Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier: 52yM9YzeWF50+HpyKvXFW5Kw0TuLmCvhTuUjZPp2pg4=
Subject key identifier: D6:FF:EB:3C:61:FC:EC:91:E6:05:8A:F2:AE:B2:4B:65:5A:0C:84:57
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial: 0194BCAA0F3D12604CAB3332BC849EC11777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: kHdXCD7F8aGS3qA1A6Hhpy7FmKozaxssiClDDx5/2ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:3d:12:60:4c:ab:33:32:bc:84:9e:c1:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=d6ffeb3c61fcec91e6058af2aeb24b655a0c8457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6b:c6:42:d5:13:70:99:a4:87:52:e1:1e:33:
2a:af:3e:c1:4f:c8:fc:e1:9a:51:b9:6c:f6:c2:06:
f3:c6:34:3d:4a:5d:a0:af:9f:94:c7:8b:c5:d0:50:
6c:c9:38:ff:f2:1a:5b:ec:4a:da:39:24:52:4f:fa:
23:b8:7f:73:92:c0:40:06:b9:18:9a:bc:f9:35:7e:
37:17:84:71:58:f0:48:fd:d4:19:35:55:55:51:46:
dd:dd:e9:ef:75:8f:fb:05:30:9f:12:58:3e:0f:e7:
3b:93:c6:a9:6b:a1:3f:4e:07:3b:0c:98:65:6c:0c:
70:44:d6:a3:d8:1c:1a:53:a4:af:18:4e:4d:8d:28:
68:d4:c8:71:22:f5:cc:99:d8:6b:f8:52:3d:35:11:
09:60:ad:ff:5a:fb:b3:0b:7d:b2:70:fe:5e:13:46:
f7:a7:f3:77:b7:24:82:d5:ea:88:9d:48:31:88:cc:
b5:ec:42:72:71:d2:e8:1d:ff:2c:a1:24:eb:9f:17:
f8:cb:76:95:51:31:f9:f5:73:cf:b9:10:75:16:0c:
c0:12:e7:c2:23:fe:70:fc:91:71:9f:a3:e8:d1:11:
23:51:ed:ef:ee:7f:63:4c:3e:4f:e7:36:99:8f:b7:
01:fa:20:f2:fd:49:90:e1:82:2d:d5:4f:99:df:63:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FF:EB:3C:61:FC:EC:91:E6:05:8A:F2:AE:B2:4B:65:5A:0C:84:57
X509v3 Authority Key Identifier:
keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4c:98:8f:8f:8c:57:8d:9f:26:9d:b6:91:a2:7e:0d:6f:9f:
c8:84:21:81:93:a4:91:0c:eb:0b:88:2e:4c:13:31:a9:25:93:
02:ab:cf:27:1b:7a:52:23:d9:21:c6:8c:5d:b5:75:8f:02:f3:
4e:11:67:6d:36:ff:4d:2f:b0:95:38:6d:27:8a:4a:7c:e5:89:
8f:fa:98:8d:68:e5:3a:62:8d:1f:35:b3:b2:59:bc:2e:01:97:
b8:a6:bb:d1:0e:58:58:30:c5:40:4b:e3:dc:7e:39:b6:ed:87:
8b:70:89:e2:e4:70:63:59:51:39:8d:e4:02:85:40:84:9f:4f:
4a:45:a2:ff:35:e6:4a:af:33:a3:49:c4:a0:a1:01:b4:f7:1c:
fa:4c:c7:b0:7d:16:b3:11:0e:7b:fd:50:81:46:b5:c7:e2:68:
99:0f:3a:a1:0b:2e:be:bb:d7:e1:20:8f:e9:b9:c5:87:53:5b:
07:0b:a5:27:68:39:4c:55:73:33:11:75:c5:fa:1d:c4:b0:82:
1f:f1:cc:eb:08:8f:83:56:01:d9:7b:d7:8a:33:44:b7:7f:54:
5b:6d:01:4b:ff:8c:be:66:df:10:cf:62:f0:7d:56:94:3d:92:
15:2b:1c:ac:77:04:ea:73:25:3c:a5:19:5b:a9:22:ca:1c:6b:
0f:ee:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:45 2025 by rpki-client