Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
File: IClZ7xuVPXmKoPVkMafxG2vhltY.mft (raw, json)
Hash identifier: ySwzxkfhypHx1PPlP9p85t289AOUeBMgpJKcitswgqI=
Subject key identifier: D3:41:16:18:3C:03:45:51:FD:D9:38:C7:B7:97:28:67:C2:EC:85:FA
Authority key identifier: 20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
Certificate issuer: /CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Certificate serial: 0194BCA9E7571EB3F3D1B01ECB6FE64BB798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
Manifest number: 1023
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: IClZ7xuVPXmKoPVkMafxG2vhltY.crl (hash: SiUEafEtD1zllY/9jIiEi2q6qeZ6cG5jyCCPB818tIw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:57:1e:b3:f3:d1:b0:1e:cb:6f:e6:4b:b7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202959ef1b953d798aa0f56431a7f11b6be196d6
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=d34116183c034551fdd938c7b7972867c2ec85fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:7b:f2:04:1e:61:8f:5f:4c:54:6f:b4:15:
5b:17:12:d0:49:6c:64:8c:d8:6b:0b:be:62:56:0a:
08:b8:c3:3c:7d:ff:69:42:ab:7f:18:e9:8e:38:8b:
63:50:67:5f:42:8a:55:c0:18:90:0c:ca:68:ea:92:
f3:31:3a:0f:a9:7c:93:7b:bf:9f:0b:c5:71:88:71:
56:00:37:5e:06:68:1a:eb:e0:db:9e:43:74:2f:04:
00:6c:69:35:5e:89:ba:9c:01:f4:d9:30:3a:4a:19:
7e:43:7f:b3:01:dc:6e:72:6d:7b:7d:9b:34:e6:ba:
18:c9:e2:15:c0:ae:89:09:a3:92:a7:81:cc:84:f0:
dd:92:20:6e:6a:e3:ae:17:a6:25:36:94:28:39:64:
59:24:f8:c5:b8:02:44:bc:f4:f3:36:fb:49:12:82:
82:cb:95:5d:f7:16:4f:d6:ef:09:d9:35:c2:43:01:
84:2e:ad:fc:9b:96:41:57:be:45:28:99:1d:90:0e:
27:cd:c4:bc:02:48:92:0b:50:fb:90:fa:7e:b6:fe:
26:d6:fa:43:de:09:51:8c:c9:38:7e:bf:1d:e1:ac:
1e:6e:b2:9a:2e:f3:64:07:e3:59:bb:e2:18:75:ec:
fa:80:aa:99:16:1d:dc:7e:a3:fa:a2:1e:ce:fb:17:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:16:18:3C:03:45:51:FD:D9:38:C7:B7:97:28:67:C2:EC:85:FA
X509v3 Authority Key Identifier:
keyid:20:29:59:EF:1B:95:3D:79:8A:A0:F5:64:31:A7:F1:1B:6B:E1:96:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IClZ7xuVPXmKoPVkMafxG2vhltY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f2ccc0-3732-4351-b770-6b0da9e4fb10/1/IClZ7xuVPXmKoPVkMafxG2vhltY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:ac:3e:f4:74:98:49:0f:27:90:c5:63:e9:b9:d7:8b:78:
27:34:3a:87:00:c3:2b:71:97:c8:f9:35:f0:01:cf:23:0b:62:
8a:20:94:1e:ed:97:0d:5c:8a:a4:4a:ef:b9:9b:70:00:65:48:
3b:58:06:70:36:7a:60:9d:b6:56:c3:5e:c9:8d:5e:48:69:ec:
90:e0:0e:89:6a:8a:0e:96:53:69:d0:48:0b:3b:e6:89:98:3e:
4d:35:ed:ec:d7:e3:39:ca:7a:ae:d5:85:97:90:65:d0:25:32:
64:93:25:b2:bc:11:f1:06:6f:ef:61:34:f3:60:14:cc:79:4d:
cb:75:39:ed:c5:11:53:6b:4c:4d:18:92:ce:76:a6:38:93:6e:
d0:18:65:d8:07:b9:55:f1:a4:13:91:0e:26:b4:6e:2d:7a:85:
c3:0a:7d:7c:1c:73:2a:e5:29:28:0c:ae:e0:7e:02:e2:f4:b4:
0c:91:72:5a:f7:05:b4:00:ee:ab:e8:3e:f7:a4:3c:b3:70:d9:
b8:06:d7:aa:0b:74:9d:68:70:33:a4:73:3e:ab:f7:77:09:e1:
fb:3d:4b:52:13:6b:e3:7c:a6:62:af:69:ec:4c:ed:d7:cf:a6:
44:b2:6a:42:48:f7:81:32:ab:76:2f:62:c9:ad:b6:23:f0:f8:
ef:c1:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client