Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File: iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier: AU2VEIm1eXLHdqJOakCKuWHowEj1EqR2Wf27ZQ3TqVs=
Subject key identifier: E7:84:1A:73:9A:DD:10:4B:B6:04:07:E2:84:E2:78:13:8B:3E:1E:51
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer: /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial: 0194BBCE77D08C10F12ABB6CAD051A8D392E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number: 0417
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: SrW6cW8pKFwwWIQLl4f+C554u9Hb61IMZ912BYhfH6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:77:d0:8c:10:f1:2a:bb:6c:ad:05:1a:8d:39:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=e7841a739add104bb60407e284e278138b3e1e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:c1:ac:7f:7f:b3:07:7b:e4:27:67:5d:3d:
3b:df:12:23:1b:c8:77:89:07:35:e2:9d:ae:56:0b:
b4:fe:6e:e7:97:fd:50:d6:6f:53:7d:95:c4:1c:1d:
7b:16:8e:53:77:9f:13:91:c1:89:0b:2c:78:64:06:
e8:da:76:a4:a9:f6:d8:dc:86:ac:26:ed:fc:25:e7:
7e:11:f5:3e:0d:69:2a:df:96:82:a6:12:da:0c:83:
70:1a:f9:6e:70:92:59:6b:ca:36:1f:62:99:ba:d7:
27:f4:fd:28:be:43:83:bc:ec:d0:91:87:46:81:7f:
c6:f0:b1:13:62:db:3c:15:d6:9e:fd:56:00:14:db:
6a:e5:48:c1:97:ae:66:af:ce:76:d0:4f:8e:96:3e:
02:44:1d:1a:79:56:91:50:f9:ca:03:59:f9:6b:50:
a5:a1:e4:66:2b:f8:78:33:50:37:c8:53:5e:d0:16:
f4:18:f5:40:6b:85:01:4d:ba:88:b6:31:33:b1:3b:
4e:46:dc:b2:3e:bd:1c:de:ed:2e:ea:47:08:60:c0:
f1:27:bd:3b:08:4b:61:b1:6d:a9:32:59:fd:6d:9c:
d9:ba:93:2c:4d:56:b9:22:0a:11:f2:78:13:f1:58:
38:1b:0f:97:d5:23:fd:db:c1:cb:1b:08:9a:f7:da:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:84:1A:73:9A:DD:10:4B:B6:04:07:E2:84:E2:78:13:8B:3E:1E:51
X509v3 Authority Key Identifier:
keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7f:9c:5f:32:68:ad:34:8d:90:da:bb:3b:ff:fe:fb:5a:1b:
57:74:ec:ee:e0:20:60:ec:14:78:d4:55:69:87:f4:87:20:05:
c2:d7:ec:04:7f:6c:ee:80:35:3a:45:15:20:66:74:b3:c6:25:
7c:26:17:c2:56:f8:6a:6e:a2:ae:6e:d3:70:65:52:f2:da:40:
04:94:f7:57:e7:d6:d1:82:4d:c3:48:ea:fd:e7:5f:fc:94:99:
ef:e2:2e:95:a8:17:e6:1a:81:37:d2:40:98:69:4a:7e:71:ec:
be:a0:7b:f3:d6:cd:d1:a1:f0:eb:72:c4:38:5f:aa:cd:f6:de:
a5:b6:c5:92:7a:d6:b4:59:74:46:29:0a:ca:4a:3c:bf:82:53:
f3:d2:e4:a9:e2:3a:c7:bf:88:6f:40:3a:77:3a:62:d2:9a:04:
2b:2c:1d:ed:a5:04:44:32:14:0b:9c:ca:af:ac:a3:25:6a:2f:
18:91:20:8b:fa:b6:fb:7d:5c:d8:c4:8f:b3:39:70:fb:89:b7:
80:9a:ad:dc:d3:58:7d:13:03:21:eb:71:43:0f:f4:1b:0e:cf:
4d:ae:4f:eb:6b:d6:3d:d8:da:ce:9b:ab:5e:d1:9e:0a:31:48:
a5:42:4c:30:b5:81:69:44:fc:25:35:1a:d0:18:e2:3e:00:94:
81:12:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:35 2025 by rpki-client