Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier: azWDdhHbF7cKm+UpgiHnG20j+0bSfcHDxayTcVqXHUc=
Subject key identifier: C1:29:91:0E:81:4E:B8:B3:6D:94:FC:6C:B7:4F:B0:40:9F:87:DE:B9
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer: /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial: 0194BD85AEE29FEA3E8EBA41D6B86FC5CFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number: 0224
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: 42RTQ8vZDSG59+r2uIK63hBYN+XP1VIrf9DmcPx01Gc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:e2:9f:ea:3e:8e:ba:41:d6:b8:6f:c5:cf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=c129910e814eb8b36d94fc6cb74fb0409f87deb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:f4:c3:10:f7:7c:08:ef:e9:43:c8:4b:b9:
73:1d:48:51:bc:60:d5:d0:a1:8e:02:9a:b9:49:8c:
37:d0:a2:80:b5:96:7e:97:fb:b9:b3:4d:bf:71:c6:
b1:18:17:29:55:f5:7c:ca:5c:7d:5f:f4:b3:70:89:
4a:f2:6d:17:30:d0:79:9a:52:92:36:4d:c6:0f:ee:
4a:7b:e8:c4:39:97:a6:3d:69:4d:08:0e:7b:74:eb:
fd:8d:6d:ea:64:d9:43:ea:c0:80:2d:0e:f3:ed:38:
d1:d3:80:a3:95:05:38:f0:fd:9c:10:62:2c:d3:3d:
04:f4:06:0c:7e:65:b5:6b:fc:36:50:76:9d:0c:67:
1d:ab:b8:93:df:b8:ae:2a:67:53:e9:ff:c3:46:cb:
5d:3a:93:b5:df:83:71:f7:c0:6f:14:2f:27:45:e0:
c9:ec:af:76:4d:38:6c:e8:54:3d:ea:a8:e9:1a:c4:
45:c7:46:8d:d4:e9:5a:3f:11:19:97:77:ab:5b:bb:
af:19:cf:59:78:5d:45:37:e6:9d:1d:b5:30:55:c6:
7e:83:56:c5:f7:3d:92:4f:f6:0f:3b:d3:65:1e:17:
1e:32:0d:85:ba:27:67:3f:cb:98:9d:5b:49:ce:aa:
14:0f:9a:73:97:1b:55:b9:8d:14:24:4a:8a:37:e4:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:91:0E:81:4E:B8:B3:6D:94:FC:6C:B7:4F:B0:40:9F:87:DE:B9
X509v3 Authority Key Identifier:
keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:be:69:d1:28:8e:79:ef:b1:09:09:34:54:07:c7:8a:52:bc:
d5:a7:ac:96:21:a2:4c:19:4e:4e:ee:b2:1b:c2:76:1d:7f:1e:
6e:99:80:99:5c:21:1c:3b:52:a3:09:d8:bd:74:e1:9d:2d:44:
91:7c:ea:b2:af:54:0f:7f:07:7a:1a:07:19:b2:25:5c:e3:a5:
c3:1e:95:03:b2:ba:b5:1c:45:6b:15:1a:8d:19:19:73:5e:81:
97:fb:81:f7:81:40:a2:bc:f7:21:d8:f6:aa:19:40:5a:89:b1:
c4:4c:a6:d3:f2:09:7a:8c:26:4d:cd:94:32:77:c9:23:31:23:
43:2f:df:96:7b:4d:11:5d:5e:87:28:87:f8:4d:d6:4b:fb:7b:
1f:e5:d3:4e:22:ad:1d:ee:c4:dc:5c:b2:ff:3a:9c:94:08:3d:
c9:e7:73:f5:70:c2:80:34:80:44:ae:c7:ad:1c:19:98:e6:2b:
7a:ba:62:e1:0d:3a:1a:b9:22:3d:d1:4d:b0:c1:cb:61:e2:dc:
7a:45:06:0e:83:e9:f8:f4:87:38:55:48:0e:07:7a:94:56:d7:
8a:9c:96:ad:f2:39:e6:a4:0e:e5:a8:b7:6d:ab:90:ed:16:fc:
cd:92:19:e5:ec:5d:ae:a5:62:fc:67:ea:d3:fe:1d:cc:e4:9f:
95:18:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:57 2025 by rpki-client