Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ab312e-a2b0-4cbc-95d7-785433bc15da/1/CAKOg6b1MfVXnP-UWbBfnAMIN8U.mft
File: CAKOg6b1MfVXnP-UWbBfnAMIN8U.mft (raw, json)
Hash identifier: 9Vq5Wx2W0EgzDoXcJ5TmgNXgy7aPXArATAZ7WiU7vec=
Subject key identifier: A4:70:B7:30:AF:07:05:B2:3B:B1:9F:FE:FA:88:D2:41:6B:0F:50:E8
Authority key identifier: 08:02:8E:83:A6:F5:31:F5:57:9C:FF:94:59:B0:5F:9C:03:08:37:C5
Certificate issuer: /CN=08028e83a6f531f5579cff9459b05f9c030837c5
Certificate serial: 0190C391ED43B92111A13318E5D37EB77E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAKOg6b1MfVXnP-UWbBfnAMIN8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ab312e-a2b0-4cbc-95d7-785433bc15da/1/CAKOg6b1MfVXnP-UWbBfnAMIN8U.mft
Manifest number: 1A
Signing time: Thu 18 Jul 2024 02:00:38 +0000
Manifest this update: Thu 18 Jul 2024 02:00:38 +0000
Manifest next update: Fri 19 Jul 2024 02:00:38 +0000
Files and hashes: 1: CAKOg6b1MfVXnP-UWbBfnAMIN8U.crl (hash: 0tGAiGjzcAmClfPoH9PGP/6FvNZ/Y9KdJ2VuEPP1Ghk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c3:91:ed:43:b9:21:11:a1:33:18:e5:d3:7e:b7:7e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08028e83a6f531f5579cff9459b05f9c030837c5
Validity
Not Before: Jul 18 02:00:38 2024 GMT
Not After : Jul 19 02:00:38 2024 GMT
Subject: CN=a470b730af0705b23bb19ffefa88d2416b0f50e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:43:be:9a:09:eb:8f:ff:e3:ca:91:c8:32:
8e:d8:ee:e8:bd:52:22:cb:b7:80:75:5e:d3:f9:8a:
27:45:6e:a0:3e:f1:2f:96:35:fa:7c:33:9f:8e:78:
72:46:8b:3d:33:3c:3f:ab:f2:6b:77:56:3b:2c:51:
7c:8e:5b:b3:8d:5a:89:97:53:88:ea:21:5f:38:f6:
fa:13:31:d8:81:32:ff:e9:44:3e:c1:2c:a6:58:58:
ac:88:89:30:1d:6a:3f:9a:81:b4:3c:b5:76:83:b3:
f2:a5:89:7f:d4:0d:aa:b4:5e:47:70:74:51:58:22:
00:70:a8:dd:e0:b2:f1:75:cc:29:d9:f2:4f:1e:11:
99:bc:d7:85:0e:9a:0e:42:44:c0:5c:7a:25:79:ad:
69:fe:04:8f:5d:54:f2:59:67:08:8a:63:b4:dc:12:
71:2b:b2:a6:7a:03:20:a4:24:ac:b0:ac:17:9e:cd:
b2:ae:c5:23:11:27:b6:f6:33:0c:d5:0e:27:98:d7:
0b:2a:49:ce:7c:0e:55:1b:25:5f:7d:f4:5d:2e:25:
10:d8:26:03:d1:f9:ca:9d:0e:2c:ce:e8:35:eb:f2:
21:48:ec:84:01:c5:d7:e1:af:55:fd:f8:0d:1a:0d:
34:44:50:e5:db:f2:6d:86:4c:90:8e:a4:fe:ff:73:
44:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:B7:30:AF:07:05:B2:3B:B1:9F:FE:FA:88:D2:41:6B:0F:50:E8
X509v3 Authority Key Identifier:
keyid:08:02:8E:83:A6:F5:31:F5:57:9C:FF:94:59:B0:5F:9C:03:08:37:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAKOg6b1MfVXnP-UWbBfnAMIN8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ab312e-a2b0-4cbc-95d7-785433bc15da/1/CAKOg6b1MfVXnP-UWbBfnAMIN8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ab312e-a2b0-4cbc-95d7-785433bc15da/1/CAKOg6b1MfVXnP-UWbBfnAMIN8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a4:b3:cf:1a:f1:19:85:e5:e3:dd:0d:14:90:b6:98:69:46:
37:e4:0c:48:4b:00:f3:8e:f5:80:2a:db:df:71:a2:b4:cb:6f:
cf:b8:e2:2f:a7:85:46:77:1e:ba:02:48:c4:eb:14:c7:5c:ff:
be:03:69:42:60:20:04:e6:0e:a9:64:32:bd:64:36:d4:72:e1:
97:64:d5:39:ff:83:bb:70:96:f4:4f:50:d0:a9:42:4e:aa:80:
f5:e3:f1:7e:70:94:a8:37:01:c2:b0:b6:69:a9:27:35:0c:de:
be:90:fc:55:bd:15:78:39:d2:81:27:14:eb:d6:2e:6f:99:16:
b9:d4:7d:ab:e2:c0:5e:62:96:91:11:52:4f:6d:fe:33:03:e7:
86:61:7b:6c:cf:d9:36:75:03:eb:25:c3:f0:04:d1:16:03:ae:
68:af:c7:86:0c:40:2b:a1:38:b5:e3:e9:63:ed:34:a7:06:21:
df:ff:b9:79:42:b8:60:f6:c2:2a:a5:12:ea:71:f9:e4:b6:db:
aa:40:73:57:b1:0d:f6:86:13:2b:0f:13:7b:e2:c2:bb:26:ee:
b5:7e:5e:c3:98:99:65:18:c3:b4:ad:38:59:32:8b:2e:9b:19:
48:31:d3:2a:7a:72:52:5d:d7:6d:28:c2:97:81:d0:c2:a4:2d:
74:86:69:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:50:56 2025 by rpki-client