Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
File: CSaQfEuWlut6_HQka5wpKSBfYQM.mft (raw, json)
Hash identifier: uFtrSDApTmtRVBx52Vg9b81cBinV7O/0L63fxJUTASI=
Subject key identifier: 38:78:38:76:A8:0E:1F:47:BE:3A:77:2F:AF:5A:06:99:61:15:45:13
Authority key identifier: 09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03
Certificate issuer: /CN=0926907c4b9696eb7afc74246b9c2929205f6103
Certificate serial: 0191C0FD2C79422C728C9C62AB15554DF78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
Manifest number: 0852
Signing time: Thu 05 Sep 2024 07:01:42 +0000
Manifest this update: Thu 05 Sep 2024 07:01:42 +0000
Manifest next update: Fri 06 Sep 2024 07:01:42 +0000
Files and hashes: 1: CSaQfEuWlut6_HQka5wpKSBfYQM.crl (hash: mvUyQpANynyk+KjD1mgjdYIqP0F9VMTZ1cyFobAbo4Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:fd:2c:79:42:2c:72:8c:9c:62:ab:15:55:4d:f7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0926907c4b9696eb7afc74246b9c2929205f6103
Validity
Not Before: Sep 5 07:01:42 2024 GMT
Not After : Sep 6 07:01:42 2024 GMT
Subject: CN=38783876a80e1f47be3a772faf5a069961154513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:a2:93:a9:8b:01:cf:b7:d0:86:1c:71:ce:
a8:70:ac:0b:fd:15:e1:ed:04:1c:d6:c3:84:05:36:
ce:d8:a8:d7:b1:48:9c:fd:07:66:6b:31:6f:3d:a1:
99:e5:18:c8:e7:a4:4d:14:d0:ef:72:02:0e:8a:83:
e2:9e:56:43:21:8b:bc:b0:4d:02:f3:64:8c:d3:21:
11:d8:f8:b6:13:14:33:cd:5f:aa:c7:21:cf:ba:2f:
de:a7:eb:17:03:09:73:78:32:da:44:86:31:29:3c:
ed:80:d5:9d:46:b4:a1:86:ce:9c:b0:c2:b8:de:50:
39:2d:e1:f0:6e:12:2d:5e:d0:09:90:97:2d:f6:57:
78:21:9f:43:dd:80:7a:c2:8e:44:8f:f5:b4:d5:c2:
56:14:fb:02:ad:45:7b:81:51:32:13:da:49:99:d9:
c5:63:cf:73:99:2b:d2:70:4e:5f:7d:66:37:22:a6:
c3:c8:a8:19:09:fe:bd:81:70:cb:d2:19:3e:cf:a0:
47:b4:73:7d:85:b0:f8:37:db:3a:aa:a9:9c:41:da:
35:35:89:ac:cc:04:dc:7e:45:fa:a7:f8:2c:f9:3b:
d2:a2:13:6e:b9:76:3c:56:5d:7e:15:c0:ed:3d:04:
8f:f2:65:dc:27:91:ac:81:45:e0:ba:72:55:11:f9:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:38:76:A8:0E:1F:47:BE:3A:77:2F:AF:5A:06:99:61:15:45:13
X509v3 Authority Key Identifier:
keyid:09:26:90:7C:4B:96:96:EB:7A:FC:74:24:6B:9C:29:29:20:5F:61:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSaQfEuWlut6_HQka5wpKSBfYQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1fcbcf-823d-477e-ad61-7870c1de94b2/1/CSaQfEuWlut6_HQka5wpKSBfYQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2d:11:ea:0e:9b:83:46:49:63:d7:35:9e:5d:2c:64:9a:80:
cf:1e:7b:41:08:6a:6e:0a:92:26:38:65:55:67:87:08:6d:e0:
74:13:a0:30:3a:dc:74:30:9c:35:03:d4:9c:7b:97:e1:99:02:
99:37:8b:7c:ab:32:4c:64:94:ae:9a:46:57:ec:4f:68:41:ba:
39:41:6b:fa:13:c9:01:45:10:c7:b1:da:21:76:b4:58:27:bc:
ca:73:4e:65:77:d5:77:61:d3:94:d7:49:42:ac:90:a2:6b:81:
2c:13:b8:73:ff:14:27:4f:b8:a4:90:fa:6b:b3:ab:4c:3a:70:
81:7d:ed:2f:01:7b:f4:68:d0:65:b8:6a:c8:5e:c3:8a:1a:19:
39:da:3f:96:16:62:8d:ee:d9:e0:de:e8:d1:71:48:cc:fb:29:
26:84:e5:f1:bb:37:59:40:49:ba:5f:67:10:ab:b4:01:44:b7:
74:9f:78:ea:c5:7d:a1:38:af:a9:f9:cb:b9:c2:11:43:c5:ec:
e0:6b:bf:5a:c0:43:58:d4:24:b1:ce:35:32:38:a5:c0:f6:60:
e9:bf:50:a4:87:07:e5:7d:f3:f1:dc:9f:e7:01:62:7d:27:81:
8a:03:ea:cc:73:a7:ce:e4:25:9f:1f:d1:05:ec:ab:03:6f:02:
fc:7e:9c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:02 2025 by rpki-client