Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
File: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft (raw, json)
Hash identifier: t/aI+p/qrCcpBFb8uqah+rXvgxFUAKZB/b81Ec4mKxA=
Subject key identifier: 7C:29:58:9B:8D:FD:5C:C7:8E:28:F5:6E:22:6A:0A:6A:89:BE:CE:05
Authority key identifier: 20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
Certificate issuer: /CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Certificate serial: 0194BBCE190FB110AFE9853C3C9199621440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
Manifest number: 07FA
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl (hash: cHc1z4gAUTxJDQ0XAbUyof3iq5S7TFdtfpxdZg3ONhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:0f:b1:10:af:e9:85:3c:3c:91:99:62:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=7c29589b8dfd5cc78e28f56e226a0a6a89bece05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:ea:5b:22:10:12:98:71:b9:b1:17:48:ef:
1a:2f:87:21:07:90:b0:99:78:1b:91:56:07:85:fb:
18:05:28:67:e9:8d:e5:97:c8:c0:54:cb:18:f4:56:
4f:c3:9c:12:d2:fc:65:ea:3e:97:b5:b7:bb:ad:df:
6e:39:10:33:d6:db:67:a1:2f:4f:0e:90:57:ef:c3:
f5:55:10:37:4a:f6:6d:ae:78:45:99:89:ac:67:5a:
d2:cb:95:91:f1:30:a6:15:a4:24:64:63:6c:02:9c:
a8:0c:9a:84:39:fb:fa:14:a8:b5:13:fb:78:da:8e:
50:3a:4d:cf:72:28:91:b0:79:76:f0:0d:b7:bc:2f:
83:34:99:9c:9f:75:c1:2e:11:d3:d6:ea:19:d3:a2:
f0:c3:a2:25:97:03:7e:d4:ec:83:47:74:2f:d4:bf:
ad:d3:cf:19:7a:bc:12:c6:4f:c1:0f:5b:3d:e6:f6:
20:20:7d:48:86:98:fd:3b:af:eb:ac:93:66:aa:e4:
06:7a:37:d1:42:c8:1b:e8:9e:65:1f:74:1a:35:aa:
d8:13:9d:6e:4c:eb:ec:d1:d3:40:6f:dc:7a:f1:a7:
54:5d:b7:a3:20:26:a1:33:06:9c:06:7d:c4:5b:d9:
db:1f:ff:71:5d:95:1c:64:48:c9:f7:f6:a9:44:51:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:29:58:9B:8D:FD:5C:C7:8E:28:F5:6E:22:6A:0A:6A:89:BE:CE:05
X509v3 Authority Key Identifier:
keyid:20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3e:36:59:15:5c:9b:46:03:95:8b:5f:be:a9:6b:7c:f3:4a:
9d:7b:1a:0b:cd:0b:26:ce:b1:79:af:5c:08:c2:d9:b8:85:d4:
23:c7:e8:0e:c7:9c:ac:dd:09:b4:ee:87:1f:5e:a7:92:a0:ef:
e2:70:68:53:3b:d5:46:a9:f2:9c:c0:71:37:49:ec:d1:79:4a:
74:8f:f2:79:6c:c3:17:e0:eb:08:91:c8:e7:af:3d:de:fd:e8:
8b:75:b4:c8:be:67:ff:4c:4b:c5:62:38:34:9f:e1:d9:1c:b9:
9f:a4:de:b5:a7:d6:43:dc:9c:b1:94:f1:5d:ed:31:26:a6:c4:
df:74:ab:96:b0:2f:f5:cb:ef:97:d1:60:15:82:d4:b2:9d:fa:
a3:0c:40:11:34:75:94:26:c8:07:af:f6:8b:f6:53:96:52:55:
d7:c3:89:ef:74:87:17:65:ee:e7:4e:8e:83:16:94:75:d4:ed:
87:0f:57:8d:a4:0c:37:d3:49:49:c8:25:fa:f5:91:30:83:2e:
0a:4f:7d:ac:d7:c3:77:77:0c:db:4f:c3:f2:2a:74:85:07:15:
51:dc:3f:b1:08:34:38:ca:14:d4:fa:03:22:e5:2c:00:93:10:
b9:68:1c:72:bd:e1:ab:43:fb:d9:bf:6c:dc:09:2b:4f:0e:84:
4a:e1:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:33 2025 by rpki-client