Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft
File: CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft (raw, json)
Hash identifier: +igwDEml+jBj52WQbDMuilMbf6LoEDuivUbc87Aaj8Y=
Subject key identifier: 73:27:F6:8D:E8:29:B0:1A:89:95:D3:5F:0C:14:6D:9B:15:0A:84:AA
Authority key identifier: 0A:06:49:98:BB:78:2E:5F:BC:BA:DA:DB:9A:C2:69:0B:9C:39:81:18
Certificate issuer: /CN=0a064998bb782e5fbcbadadb9ac2690b9c398118
Certificate serial: 018A22253220C22828E71F9AA79E01CAED4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgZJmLt4Ll-8utrbmsJpC5w5gRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft
Manifest number: 0DCB
Signing time: Wed 23 Aug 2023 11:26:17 +0000
Manifest this update: Wed 23 Aug 2023 11:26:17 +0000
Manifest next update: Thu 24 Aug 2023 11:26:17 +0000
Files and hashes: 1: CgZJmLt4Ll-8utrbmsJpC5w5gRg.crl (hash: RvMjW1jb54wh+skdqAOZblScQ3Qxhrecs/qSUBH9LRs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:25:32:20:c2:28:28:e7:1f:9a:a7:9e:01:ca:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a064998bb782e5fbcbadadb9ac2690b9c398118
Validity
Not Before: Aug 23 11:26:17 2023 GMT
Not After : Aug 24 11:26:17 2023 GMT
Subject: CN=7327f68de829b01a8995d35f0c146d9b150a84aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:88:dd:2b:e5:77:80:8b:b7:db:8a:bc:b5:
90:f1:0f:00:f1:39:f8:fd:05:83:49:ad:14:7b:c0:
50:27:27:5c:66:09:d0:56:6f:a9:5a:3d:17:60:c0:
e9:a0:56:51:dc:b5:93:39:b7:d7:ae:50:04:67:cc:
a6:83:e1:ab:d0:bc:08:f0:53:23:e7:46:af:1e:91:
df:91:49:90:17:9d:df:bb:fd:fa:b8:6b:08:8d:bf:
15:b4:3d:6e:38:fa:01:c1:dd:87:48:11:f0:13:c9:
04:13:06:e1:50:35:8b:a1:bc:d6:21:d8:bf:41:18:
05:2b:5a:7d:84:91:be:2b:17:72:99:1b:f4:b8:31:
43:17:54:26:7b:41:f1:f1:46:6c:9f:50:68:57:45:
90:6c:1b:c5:c8:9c:54:11:08:3e:0e:e6:e7:a6:57:
c8:65:b6:90:3c:d5:a2:69:04:69:bf:a3:23:b7:b6:
3f:28:42:7c:1b:32:cf:5c:cc:cf:ca:08:da:24:7d:
e8:99:07:15:13:58:5f:61:65:6d:5f:0c:f1:c7:5c:
6c:10:05:0f:1d:dd:ae:09:62:f0:5d:53:97:5b:7c:
d7:29:01:39:fc:03:0e:01:d3:89:d2:27:bc:b4:f6:
9d:54:89:2d:5a:2f:2f:01:ae:bc:b9:05:7d:6c:78:
f0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:27:F6:8D:E8:29:B0:1A:89:95:D3:5F:0C:14:6D:9B:15:0A:84:AA
X509v3 Authority Key Identifier:
keyid:0A:06:49:98:BB:78:2E:5F:BC:BA:DA:DB:9A:C2:69:0B:9C:39:81:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgZJmLt4Ll-8utrbmsJpC5w5gRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:e3:26:19:48:af:9e:33:42:4f:0d:84:f1:34:56:a8:36:
63:a9:26:27:97:4d:0b:fd:67:56:00:f9:19:34:e9:85:02:48:
84:c8:a3:f7:10:71:7e:32:11:25:ef:cd:60:ae:c2:7e:45:32:
a1:39:35:81:f0:4d:50:e7:b2:7b:0b:2f:1d:39:7b:c2:7b:1c:
d9:64:24:a0:eb:54:69:ce:57:61:a7:d1:9d:a8:f9:86:41:84:
be:6a:c7:0d:b1:2a:62:b3:36:d4:27:82:95:48:c0:61:11:87:
c5:0e:dd:7a:8a:19:98:53:1f:14:45:58:cc:29:be:c8:de:9a:
7c:3b:32:93:71:42:49:a3:73:65:c1:ff:17:44:7c:7a:63:12:
36:56:9a:c3:1f:02:dc:ed:28:95:a2:61:49:8d:77:a4:b8:b7:
5e:29:97:4f:d8:94:93:90:a8:d5:e7:ec:8b:31:c8:6e:c4:ce:
78:40:0c:8f:41:62:ee:68:4b:f6:14:f9:42:9a:46:85:ae:f1:
51:b0:af:b9:e0:8e:f6:86:3b:54:d5:38:96:22:3b:db:26:bb:
d1:6a:e9:27:10:8d:16:eb:9e:c5:3a:b6:cd:b1:14:57:b7:ae:
ef:12:3d:5a:ab:51:6b:43:6e:77:f1:de:7b:45:aa:06:d7:0f:
89:c3:b4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:25 2025 by rpki-client