Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
File: igr5b5WYkhMXjTPWXwcOj7L-N98.mft (raw, json)
Hash identifier: PC2tNfjI0GUwlGq6AtmU1f6lJBXI2aS9sIM07gplGLk=
Subject key identifier: 4A:DD:CF:0D:5D:A8:03:09:F7:6B:14:34:CC:44:3B:1C:7C:DB:BA:85
Authority key identifier: 8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
Certificate issuer: /CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Certificate serial: 0194BBCED9D748E49D98BEC8B5106B79D6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
Manifest number: 04D1
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: igr5b5WYkhMXjTPWXwcOj7L-N98.crl (hash: 9G4sFU1aunr6IN2dgAVItTVAEHi3zJcxhQcsSA+dOss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:d7:48:e4:9d:98:be:c8:b5:10:6b:79:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a0af96f95989213178d33d65f070e8fb2fe37df
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=4addcf0d5da80309f76b1434cc443b1c7cdbba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:eb:13:f4:68:dc:d5:0c:b2:fe:01:62:9b:
ab:32:61:f1:d7:f5:b7:e5:a5:30:54:39:49:20:dd:
6b:09:cd:2e:c5:84:47:de:2f:05:f2:49:ee:dc:21:
45:4d:f7:07:0a:fc:ac:73:64:ea:06:c4:c1:a6:dd:
7d:2a:0b:ab:15:29:37:14:93:5c:2c:6c:70:2f:d4:
45:8c:81:bf:87:25:87:5b:06:c5:c3:11:a3:8f:34:
f6:87:f2:24:4c:43:3a:bb:df:a4:66:73:ca:61:4e:
5d:b6:6b:a4:09:89:42:68:73:7d:71:f4:8a:5b:f6:
35:85:4f:2c:56:6c:b1:fe:81:43:70:e8:77:94:3d:
cb:41:0b:5a:1e:ae:1c:1e:cc:f1:54:f3:5e:e6:06:
06:e3:b5:18:3b:d3:d0:6c:05:aa:90:c4:36:2f:1c:
b7:6e:0b:34:00:51:f7:c9:10:5a:09:aa:44:f2:c8:
3e:c1:b4:28:4a:cb:9f:3a:a0:5f:da:63:34:d3:c2:
42:ee:6d:94:ec:80:b6:d1:11:9b:75:7e:8a:9e:33:
f5:2c:13:59:5d:e1:cb:0c:b9:03:c7:b5:36:de:2b:
8a:75:e5:56:f2:d4:7d:77:b8:06:3c:52:bc:74:8c:
3e:1c:c5:02:03:89:1a:e5:38:9e:a9:3b:57:42:df:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DD:CF:0D:5D:A8:03:09:F7:6B:14:34:CC:44:3B:1C:7C:DB:BA:85
X509v3 Authority Key Identifier:
keyid:8A:0A:F9:6F:95:98:92:13:17:8D:33:D6:5F:07:0E:8F:B2:FE:37:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igr5b5WYkhMXjTPWXwcOj7L-N98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/09f6d3-972f-4b05-b27a-b77c1f9729ff/1/igr5b5WYkhMXjTPWXwcOj7L-N98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:af:df:62:b6:6d:5b:30:35:e4:ff:fb:0e:f4:39:2f:e8:
93:a5:8c:3a:68:c8:83:a9:b7:9e:af:2d:ff:62:ba:82:19:76:
8b:c6:e8:42:21:ad:b7:29:ea:f3:89:50:58:eb:53:be:90:99:
2e:b1:be:d0:aa:a3:1e:25:96:42:73:ad:f6:a4:68:c1:67:61:
c5:ea:91:7e:0f:6a:90:c9:d2:55:5f:09:dd:1d:75:95:76:da:
ed:fb:51:c4:0e:26:d7:64:f2:cc:46:7a:d8:9b:a2:66:af:2d:
bc:c6:2d:22:84:33:e6:db:9c:75:2d:71:6d:50:21:0a:7c:53:
4b:bf:48:cc:f0:b6:cd:2f:78:ad:37:6b:b4:33:ca:54:a9:7b:
40:23:c4:93:e7:fb:ff:0f:a1:ad:93:f7:6f:25:06:b3:3a:e8:
3b:e0:6b:0c:27:dc:b3:c4:1c:8b:7d:a1:70:ea:b0:d9:0c:ac:
c5:48:1d:7f:06:47:7b:d5:76:5f:2b:05:8e:74:89:1c:1c:84:
b4:cf:1f:13:21:77:d2:ab:bd:9d:e3:80:ff:57:d4:3f:89:bb:
8c:6f:96:db:d0:c6:32:e2:cc:2e:4d:72:45:ff:19:97:ef:c4:
60:fc:9b:ed:93:2f:9b:8b:25:f1:3c:9b:ad:c5:ee:7e:c2:7b:
8d:95:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:29:40 2025 by rpki-client