Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
File: CNOBziQjEGGBXzIEPGUiZq272GU.mft (raw, json)
Hash identifier: CHMsIVPMpP6OGQ/jGOZa7ZXTw7a/4kanasOXCy3yT+Q=
Subject key identifier: B1:34:83:8F:CF:30:3F:82:F5:68:A5:AD:B5:C8:B3:A6:DA:01:77:AD
Authority key identifier: 08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
Certificate issuer: /CN=08d381ce24231061815f32043c652266adbbd865
Certificate serial: 01944A8266D5A64B7896C1A1414B57634F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOBziQjEGGBXzIEPGUiZq272GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
Manifest number: 11B4
Signing time: Thu 09 Jan 2025 10:00:47 +0000
Manifest this update: Thu 09 Jan 2025 10:00:47 +0000
Manifest next update: Fri 10 Jan 2025 10:00:47 +0000
Files and hashes: 1: CNOBziQjEGGBXzIEPGUiZq272GU.crl (hash: Juyk9szD3VO++paI78ZTR6zimBkocu3lIMXBhxMVrT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:82:66:d5:a6:4b:78:96:c1:a1:41:4b:57:63:4f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d381ce24231061815f32043c652266adbbd865
Validity
Not Before: Jan 9 10:00:47 2025 GMT
Not After : Jan 10 10:00:47 2025 GMT
Subject: CN=b134838fcf303f82f568a5adb5c8b3a6da0177ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:88:ae:36:3a:df:dd:fa:09:6f:0c:8b:f5:
9a:5d:f3:b2:6d:8a:07:42:a6:3b:da:a0:e3:6f:f3:
e9:e3:42:db:3d:63:c2:22:b5:37:09:8b:6f:6c:48:
af:e1:54:84:ae:b2:ef:99:ce:5e:d6:06:76:38:1e:
f7:b0:6a:cd:6e:79:3e:70:31:b0:8d:ca:de:21:0d:
ae:8e:f4:04:7e:31:17:9d:97:ec:81:58:d1:47:e5:
51:b5:53:b1:d8:56:fe:77:4c:a9:06:5c:5e:2a:1e:
70:26:80:a7:0f:12:0b:fa:79:5f:43:6f:12:90:ab:
34:56:6d:d9:fb:20:b3:43:b2:d4:c8:c7:03:d5:4e:
28:65:7a:0c:45:9b:10:68:db:62:dc:7a:8b:ab:82:
c8:9d:b0:d8:96:1e:2f:a0:34:d2:d3:ae:ee:a4:ce:
3b:0f:9c:0e:04:2e:e8:3a:15:5c:44:66:87:f6:3e:
f0:9d:93:24:d6:4b:e7:bc:9d:58:8e:b2:25:7f:38:
09:ec:8d:10:85:9c:1c:ea:72:8a:f9:63:40:bf:7a:
8f:9b:b9:7e:0c:9c:9f:e1:fc:d1:6b:ab:bc:e3:69:
fc:ac:b2:71:02:21:f5:17:b9:5e:be:33:b2:82:09:
ff:5d:82:59:32:07:c7:bb:91:21:37:2f:5c:b2:28:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:83:8F:CF:30:3F:82:F5:68:A5:AD:B5:C8:B3:A6:DA:01:77:AD
X509v3 Authority Key Identifier:
keyid:08:D3:81:CE:24:23:10:61:81:5F:32:04:3C:65:22:66:AD:BB:D8:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOBziQjEGGBXzIEPGUiZq272GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5b7ef8-e71f-429e-aadf-6cb78e95ab44/1/CNOBziQjEGGBXzIEPGUiZq272GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:03:2b:68:d1:94:80:3c:48:c2:c8:c0:e4:a5:c0:35:e6:a1:
e8:4e:0c:73:f9:d9:2c:ac:0d:d0:18:11:c2:63:4b:d1:d4:a8:
6f:19:57:bb:83:c5:a5:24:d9:55:ea:b3:f2:1f:27:59:d3:49:
ba:a4:b1:a7:67:a2:60:6f:b1:67:c4:18:3e:40:2f:27:dc:05:
60:81:6b:a4:1f:fc:b0:36:60:f1:aa:b9:1f:4f:00:79:47:30:
43:40:57:e8:e7:e6:b2:72:16:cc:55:8a:cf:3d:1c:b3:d9:fb:
fc:c0:3a:9c:98:3c:b0:d0:51:10:13:1a:ef:7a:14:6e:f2:4c:
79:22:6c:f4:2b:7a:50:5d:3c:0a:28:84:ea:7c:cd:f0:49:67:
73:8a:67:7a:26:fe:63:de:41:b6:9b:54:2f:3f:21:a2:89:d5:
94:32:76:20:1f:1f:93:e3:ff:2a:d7:d3:06:83:e4:76:d8:5e:
ab:3f:18:ec:ea:e7:b5:5b:27:5d:bb:68:f9:17:73:07:b9:5e:
5b:91:45:b6:52:4a:7c:0e:aa:d5:9e:d0:a0:04:59:3f:93:d3:
8b:1e:e3:8a:9d:59:ff:0e:bf:35:e2:21:0f:04:bd:13:6d:ca:
60:5a:55:bc:b7:9f:2b:fc:0a:56:3a:6f:b0:57:8a:f8:46:5a:
40:86:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:09:46 2025 by rpki-client