72:b1:d2:
40:74:cd:fc:a3:c2:6c:7e:9f:fd:c3:f4:1a:d0:40:70:5f:e0:
6a:e3:93:79:f4:66:e3:36:f2:7e:25:8c:03:f8:a6:47:bc:1a:
6a:90:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:17:28 2025 by rpki-client