Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
File: Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft (raw, json)
Hash identifier: j5zzmbaqwg7Zopj7IQhpDEOwLyjjpGH47Rchk62DyQo=
Subject key identifier: 5D:C9:A5:02:E9:E6:7D:AA:BE:9F:9B:FA:43:B4:B1:9D:D8:8E:F2:D6
Authority key identifier: 0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
Certificate issuer: /CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Certificate serial: 0195666515BB1EB8EC475EB69964DC41E669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
Manifest number: 05D5
Signing time: Wed 05 Mar 2025 13:00:55 +0000
Manifest this update: Wed 05 Mar 2025 13:00:55 +0000
Manifest next update: Thu 06 Mar 2025 13:00:55 +0000
Files and hashes: 1: Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl (hash: 2ntOvZtLrxp91dsGEAuJu4vC2LBnZ15dZGv08WkVyo4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:65:15:bb:1e:b8:ec:47:5e:b6:99:64:dc:41:e6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8f4b00092bbe3b8f13fddd4efc7a56d5d59a20
Validity
Not Before: Mar 5 13:00:55 2025 GMT
Not After : Mar 6 13:00:55 2025 GMT
Subject: CN=5dc9a502e9e67daabe9f9bfa43b4b19dd88ef2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:19:32:2d:63:f6:af:1d:db:8f:8d:6b:4a:
fa:76:d9:55:f2:16:32:7e:e9:12:0e:c2:e4:d1:0f:
25:0e:98:ab:00:b9:3e:49:a3:af:51:f1:e6:4f:d8:
0f:7b:0e:b7:38:03:e2:cb:0a:e1:b5:7c:ea:97:c1:
92:1c:f0:30:b3:74:e7:ca:c1:3a:4b:1e:7d:84:9c:
78:c4:74:fd:bc:85:0e:ee:5c:9f:cc:75:c7:67:d2:
9c:56:28:38:de:84:57:aa:71:f8:41:ab:75:4e:d0:
1b:f0:e4:7a:11:a8:67:c0:c8:8f:f4:d9:c4:97:98:
b4:a6:7c:09:f9:6e:86:22:5b:f3:4c:ab:cb:f3:4b:
31:ed:6f:03:6c:3c:0e:1c:99:10:b9:1c:3a:c0:b0:
56:d8:ae:92:59:8f:01:85:e5:2e:9f:d6:75:e1:45:
71:b5:09:f1:1d:78:ed:0d:8c:c1:76:13:ee:bc:97:
61:41:ca:87:0f:49:36:9b:d0:3d:1c:ed:01:32:c8:
f5:df:b8:12:a7:93:68:05:5c:0b:44:62:05:31:5c:
34:e2:1e:d2:61:d3:6c:a6:3d:86:b3:93:a1:70:42:
da:d0:e4:3e:75:92:14:a1:90:66:ac:db:6e:57:b0:
6f:7f:cb:5b:f8:6d:8d:16:4b:89:28:34:df:47:9f:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:A5:02:E9:E6:7D:AA:BE:9F:9B:FA:43:B4:B1:9D:D8:8E:F2:D6
X509v3 Authority Key Identifier:
keyid:0A:8F:4B:00:09:2B:BE:3B:8F:13:FD:DD:4E:FC:7A:56:D5:D5:9A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co9LAAkrvjuPE_3dTvx6VtXVmiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/939d6b-dff8-48bc-ba24-6b418f63097e/1/Co9LAAkrvjuPE_3dTvx6VtXVmiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:90:dc:10:82:2c:42:a7:2b:f3:9e:93:de:5f:3a:c8:db:cc:
87:29:ea:67:e3:3b:ab:98:4f:0c:0f:bc:e9:a1:d2:61:73:b5:
e2:0b:31:16:51:56:10:24:9e:83:a9:08:4c:cb:b9:07:e5:82:
0b:82:3c:1c:7a:b6:f7:a1:d0:d9:1a:2d:19:dc:51:f6:e0:13:
6e:2e:d9:7d:99:f1:f7:c6:8e:f0:55:b3:6b:a2:73:0c:dc:02:
db:1d:ca:7f:dc:f9:28:a6:24:ef:70:1e:b3:55:dc:3f:fe:5a:
d3:f9:81:b1:77:15:f6:5f:3c:af:24:2d:d6:af:85:66:81:0e:
84:31:57:92:a2:97:cc:0c:4c:43:7c:9f:60:36:4b:0a:4a:3c:
42:41:0f:76:c5:36:7a:ec:2f:74:d8:8c:aa:51:91:36:f2:c5:
f6:d1:83:fa:11:d2:df:3c:1d:be:13:5f:a7:e0:fb:57:bd:3f:
d6:d4:43:30:f4:a6:e2:3c:a9:32:cd:ae:a7:fb:b9:27:cf:ee:
2f:e1:26:f7:57:99:6e:b8:71:9e:4a:a9:88:0c:e9:f1:81:dd:
61:4a:ef:be:3f:fc:8f:0a:f5:20:12:ac:2c:44:bd:42:b7:76:
4d:dc:4b:66:05:8f:93:8a:ed:37:ca:75:18:54:86:de:2a:40:
a1:d3:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:10 2025 by rpki-client