Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
File: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft (raw, json)
Hash identifier: Svwq3qEXAVfS4khS2XBCHGn+bEBIPHOBSUGBwuulp0I=
Subject key identifier: AC:98:75:AC:C3:05:A0:61:D1:0F:5B:20:82:75:D0:00:F8:EA:25:BB
Authority key identifier: 21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
Certificate issuer: /CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Certificate serial: 0194BBCE040F57FF6ADFB32FED7EAC6A8CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl (hash: Dawj1SUXovbVkriNRA62b+kgv3IcG5DFsosVrmFjF/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:04:0f:57:ff:6a:df:b3:2f:ed:7e:ac:6a:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=ac9875acc305a061d10f5b208275d000f8ea25bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:09:25:59:4f:7c:c7:47:ca:8d:27:b0:7b:
bd:36:b9:7e:98:0f:1a:a4:eb:77:4b:4a:07:fe:80:
d6:c7:c8:8e:f3:76:50:76:9b:e4:4d:5a:13:96:cf:
a1:38:6d:89:8c:d1:f3:6f:9d:6a:d2:e4:a6:ef:a5:
29:91:a8:60:ec:1c:6e:6a:15:a5:92:00:c1:10:d1:
6c:50:7c:4a:4f:12:c8:b6:d8:90:95:fe:df:9b:fa:
b3:4e:a8:b4:36:c7:5b:6d:7c:15:b4:6f:e2:c8:23:
51:cb:c4:46:c7:39:d6:8b:bf:c1:39:16:81:03:e5:
44:a6:13:5b:2c:95:66:d0:40:e6:a1:4a:90:a1:08:
88:ae:99:a2:33:f8:aa:6f:4b:7e:5b:69:54:0e:2c:
0b:7c:eb:eb:04:da:e4:95:1a:ee:06:6c:63:3a:4d:
f2:14:7a:55:b6:da:35:45:3f:af:39:ec:2d:ee:10:
3f:fb:02:4f:9c:1f:72:67:8e:7b:3f:dc:b1:f3:4b:
9e:1e:27:e6:ed:c3:d1:b7:76:c8:b4:46:1c:bf:b0:
32:10:ae:d8:e5:d7:5d:fc:3c:12:79:70:d4:79:98:
96:05:31:6f:cd:1d:94:c9:5e:04:2b:c6:c9:3f:57:
0b:86:99:ec:ec:23:35:a4:11:08:ab:98:1d:99:1f:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:98:75:AC:C3:05:A0:61:D1:0F:5B:20:82:75:D0:00:F8:EA:25:BB
X509v3 Authority Key Identifier:
keyid:21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d5:c8:c2:80:fa:7f:f0:04:55:e1:5a:2b:dd:1b:23:70:27:
1d:0a:2a:2e:e6:53:fc:25:fe:2a:7f:2b:a0:72:f2:ca:f3:58:
6b:7d:c8:4a:b1:17:0c:ba:fb:da:fb:f8:1d:ba:cd:72:28:97:
4d:1b:b6:ce:45:f8:3c:d9:40:61:81:67:52:96:29:1c:8d:1d:
42:9c:ae:fc:6a:d4:c5:5c:18:7a:14:7b:b0:32:2e:12:1b:f6:
8d:f4:1a:ab:f5:b0:05:25:93:2f:e3:91:03:aa:06:d3:7a:2a:
cb:f5:e6:ef:14:72:3a:0a:49:69:d0:33:1a:83:6d:eb:ae:93:
dd:aa:a7:87:97:d4:dc:d8:51:19:25:2c:d1:24:b0:53:ad:08:
ed:54:45:65:17:59:7d:c5:b5:8b:b9:4f:9d:5e:b4:05:49:1b:
92:4d:9d:f5:29:aa:1c:16:dd:00:fb:b4:5e:d2:1c:f7:24:d3:
da:74:33:4f:34:73:ac:56:93:d4:c2:25:20:eb:24:03:10:50:
7d:d1:d4:b3:b8:fb:2e:b4:ea:f0:78:8e:44:70:84:9f:0b:0c:
a9:a2:97:12:77:04:9c:1f:94:e3:4c:1b:4c:f8:79:b6:b5:39:
e3:98:23:70:aa:bc:fa:ae:d7:b4:6d:4d:51:a8:26:1e:e3:5e:
eb:5b:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:06 2025 by rpki-client