Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
File: cNZU8uFv6IJuBK6W315csKJgOAo.mft (raw, json)
Hash identifier: l0qugGKmREwm9jbJ8XYNbYlNzp/jilxbd/rYSn7woU0=
Subject key identifier: 40:CD:F9:8E:40:DB:65:C3:78:A5:65:F9:A9:4B:8E:78:BB:F1:6C:84
Authority key identifier: 70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A
Certificate issuer: /CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
Certificate serial: 01928EFB4163D6635AC99E98524691CD376A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
Manifest number: 130C
Signing time: Tue 15 Oct 2024 07:01:23 +0000
Manifest this update: Tue 15 Oct 2024 07:01:23 +0000
Manifest next update: Wed 16 Oct 2024 07:01:23 +0000
Files and hashes: 1: cNZU8uFv6IJuBK6W315csKJgOAo.crl (hash: A7GO/LswcxmfntzrPsquXyTHz8yJYA5Tkvrtqwdq9DI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:fb:41:63:d6:63:5a:c9:9e:98:52:46:91:cd:37:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d654f2e16fe8826e04ae96df5e5cb0a260380a
Validity
Not Before: Oct 15 07:01:23 2024 GMT
Not After : Oct 16 07:01:23 2024 GMT
Subject: CN=40cdf98e40db65c378a565f9a94b8e78bbf16c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f5:05:ed:47:e6:6a:a9:70:34:c9:91:49:39:
fe:ff:2c:b1:2b:89:ba:e2:b5:04:8a:5d:51:6e:94:
fd:97:25:47:e5:39:14:63:f3:52:ba:c0:1e:89:21:
cb:a0:56:31:bc:21:5f:72:49:9d:3b:8b:09:5c:4e:
20:eb:ab:18:c5:c9:7a:2a:68:98:f5:cd:b5:2a:57:
25:e4:18:e1:e9:1c:6c:c2:00:e0:11:40:19:c0:c8:
d7:86:3d:1f:bd:6a:c1:da:51:8c:e4:cd:70:3f:e0:
72:85:82:fc:aa:de:f7:eb:d0:d3:a1:c3:4b:e6:c7:
1a:9a:25:cf:95:b7:f8:44:eb:25:e2:f4:e5:03:26:
ad:46:a1:bc:0d:49:5c:f0:70:60:29:24:cc:17:fb:
aa:79:f9:54:44:1a:b4:4a:c0:2c:ff:42:19:d6:57:
8f:38:f4:85:15:fa:07:1c:42:f3:29:f8:82:c2:73:
7a:9f:61:53:4b:6d:77:0b:81:10:cf:48:78:fe:8e:
07:08:a4:0d:48:38:c2:59:9b:05:bc:b1:69:be:28:
3a:1a:e4:54:ef:03:11:63:de:13:d4:68:87:f7:15:
5b:d4:51:c8:62:fa:94:a8:e2:ce:a6:c1:a1:66:d4:
95:e9:02:a2:d2:e4:c5:4f:ab:59:a4:43:e2:a8:64:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:F9:8E:40:DB:65:C3:78:A5:65:F9:A9:4B:8E:78:BB:F1:6C:84
X509v3 Authority Key Identifier:
keyid:70:D6:54:F2:E1:6F:E8:82:6E:04:AE:96:DF:5E:5C:B0:A2:60:38:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNZU8uFv6IJuBK6W315csKJgOAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/74bbbc-9d72-44ec-859b-c767cb74bddb/1/cNZU8uFv6IJuBK6W315csKJgOAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:60:e6:21:c5:e1:46:46:6b:ae:4e:b6:f5:c2:61:9f:03:6f:
33:04:18:b9:7a:71:4a:7c:52:3e:55:26:c8:8c:d2:59:60:14:
5e:03:45:6a:d6:ee:fa:d3:f0:8d:8e:71:c8:eb:63:d8:07:16:
de:a4:4c:a7:b0:e9:cc:9c:18:6f:3a:25:09:45:91:4f:23:60:
13:7a:9d:2a:ef:42:ed:fd:21:0a:70:7d:fa:90:1e:7d:83:58:
89:99:7d:2a:a4:55:e0:b4:bf:5f:ec:9c:91:82:3b:ed:6d:91:
bb:72:6e:84:a0:92:73:3b:77:ee:c3:f5:2d:43:3d:00:fa:20:
ca:e8:dd:fc:0a:e8:12:f2:7a:24:07:14:78:78:b5:84:b7:60:
56:37:39:64:67:1c:2e:be:85:9e:74:26:3a:cd:5d:ec:51:33:
14:c3:c1:70:8a:32:f3:12:8f:44:ce:f4:c0:87:4c:b8:55:1d:
0a:a6:aa:86:3e:7b:0e:85:8a:79:33:31:fb:ca:3e:aa:07:1a:
b1:4b:29:3a:4f:37:4e:a6:70:8a:85:a1:87:76:16:27:9b:af:
a5:a6:d7:2a:3e:1d:86:22:a6:08:74:bb:f8:19:79:ba:6b:57:
65:7a:fb:e8:03:a4:56:38:52:af:6a:fd:aa:70:f7:22:ea:bf:
cf:a4:53:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:05:40 2025 by rpki-client