Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: SilRVMWNt2QUZoMS3a7KVPXHlpdAD8OiK0BQzZLcfG8=
Subject key identifier: C1:0B:DC:39:50:D7:C4:F2:13:A6:84:51:69:AA:97:C5:3E:36:FA:A1
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 0194BBCDDADBD970411E342744277D8E3A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0772
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: NuC9CemxrZO9WhVoPUfeu0PW85FmA+K0VCLZz36zce0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:da:db:d9:70:41:1e:34:27:44:27:7d:8e:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=c10bdc3950d7c4f213a6845169aa97c53e36faa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:96:75:62:f1:d4:c1:fa:45:f9:b8:61:5c:
a9:1f:de:d5:6e:ad:2c:52:95:60:1f:d0:d1:be:f5:
d1:e9:c1:13:fd:37:02:7f:cf:08:2c:52:5b:e0:0c:
0b:1d:09:aa:68:a9:34:ff:f5:a7:0f:90:10:d3:5f:
af:b5:9c:63:bf:a7:ad:15:99:b5:fc:c3:55:69:23:
87:1b:f7:43:99:c5:d1:62:44:f6:6b:b9:48:f8:5e:
ec:07:c3:b5:3c:b4:8a:56:de:2e:3a:27:49:b4:74:
0b:e3:f0:9d:77:60:05:6a:c1:c5:d7:ca:01:17:69:
13:8b:84:11:ba:51:e2:8b:b3:3e:f9:6b:a7:07:ec:
02:ea:99:46:60:e7:d4:73:f5:15:f3:ef:ae:be:6c:
c1:4c:e8:7f:3e:4b:40:e6:60:aa:5a:ed:19:9a:f2:
47:74:81:42:58:c0:ad:b5:de:86:03:0d:0b:91:59:
10:46:3d:91:a5:32:6f:10:bf:c2:8c:02:f0:1c:7f:
56:89:24:4c:29:a6:2a:1d:92:4c:02:f8:6d:01:52:
b5:64:1f:97:58:00:8f:d5:58:31:6c:94:c8:b7:1e:
59:12:2f:8c:2e:99:79:2b:73:ac:b1:52:db:8d:76:
9e:f9:ea:38:74:e5:97:b2:ed:64:56:28:3e:c3:94:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:DC:39:50:D7:C4:F2:13:A6:84:51:69:AA:97:C5:3E:36:FA:A1
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9a:1b:a4:2a:47:dd:a8:a0:42:83:02:8b:69:08:8a:e7:57:
b7:85:16:a2:8d:b5:d6:59:1e:16:14:50:9f:51:d1:81:ad:7b:
6d:5b:d1:98:bd:85:00:fe:80:85:27:c2:21:aa:fa:8d:e0:17:
55:54:4f:c0:ed:d7:00:35:9a:6f:fe:49:80:63:8a:bb:ec:0e:
7f:ef:96:d7:2d:02:4b:b4:7e:5d:2f:cc:4c:11:6e:4a:54:ec:
5e:ba:58:7f:88:1c:4b:2a:9e:85:42:b0:6a:c0:3f:73:5f:f7:
f8:7a:4a:dc:3b:b1:cc:d1:3d:aa:11:7a:af:74:44:19:5a:40:
80:76:3b:e2:13:e5:0d:85:61:07:a3:a1:50:b9:88:87:7a:90:
e2:5f:e8:82:5b:32:99:a4:1f:29:e7:c2:de:1b:61:37:6d:f1:
2e:d2:6b:ff:15:57:5a:31:8a:a1:b4:40:ee:6f:96:59:0d:4a:
04:61:14:87:ae:69:44:9b:f7:eb:60:e4:79:78:47:b2:fd:e3:
c6:38:1a:42:4c:65:10:47:bc:1a:19:ca:ad:0d:45:a9:f3:c1:
02:7c:ce:4d:37:2c:c1:74:7b:d1:6e:02:2a:dd:a3:b1:17:84:
55:1d:5f:45:f1:fd:ac:61:8e:90:9a:63:6c:7d:8c:48:05:d5:
6e:7b:ae:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:50 2025 by rpki-client