Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
File: ICsQHBBwOrYDIfxj3NZpClJNuxA.mft (raw, json)
Hash identifier: HKnm0yGnKMIq14C3C5mjyWngBA+QI6ydHhG2DJv6Bn8=
Subject key identifier: D4:31:A0:D7:8E:92:DF:89:B5:F2:A9:6E:50:56:5B:98:4C:28:96:D9
Authority key identifier: 20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
Certificate issuer: /CN=202b101c10703ab60321fc63dcd6690a524dbb10
Certificate serial: 0194BBCDB48898C52B737CC5D53744FF042F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
Manifest number: 079D
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: ICsQHBBwOrYDIfxj3NZpClJNuxA.crl (hash: Cnlv4HHmwv7a3fBDPxfVG2EkEO17LqPt1AWNL69Bw+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:88:98:c5:2b:73:7c:c5:d5:37:44:ff:04:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202b101c10703ab60321fc63dcd6690a524dbb10
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=d431a0d78e92df89b5f2a96e50565b984c2896d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:10:22:4e:5b:b5:7b:34:9f:b1:41:f9:17:
d3:d6:2f:26:c5:34:36:93:ea:94:3f:48:e7:3b:17:
81:bc:cc:22:f2:28:a3:9a:1a:a4:5d:93:f3:1a:1d:
ef:1a:9e:1f:44:8f:db:49:27:e9:7f:ee:44:2c:9d:
bd:be:bb:3e:f1:55:77:57:df:3e:3c:e3:f3:cc:d4:
8d:22:79:3a:86:9f:a8:ac:55:3e:8e:6c:a5:1a:63:
b5:88:48:20:d1:8f:a4:8b:a3:2f:7d:7e:90:0f:19:
5d:78:a0:13:fd:8c:2c:0a:bb:ca:3b:14:e3:aa:c8:
81:55:4f:c1:7f:50:47:17:8d:ac:5d:86:f3:14:a1:
fd:ed:6c:c5:8a:2f:88:7b:ab:24:3d:06:bd:ca:15:
df:65:aa:39:52:c0:ff:69:6e:cd:7e:f0:37:c7:9a:
68:c6:37:82:fc:7f:85:5b:d8:03:4c:eb:97:31:79:
23:d3:e7:da:22:95:81:66:4c:81:ef:0b:a4:79:42:
37:b1:77:7f:4f:cd:be:a3:ee:11:ef:e4:e5:43:84:
04:99:10:f1:79:72:a9:e6:3d:a3:3e:cc:3d:0a:79:
e9:ee:5c:9c:a2:6a:ad:da:89:66:37:0e:dd:c0:6a:
ca:cd:59:34:d6:ce:be:1d:a5:7d:60:14:7a:ee:7a:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:A0:D7:8E:92:DF:89:B5:F2:A9:6E:50:56:5B:98:4C:28:96:D9
X509v3 Authority Key Identifier:
keyid:20:2B:10:1C:10:70:3A:B6:03:21:FC:63:DC:D6:69:0A:52:4D:BB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICsQHBBwOrYDIfxj3NZpClJNuxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b98adc-ede0-4c2a-8c56-a44c8e654df6/1/ICsQHBBwOrYDIfxj3NZpClJNuxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:fd:cd:31:d0:a7:90:6b:52:7d:b0:5c:f5:8e:c2:f5:cf:
ad:03:48:1e:3b:6a:11:c2:33:df:61:d8:c6:37:66:1e:2d:c2:
e7:81:8e:d5:1c:63:f6:86:1b:5e:c0:cb:8b:82:08:48:de:de:
a2:77:6b:a6:de:7b:f0:f9:df:c4:5c:3b:83:90:c1:9b:32:72:
a8:69:be:2f:fe:66:c1:48:c0:1a:04:43:45:f9:5f:6d:c1:27:
57:49:2a:17:09:8e:88:cf:ca:fd:1c:5a:29:9a:d6:18:84:a7:
dc:f7:b7:ae:fb:4e:1d:30:fc:5b:d2:9c:ea:71:71:b9:2f:3e:
1b:f5:83:7d:ba:bd:59:a7:5c:99:fc:e8:7d:de:4b:46:fc:25:
2a:54:87:d8:a1:c0:8a:a7:60:ed:75:84:e0:ac:70:89:d5:67:
f0:5a:b9:35:fd:a8:17:39:83:20:35:83:ec:16:5f:59:50:31:
0d:84:b1:ff:14:9d:1e:2b:2c:00:62:29:03:04:c0:e7:51:d8:
f7:4c:3e:59:49:21:f6:14:5e:ab:67:2e:fe:9c:8c:35:42:cb:
d7:a4:4f:d8:2e:09:90:ad:f3:ca:59:2f:d8:ed:58:58:cb:0b:
2d:26:f0:85:f4:e2:37:d6:84:53:03:aa:24:3c:c8:24:64:5d:
ee:cc:6b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:34 2025 by rpki-client