Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
File: CoRnuQcocepoG1eg2AHdo4xr_3U.mft (raw, json)
Hash identifier: hEhyTs5OkNmpe2VMITwNzDCmVXpcb0CXarhy9iMIRAE=
Subject key identifier: 14:8F:2D:87:AE:91:DC:85:87:25:21:C7:6D:82:F1:59:69:8C:AC:24
Authority key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Certificate issuer: /CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Certificate serial: 01948F62E3EF1A8DF7F9B704160BAA393128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
Manifest number: 0442
Signing time: Wed 22 Jan 2025 19:00:10 +0000
Manifest this update: Wed 22 Jan 2025 19:00:10 +0000
Manifest next update: Thu 23 Jan 2025 19:00:10 +0000
Files and hashes: 1: CoRnuQcocepoG1eg2AHdo4xr_3U.crl (hash: KUk9my6ACgvB5Gf/ui+lbSqrYB0vm9qvSDVN1ihirFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:62:e3:ef:1a:8d:f7:f9:b7:04:16:0b:aa:39:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Validity
Not Before: Jan 22 19:00:10 2025 GMT
Not After : Jan 23 19:00:10 2025 GMT
Subject: CN=148f2d87ae91dc85872521c76d82f159698cac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:09:19:16:7b:69:98:e5:9c:fe:71:7e:d7:
85:17:29:2b:f1:e7:f9:a9:6d:50:c5:63:df:af:e3:
7f:f0:87:db:ea:8a:4b:5f:56:2e:43:b7:e1:c9:73:
fc:79:cf:da:70:43:ec:9f:1d:37:10:08:a2:71:50:
98:ab:43:b7:59:e8:12:42:83:e5:09:92:47:2e:84:
53:38:2f:aa:45:99:8d:b2:de:d7:2f:46:2f:f1:9d:
90:d7:a3:f3:de:21:02:b7:19:62:41:9e:9a:cb:17:
eb:ba:18:d8:87:d4:e4:4e:ef:4e:95:d6:cc:af:18:
00:5f:9e:af:b3:3b:b2:65:de:7d:a1:2e:92:35:50:
58:6d:d3:6c:20:4c:1e:e7:a3:d1:fd:b6:48:de:6f:
10:56:83:43:c5:8b:e5:0c:43:66:70:7d:f1:bc:af:
ae:bd:6f:c7:ea:29:70:b9:9b:be:d2:0c:7b:a9:8f:
6b:a5:c8:ce:97:d8:42:d5:ad:92:0f:67:26:1a:b8:
aa:30:ab:ca:72:f9:6f:95:02:2c:65:dd:b4:97:01:
72:76:ea:17:f8:30:1f:c4:1d:bb:0b:06:64:48:26:
29:85:9e:82:2f:fe:6a:28:1e:6e:31:8d:7d:cf:74:
c1:1e:80:a3:c5:a4:d8:31:5d:74:83:89:9b:45:28:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8F:2D:87:AE:91:DC:85:87:25:21:C7:6D:82:F1:59:69:8C:AC:24
X509v3 Authority Key Identifier:
keyid:0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:86:b0:f3:9a:84:46:2d:cf:bf:31:ce:c5:ff:b1:e0:fa:
ff:dd:aa:89:fb:62:80:50:19:17:21:32:a5:a8:37:20:9b:5c:
b5:01:4e:e0:8a:93:bb:43:b4:2e:d2:cd:03:5a:1e:86:f0:b1:
31:38:5d:25:7d:b1:04:04:4b:5f:f9:65:29:2e:0f:ce:f5:21:
b7:b8:ed:8d:98:12:3c:64:99:74:bc:0d:dd:af:ac:60:d9:8b:
0d:3e:15:7b:3d:19:6d:9a:96:d5:0c:28:1d:65:66:a0:2b:32:
9b:93:b2:de:66:b3:b6:0a:f5:81:1c:92:ff:29:a6:ec:b7:2e:
03:9f:0c:7e:8c:b3:43:99:87:0b:63:14:c6:29:af:e0:c2:80:
fe:a9:3d:b9:df:e2:4b:3f:29:90:e0:1d:0c:46:fb:c2:6b:e2:
26:ed:7e:39:0b:f9:6f:a1:67:40:77:42:df:31:fd:96:c8:9d:
4f:c5:3b:cc:53:cc:ff:aa:df:a5:cc:65:07:65:a3:9d:e2:78:
13:7b:a3:3d:62:51:ad:14:f4:d5:6c:6e:18:52:54:04:91:c1:
81:91:c6:46:de:a6:af:06:fa:d0:bc:d4:aa:30:bd:42:36:1c:
7f:ed:1d:c3:ad:6a:b7:6a:f9:90:88:aa:cc:dd:85:9e:a0:b9:
4a:60:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:12 2025 by rpki-client on console.sobornost.net