Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
File: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft (raw, json)
Hash identifier: Ay/As+NiDMQ2kQeI5im9ahel2Mx2jm3TH0s47RPkFXo=
Subject key identifier: 1D:F8:13:97:CA:22:02:AA:2F:27:48:2F:9E:1C:A8:85:95:B1:78:8F
Authority key identifier: 8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
Certificate issuer: /CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Certificate serial: 0194BBCECDD20B361137059AFEF6CC6E7C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
Manifest number: 0AA3
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl (hash: enuv3bhunjDAtyz2QMLpHR76czmG+JzQfoLfObgTI9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cd:d2:0b:36:11:37:05:9a:fe:f6:cc:6e:7c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7be7a47606ab38391fb21542b5f4061f02a852
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=1df81397ca2202aa2f27482f9e1ca88595b1788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:42:1c:ec:d8:f4:93:f2:c4:04:97:b7:c1:
e3:80:69:be:f1:d3:d6:de:08:d0:14:cc:0d:ab:cc:
5a:fe:ec:89:95:a5:04:c9:73:90:0c:08:a0:1c:06:
75:9b:83:28:68:7b:a5:c6:54:14:36:33:5a:45:96:
9d:09:d7:e1:66:91:a6:d6:15:7c:58:50:92:40:ae:
9a:3f:dc:7f:58:88:24:a5:b9:f9:fe:e2:3c:3f:73:
f8:97:00:cf:1e:e7:11:a7:7d:d9:a9:87:05:1e:0c:
b0:4d:a0:f8:b8:e3:f1:e9:aa:b2:c0:e8:b3:27:9f:
15:8d:5b:f0:ca:32:8a:fd:a2:c4:73:59:7d:e0:75:
cb:d2:b8:53:c2:4b:f6:c3:1a:66:b0:bd:64:c8:91:
8e:be:45:1d:02:44:b8:1f:75:d6:8e:68:f6:b2:41:
f7:52:55:cb:5f:e1:45:14:e0:f8:77:bc:b3:20:d6:
09:f0:e0:7f:e1:7d:3e:b1:b9:7c:be:bd:98:d9:7f:
20:7e:bd:c8:6a:16:19:07:94:5c:db:8e:4b:1a:5b:
8b:ec:b1:84:42:80:01:ac:21:75:72:6a:46:c6:9e:
6b:c0:bd:a3:e4:29:20:f7:2f:f2:47:5e:3c:b3:6b:
e3:50:dc:e9:73:61:bf:ca:96:4f:b4:af:b5:97:82:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:13:97:CA:22:02:AA:2F:27:48:2F:9E:1C:A8:85:95:B1:78:8F
X509v3 Authority Key Identifier:
keyid:8B:7B:E7:A4:76:06:AB:38:39:1F:B2:15:42:B5:F4:06:1F:02:A8:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/247c5d-a272-482b-9c8e-37fe395d42f0/1/i3vnpHYGqzg5H7IVQrX0Bh8CqFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:83:db:5a:39:fc:cf:25:4c:31:18:d9:8d:5b:76:42:a1:91:
c7:8c:77:b7:c5:77:6f:c1:82:89:55:3e:cf:7f:33:0b:76:ef:
9f:13:94:ff:65:31:f3:1c:de:aa:94:68:a7:89:53:0f:31:fc:
1a:b0:dc:0f:35:19:e6:49:55:94:2d:11:65:9f:ee:df:29:45:
46:09:e4:54:97:f3:10:2f:16:a9:08:f2:8a:50:b8:d7:4d:d1:
5c:cf:57:d9:61:b5:a7:31:10:c1:cb:44:ed:58:fa:04:d6:b1:
4d:97:8f:b5:9d:0f:cb:15:75:6f:48:5b:5a:a9:56:67:2a:01:
13:97:13:e2:23:8b:b3:3a:f6:38:93:80:32:44:b9:dd:6d:dd:
2f:64:a3:15:ef:d7:f7:ec:18:66:4f:e4:82:3a:9e:7c:cc:57:
48:eb:da:da:92:46:dd:2e:d8:0c:72:fd:e1:f2:30:cd:dd:30:
d7:ef:ca:67:61:51:a9:da:7f:3d:f0:04:67:73:1e:f3:a5:d6:
0d:b7:ab:3a:55:f4:2f:6b:df:49:3c:58:29:32:06:4c:94:52:
29:72:d4:21:9a:b4:26:6e:55:0c:43:73:03:73:2c:46:ac:f9:
6c:b8:6e:1f:fa:f2:db:f8:3f:ed:48:15:8a:13:00:6f:3c:47:
a1:b4:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:57 2025 by rpki-client