Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
File: IKo_sAxQTBoJEqNJWo49uvPZako.mft (raw, json)
Hash identifier: qYFjOElFOIBH5Cz6Xi1hpQ6Map4h2ySIm8hvwmBKGh0=
Subject key identifier: 15:89:C4:5C:E8:32:8B:B8:4A:12:92:A6:C0:D4:10:E1:4C:01:10:4A
Authority key identifier: 20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
Certificate issuer: /CN=20aa3fb00c504c1a0912a3495a8e3dbaf3d96a4a
Certificate serial: 0194BBCEE001B4E34A6C8F036173087BC420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
Manifest number: 044E
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: IKo_sAxQTBoJEqNJWo49uvPZako.crl (hash: 06g13wfudsEvzHy6YpZ4C3UBW+jrrhPya1A25Qf2Nqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e0:01:b4:e3:4a:6c:8f:03:61:73:08:7b:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa3fb00c504c1a0912a3495a8e3dbaf3d96a4a
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=1589c45ce8328bb84a1292a6c0d410e14c01104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:53:dd:fa:aa:72:03:2a:46:66:23:6d:93:
92:1a:99:74:24:78:74:25:03:7b:30:5b:f8:f9:21:
9a:60:56:52:21:7e:3b:6e:9f:6e:29:4f:c1:cb:0c:
93:3b:dd:db:f2:32:39:65:ad:3c:b3:fe:dd:33:4a:
e8:9e:60:ca:28:4e:0f:7d:1b:5c:96:ce:fb:96:25:
49:59:78:23:8c:5b:da:96:ed:48:09:aa:ef:47:f4:
c0:7e:f9:51:08:32:c3:33:19:f0:f6:c3:5a:1e:57:
b9:13:30:b9:3b:4d:be:5d:e6:7b:b8:a2:0d:03:72:
e3:0f:83:b1:86:a8:e2:ed:96:86:3a:64:ac:cb:2a:
e7:da:62:ab:62:89:89:f2:78:7d:15:78:c7:1c:5b:
e0:26:60:4f:07:a2:2c:40:f1:ed:96:62:58:2c:6d:
7e:13:10:b7:5e:ec:3b:5e:95:0e:c7:d9:94:64:aa:
87:a1:af:15:31:b3:14:2e:9e:29:a4:cc:8a:58:3b:
63:6f:9f:70:a9:12:9b:66:c7:06:78:dd:57:df:4c:
a0:f7:69:f0:94:c8:67:77:7e:75:9c:dd:bf:e0:11:
b6:dd:86:e6:8f:63:bf:85:98:bd:72:93:4c:db:af:
d4:b4:a8:8a:31:47:2f:de:6e:4b:ec:80:59:86:61:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:C4:5C:E8:32:8B:B8:4A:12:92:A6:C0:D4:10:E1:4C:01:10:4A
X509v3 Authority Key Identifier:
keyid:20:AA:3F:B0:0C:50:4C:1A:09:12:A3:49:5A:8E:3D:BA:F3:D9:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKo_sAxQTBoJEqNJWo49uvPZako.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/67b42a-cac3-4216-b518-d74a4d4f52b4/1/IKo_sAxQTBoJEqNJWo49uvPZako.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:48:09:d0:f6:d0:29:8c:a1:24:f3:2d:c1:a6:f3:2d:02:
5f:c2:2b:6a:1b:64:62:97:dd:18:e0:9e:c0:d0:04:18:d6:dc:
19:5e:a7:9b:a3:3c:fa:a5:90:34:99:c2:07:28:14:7a:3c:ce:
75:d0:e3:2c:ce:84:4f:e5:7d:11:00:a9:11:2b:2c:c0:fd:fe:
9c:b9:c4:dc:ed:58:3d:7f:a2:cc:da:e0:15:8a:55:dd:c1:81:
ac:13:9f:cf:a3:3e:bf:c0:83:05:3a:da:2c:dc:cf:55:74:37:
f3:d7:bb:cf:f1:c9:0f:81:0a:76:d7:b0:1a:d2:0e:c1:db:43:
1a:58:58:ac:cc:65:37:09:de:cd:b0:2c:d1:23:4b:00:2a:0b:
4f:76:d1:d9:34:68:b9:75:4e:ea:31:80:6d:b3:2e:78:bc:88:
3f:75:bc:f4:6c:b1:6c:cf:14:5c:08:8b:42:b7:bb:15:ab:b3:
a0:33:19:38:5a:66:19:7b:b5:00:48:d6:29:d9:5e:4a:a3:de:
9c:99:97:36:53:43:dd:f4:2d:d1:06:c8:f0:28:73:0a:fb:24:
dc:14:2f:9a:08:bd:81:43:2a:04:17:71:e7:2d:ee:a3:1e:8b:
88:c5:7d:e9:ec:72:fa:84:4d:91:da:41:95:9d:52:ac:6b:2b:
f0:4c:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:37 2025 by rpki-client