Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
File: CPyq-NF90aZXlfcUsmfxvOIZOLk.mft (raw, json)
Hash identifier: 3qr0Pw6lcQ03Iz0SyN5SNPJZWjSsUnhBJCacHYU1Heo=
Subject key identifier: 44:7E:A5:3B:F1:E8:EA:E4:EB:02:82:3F:B8:59:BF:01:00:DA:6E:0E
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Certificate issuer: /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial: 01962F06C0C0AF12ED745419F160049647B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
Manifest number: 0BF9
Signing time: Sun 13 Apr 2025 12:01:33 +0000
Manifest this update: Sun 13 Apr 2025 12:01:33 +0000
Manifest next update: Mon 14 Apr 2025 12:01:33 +0000
Files and hashes: 1: CPyq-NF90aZXlfcUsmfxvOIZOLk.crl (hash: HPIA4evFqIMfD6ubTw+pIRUuLyUmH/nLy1Hza+/n/ZY=)
2: a9IIp-lXURHEn6uSzx2MIUjwzYE.roa (hash: YetmOWjx1SbjgITF8TkhpSIqAkvzS7Zo40g3IaxEfoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:c0:c0:af:12:ed:74:54:19:f1:60:04:96:47:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Validity
Not Before: Apr 13 12:01:33 2025 GMT
Not After : Apr 14 12:01:33 2025 GMT
Subject: CN=447ea53bf1e8eae4eb02823fb859bf0100da6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8a:d7:77:fa:3e:76:9d:2c:96:53:6e:1c:49:
3a:aa:c4:73:2b:c0:bb:3f:34:6d:9c:98:85:0c:1b:
a7:b1:b0:00:4a:f8:27:8a:f9:fc:3c:ca:88:d2:02:
d1:32:96:2b:33:22:fa:e5:34:63:d3:33:50:2b:10:
0a:de:b1:58:9f:66:1d:7e:33:40:ec:63:b6:b3:78:
88:ba:27:b5:e2:a2:fb:5c:33:21:8a:ee:ff:bf:89:
e8:6a:6b:9b:79:2f:42:07:3b:77:70:94:a6:c8:d1:
5e:40:69:60:bf:7a:36:06:c0:98:7c:7c:59:3b:d9:
89:d4:16:20:4e:ad:25:b9:8c:41:7f:74:8a:b2:96:
d7:22:76:51:80:f6:b0:76:ef:ed:71:8b:75:2b:4e:
7e:d9:4d:ab:94:36:f9:21:a5:bf:02:c3:77:a8:b6:
8e:73:8f:36:0c:d8:ef:cf:c6:29:1b:25:23:82:c7:
a0:67:ca:df:5c:33:ac:54:e4:b9:59:8d:d5:da:09:
2d:d4:d0:e0:95:12:1b:fa:9b:40:6b:fa:3a:ee:c5:
9c:d0:d7:38:80:be:ed:27:21:8e:68:a9:f5:a9:66:
48:e9:75:14:2c:22:c9:6e:62:3b:ea:64:94:5c:4e:
7f:5a:b9:88:f5:5d:51:f5:65:88:55:44:28:44:90:
17:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:A5:3B:F1:E8:EA:E4:EB:02:82:3F:B8:59:BF:01:00:DA:6E:0E
X509v3 Authority Key Identifier:
keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a5:ee:6b:a8:25:52:fe:1a:f5:3f:29:ad:d1:73:10:64:5e:
9e:6f:c4:22:2f:38:8d:84:58:69:1d:6b:6f:a1:36:63:92:4c:
ff:34:cf:6c:7f:6c:e1:4b:f0:ae:1d:97:6c:36:cf:59:a5:f4:
53:94:34:c5:41:f7:6d:96:48:bf:6b:51:7a:d9:0c:b1:d4:92:
29:92:8c:68:ec:db:b9:7c:a7:35:0e:cf:3c:e4:c5:41:e1:ba:
0f:7a:28:b9:07:15:e7:2f:5c:ea:73:ed:4c:7e:96:65:ab:b9:
5d:8a:c1:ad:7d:e1:65:77:ee:ee:3e:80:a0:b9:04:ea:b6:1b:
6b:f0:cb:4f:c2:2e:ae:1f:e0:4b:af:80:f6:6d:3d:94:4f:03:
03:f1:09:1a:17:f9:ad:de:2a:78:0b:8f:a0:f0:00:53:ea:cc:
09:60:5e:ed:f9:af:ce:2d:8b:82:86:f2:28:ef:ac:80:95:86:
92:ed:32:72:0c:31:50:73:fc:7f:e5:fd:22:c4:12:72:58:72:
f4:da:14:53:f2:72:d0:1e:8d:97:f7:a2:86:7e:a1:ed:d7:a5:
0e:40:20:b5:55:92:1a:15:0d:87:d4:75:16:9b:83:39:8a:85:
c5:9d:37:f5:70:20:50:c2:25:8e:79:8f:94:98:d9:e3:78:b5:
7d:6c:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net