Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
File: CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft (raw, json)
Hash identifier: A+8SpHsz5klr8IaUiFQxRdhb4Jug5vdn1DgOBg3SK8A=
Subject key identifier: EC:BD:9E:B2:35:42:39:EC:9A:04:FC:E9:BB:63:72:80:C2:13:5C:BE
Authority key identifier: 09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6
Certificate issuer: /CN=09b51029f573fc99c2a3d4b989af145ef213bbc6
Certificate serial: 0191B5D39F95EA4423E5F20A0F86ACEBA0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
Manifest number: 0F22
Signing time: Tue 03 Sep 2024 03:00:30 +0000
Manifest this update: Tue 03 Sep 2024 03:00:30 +0000
Manifest next update: Wed 04 Sep 2024 03:00:30 +0000
Files and hashes: 1: CbUQKfVz_JnCo9S5ia8UXvITu8Y.crl (hash: hARLZdFhVsNmanKQs/0ytwwKxCuFOaTpU/wyulxc22I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b5:d3:9f:95:ea:44:23:e5:f2:0a:0f:86:ac:eb:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b51029f573fc99c2a3d4b989af145ef213bbc6
Validity
Not Before: Sep 3 03:00:30 2024 GMT
Not After : Sep 4 03:00:30 2024 GMT
Subject: CN=ecbd9eb2354239ec9a04fce9bb637280c2135cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4d:dc:29:f4:35:2e:be:89:71:4b:f3:6e:f9:
73:77:58:6b:0d:bf:19:32:2b:27:83:fb:cb:d3:a0:
56:1a:85:0d:64:ee:c6:25:7d:95:0d:c8:5c:d5:60:
3b:58:68:c5:3c:1a:4c:85:e0:00:75:ea:49:76:6b:
06:6d:bf:62:71:cc:39:1d:2c:e3:a3:f6:a6:8b:02:
b0:8f:71:e2:93:98:82:14:2f:7d:d9:f2:b6:37:db:
63:57:09:9e:e7:2d:81:e1:04:4c:04:d7:c8:ef:ff:
e5:eb:1a:01:bc:55:15:38:13:82:7a:44:cd:f7:2e:
ba:2a:16:7b:19:f3:1f:e2:cb:3f:28:01:6f:f0:55:
97:b8:db:33:51:a6:61:72:70:e3:2e:0e:7c:c3:5a:
b2:61:cc:a4:eb:0b:a6:57:29:d8:18:7d:f9:68:8c:
88:8b:90:6a:58:b3:b0:03:a9:a7:82:53:49:b9:67:
fb:a4:db:bb:cb:4d:a0:47:ce:85:7e:e5:a3:5f:7a:
77:7a:5c:cd:8a:72:e9:49:be:4e:e8:35:c4:ea:33:
52:4d:a8:a4:6a:2f:ba:a5:f4:15:3a:c0:6c:59:3f:
3c:24:18:1a:69:24:46:13:57:07:e6:d1:97:a9:05:
13:d3:dd:f3:6a:02:b5:f1:8f:c4:74:57:d7:6c:f2:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:9E:B2:35:42:39:EC:9A:04:FC:E9:BB:63:72:80:C2:13:5C:BE
X509v3 Authority Key Identifier:
keyid:09:B5:10:29:F5:73:FC:99:C2:A3:D4:B9:89:AF:14:5E:F2:13:BB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbUQKfVz_JnCo9S5ia8UXvITu8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/aa478d-28b8-4f71-8427-2a9d9a302340/1/CbUQKfVz_JnCo9S5ia8UXvITu8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d0:9f:ac:3f:0a:33:98:82:5c:05:5a:0f:fa:a6:d6:ba:ca:
98:83:b8:e1:d4:39:9e:ba:22:1c:28:34:8c:2d:30:40:e2:f6:
a9:16:d7:65:c9:77:fd:7b:81:c8:8a:94:7a:b3:42:05:ee:8f:
7c:3f:a6:3e:69:ae:62:ef:b9:31:83:70:d1:e4:e2:0b:ae:b0:
09:31:4d:ed:b3:04:88:14:dc:39:5e:30:b1:bf:bd:e7:d3:9b:
44:73:1e:f7:b5:30:ac:cf:53:ca:e1:fd:88:c2:e3:a8:9b:7a:
29:25:ce:91:1d:78:7c:19:bc:f9:68:81:01:28:a9:6b:7c:8a:
37:f8:78:7b:86:b2:e9:e1:c8:ae:d8:01:a0:8d:6c:87:1c:05:
05:f2:85:c8:cd:8e:a0:dd:85:32:71:4c:59:08:00:d7:c9:9d:
8c:55:2a:87:79:43:32:a8:1e:30:26:e2:c8:c6:be:1f:e8:cc:
2c:6e:95:25:81:fd:ff:f6:7f:22:e1:b4:71:23:3a:12:1e:bd:
a7:2e:a8:8f:2b:01:46:f1:d6:e3:f7:80:0e:61:90:0c:34:58:
fa:f0:3f:e3:23:05:43:0e:ef:da:d1:e7:1c:7d:41:c0:85:ee:
f9:de:77:4b:dc:bf:4f:c8:5d:45:50:d4:ed:59:29:e8:ab:2d:
f2:bf:b0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:14 2025 by rpki-client