Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
File: CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft (raw, json)
Hash identifier: +b9dl0uKzOZmVeFvEtUd769wZzUtN7ZR9I7ybCBdTrg=
Subject key identifier: 13:5E:03:B3:56:43:9D:5A:28:F4:41:40:05:32:12:D3:01:7E:F8:05
Authority key identifier: 08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
Certificate issuer: /CN=0817255df3130bdb77fc37187d06005fee066724
Certificate serial: 0195E00F8371928B793276DF5B6769B022F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
Manifest number: 0E4F
Signing time: Sat 29 Mar 2025 04:01:07 +0000
Manifest this update: Sat 29 Mar 2025 04:01:07 +0000
Manifest next update: Sun 30 Mar 2025 04:01:07 +0000
Files and hashes: 1: CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl (hash: MDQ5umRN8sMWrWeSJ1qJyHP6fsdlAP9b1s/4duxhb2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:83:71:92:8b:79:32:76:df:5b:67:69:b0:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0817255df3130bdb77fc37187d06005fee066724
Validity
Not Before: Mar 29 04:01:07 2025 GMT
Not After : Mar 30 04:01:07 2025 GMT
Subject: CN=135e03b356439d5a28f44140053212d3017ef805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:93:cc:3b:e3:ce:16:d6:d0:ff:da:94:f0:
bd:29:a7:8f:f8:5d:bf:23:e2:e0:b5:e1:8d:a7:97:
a7:b8:67:b2:35:4d:8d:d0:e7:16:14:1b:4b:9f:e9:
5d:22:d5:47:09:04:a0:4b:c3:90:fb:01:07:0e:99:
44:7e:8c:49:b0:b6:a5:43:d4:e1:82:ed:81:d5:3b:
6c:43:0d:60:d3:09:99:40:70:7a:b3:c4:1c:ee:64:
c0:6e:8d:a5:9d:ef:a1:af:ec:d4:92:2e:57:74:26:
8e:99:98:e8:89:ae:4a:87:7b:de:1b:1a:45:06:17:
3c:ef:5c:48:7f:ae:bc:7b:d6:24:df:90:5a:e4:c2:
d5:0a:29:fb:9d:16:44:08:55:b4:10:b7:fc:be:8c:
3a:b5:a4:f6:0d:13:d1:33:95:21:66:06:aa:87:22:
76:e3:08:bd:d6:87:4e:f8:5e:1a:65:2c:2c:b3:c7:
6b:74:a6:bd:87:1b:ae:b7:69:5a:9d:ae:61:2d:6c:
fe:0e:2d:91:e2:33:f3:a5:df:b7:24:77:b7:a7:bf:
b7:7e:62:d4:d3:bd:71:cd:b2:63:7b:af:43:11:8c:
9d:4f:97:c5:ef:68:69:ee:42:a7:fc:65:e9:35:51:
e8:06:fa:32:c4:d6:f5:ae:9b:44:a6:8c:8a:d3:af:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5E:03:B3:56:43:9D:5A:28:F4:41:40:05:32:12:D3:01:7E:F8:05
X509v3 Authority Key Identifier:
keyid:08:17:25:5D:F3:13:0B:DB:77:FC:37:18:7D:06:00:5F:EE:06:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBclXfMTC9t3_DcYfQYAX-4GZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a417c4-3af2-43e8-a4c1-3dad029b2d4e/1/CBclXfMTC9t3_DcYfQYAX-4GZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:43:d0:cd:3b:f3:df:3a:b2:e4:a0:f9:74:7d:e1:24:d4:
47:79:18:e3:4e:72:b2:31:34:8b:7c:e1:1d:c7:84:9a:1b:f4:
f3:96:7e:a6:05:e1:86:68:0c:d5:b8:75:ba:8c:93:0d:d8:46:
da:79:14:e4:52:f7:b6:b4:44:ef:68:57:9d:15:fc:2b:80:7a:
61:20:69:21:f3:c8:38:d2:0c:35:ab:a8:59:99:95:25:bd:5e:
e1:88:79:d0:fa:45:8e:13:94:5a:01:9e:1f:1e:e6:22:32:0d:
0a:40:87:16:aa:93:94:4b:50:b6:89:b2:4a:4c:5a:2d:35:13:
b8:02:29:47:d5:53:12:8f:81:02:15:e7:eb:82:34:c6:dc:a5:
0d:8a:e9:55:df:07:8b:cc:ce:ac:ae:b3:03:88:27:52:16:17:
1b:84:76:9b:e8:d5:54:cc:cb:cc:8f:c4:61:b9:c5:be:ab:a7:
16:a2:71:8c:fb:38:fe:40:34:bc:02:5b:b0:d2:31:82:1e:2f:
1b:b5:7d:fd:e3:ad:ca:ab:59:9a:e3:99:34:ec:cc:a8:03:21:
8c:60:eb:6b:cb:2e:40:a7:26:2c:81:91:0a:4e:7b:ea:78:6e:
83:a7:26:ed:a1:37:48:f2:d6:93:d5:ec:77:a7:40:e7:e5:93:
91:18:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:31:05 2025 by rpki-client