Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
File: IEBQzFlTby2UB2koI4kMzdqFRQg.mft (raw, json)
Hash identifier: a58tyY8DaY0lPW4duGHtr0ovszYClDkN7P48nJkKiVA=
Subject key identifier: 12:5A:B2:3E:CB:54:59:9D:EC:5B:F7:9F:AB:AE:27:CB:D6:DB:E7:9C
Authority key identifier: 20:40:50:CC:59:53:6F:2D:94:07:69:28:23:89:0C:CD:DA:85:45:08
Certificate issuer: /CN=204050cc59536f2d9407692823890ccdda854508
Certificate serial: 0194BC04F4BFA472F6AC00CE9343674A5799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEBQzFlTby2UB2koI4kMzdqFRQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
Manifest number: 0239
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: IEBQzFlTby2UB2koI4kMzdqFRQg.crl (hash: LLxEgDDyJg/YFfwNkD5bijmNk6D7hsNdEPheby+z0xc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f4:bf:a4:72:f6:ac:00:ce:93:43:67:4a:57:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204050cc59536f2d9407692823890ccdda854508
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=125ab23ecb54599dec5bf79fabae27cbd6dbe79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:fd:f9:b4:52:33:a0:09:0e:2a:c1:18:70:
6a:19:23:55:f5:4b:24:5b:ad:d6:ee:c6:7c:9d:88:
f5:de:a5:22:7f:bb:72:f3:53:7f:df:b4:86:01:e3:
50:a8:59:84:e8:66:4f:e5:4a:be:ac:09:e7:19:2d:
fb:56:5e:d9:82:5a:fb:35:4a:ad:95:be:04:12:5c:
da:25:67:2b:ce:3c:b1:b2:62:c8:e0:71:06:53:8e:
87:29:81:9c:8b:77:9a:00:c7:ef:38:b2:2d:20:7b:
a2:c2:7d:db:69:35:aa:53:9a:a6:75:bc:cb:c9:4e:
56:f8:17:c0:59:8f:2c:30:17:b6:e3:87:19:3d:7f:
6d:27:ec:3c:4c:92:cc:67:5a:f0:77:40:8f:c3:f8:
ad:f3:3f:6e:7f:59:c8:11:6d:e7:e1:d9:b1:0e:5d:
a9:0a:8a:05:01:01:b2:b0:31:c1:49:3c:31:be:71:
c7:70:27:72:d5:02:ef:f1:da:d5:4b:dc:cf:52:62:
5e:a8:90:9e:6d:bd:8b:6f:dd:f8:db:e6:03:ae:0f:
d6:7c:1f:3f:91:ef:ac:73:ac:9d:80:78:bc:c0:e1:
fd:3e:d5:0a:ea:8e:46:34:cc:73:55:07:3b:9d:6f:
72:a8:b2:5c:7b:2d:7a:a9:ae:65:58:07:dd:e1:d6:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5A:B2:3E:CB:54:59:9D:EC:5B:F7:9F:AB:AE:27:CB:D6:DB:E7:9C
X509v3 Authority Key Identifier:
keyid:20:40:50:CC:59:53:6F:2D:94:07:69:28:23:89:0C:CD:DA:85:45:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEBQzFlTby2UB2koI4kMzdqFRQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0455d5-ae56-4820-a1e9-9b437dbfd353/1/IEBQzFlTby2UB2koI4kMzdqFRQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b5:79:50:61:e8:82:23:34:af:82:ad:a5:b2:b0:56:3f:ba:
55:ed:03:80:11:c2:39:98:ae:f3:59:09:d2:83:a9:cb:d4:5b:
38:a4:95:cb:79:0b:c4:d9:d4:c1:10:79:89:ca:c1:11:06:50:
e7:55:30:81:79:0f:ba:27:f1:66:85:0a:a5:62:ea:a0:4a:9c:
a0:d0:46:55:02:ab:dc:84:de:c4:6a:96:ce:67:d8:6a:ba:87:
01:41:41:b4:96:b7:dc:3c:9d:51:8a:88:5d:6f:49:f4:66:7f:
e6:cb:ad:64:c9:77:c0:e1:8e:8b:2a:00:06:38:4b:bb:f0:2d:
61:36:cc:79:50:9c:7f:6f:16:05:66:70:2a:19:ec:6b:17:46:
00:ce:0d:2e:ef:e1:70:7c:49:86:88:94:d1:ca:e8:15:48:34:
21:42:b3:1d:79:0d:3c:91:b4:56:b7:94:0f:79:5f:c4:0e:f1:
66:7c:01:15:4d:4e:a7:dd:64:60:56:e7:79:cd:b0:b6:1e:7d:
09:a4:01:94:ad:17:a8:1f:ef:86:68:e0:d6:5e:19:0c:a4:89:
6b:f1:ad:e4:e8:36:91:6b:52:d4:76:1e:7e:6f:87:60:d4:74:
4c:b8:eb:4f:e0:4a:0c:ee:bf:f4:ac:e9:ba:34:53:85:04:aa:
75:7a:8e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:07 2025 by rpki-client