Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json)
Hash identifier: V3IgQv9D3wydcvWYwOGEw3Ljoj4FOxvD72WXhGMmqB0=
Subject key identifier: D0:1E:96:6E:D7:CB:F6:23:24:28:17:CE:34:EA:B0:30:19:AF:37:45
Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Certificate serial: 0194BBCEF2F7C416F636F377C01DDBD8AADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
Manifest number: 04D6
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: Lz2jQlN7JAiYCliynBWPtyevACLMRcpXWAEKMFWNk6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:f7:c4:16:f6:36:f3:77:c0:1d:db:d8:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=d01e966ed7cbf623242817ce34eab03019af3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:cc:53:a0:53:3a:7b:f8:57:33:9d:7b:17:
4f:8c:2b:2f:d9:15:9a:6d:1e:da:c9:c7:67:17:32:
4c:3a:d4:6d:bb:96:56:b0:71:30:a2:ef:a0:09:d9:
e7:32:ca:04:b8:12:9d:c6:4d:2c:08:55:03:43:83:
68:d1:bd:9d:b1:67:b4:89:7d:f4:4d:35:80:19:cc:
28:5e:fb:76:29:d6:76:d4:ca:f5:38:d0:64:ac:4e:
8b:d4:42:c7:ac:7d:b3:b2:84:42:20:61:67:6d:c9:
c7:55:61:b8:3d:1f:af:2c:28:85:65:bf:ca:4d:00:
2b:6d:9c:ea:44:ba:35:41:55:43:9a:a2:3e:1d:f5:
89:d3:f1:84:82:f9:84:e9:8e:34:1e:83:fa:26:09:
63:51:1f:4c:28:41:58:6a:72:eb:3f:bb:be:7c:98:
8c:2b:58:75:5d:08:06:13:8b:92:92:44:e6:c9:fc:
ab:08:a3:97:b7:25:eb:35:2f:6e:05:41:7a:5d:58:
d9:8a:d3:9d:90:10:bb:67:f9:08:9f:a8:e5:2c:7d:
19:0d:6c:0d:25:84:d3:a7:8d:9a:2a:87:2b:70:45:
23:82:5d:0c:76:79:12:98:0d:70:6e:c7:61:83:b7:
4e:ce:5f:bd:c2:d5:b6:3a:b3:28:cd:03:75:e6:af:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:96:6E:D7:CB:F6:23:24:28:17:CE:34:EA:B0:30:19:AF:37:45
X509v3 Authority Key Identifier:
keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:49:40:ea:69:65:a3:18:8c:be:d6:29:b6:6f:d7:11:66:2c:
0a:c8:c1:a0:8f:a1:a8:50:b2:44:36:75:e0:e9:92:be:34:24:
06:59:dd:5d:2d:a7:82:db:ff:32:f2:c7:d1:6a:60:cd:f5:c3:
23:31:01:b0:b0:83:0a:c4:a1:11:ef:40:dd:4f:54:ae:4d:04:
ff:94:83:23:42:0b:7a:5a:13:83:e7:31:b8:46:2c:c4:3c:72:
4b:e6:42:09:1a:e9:5f:34:ea:84:22:8e:7d:01:af:e5:ce:e2:
a6:f2:0a:a0:17:05:7b:25:85:a8:45:45:fd:ac:83:35:c3:0b:
4f:2f:c8:f6:7b:cc:c1:ae:74:aa:96:28:a2:e1:88:57:d5:b8:
b7:94:c0:4c:21:07:c8:54:12:77:38:e4:eb:25:f5:1f:90:db:
bc:72:30:48:49:ae:bd:b3:2d:57:97:99:3b:ce:3e:1c:a8:91:
1d:4d:f3:a4:8b:0c:69:a8:1f:d3:73:5a:a4:00:94:b4:75:f5:
84:d3:69:0e:30:f6:ea:e8:32:c9:8c:ba:e2:85:37:42:7f:bf:
77:8a:f6:47:cf:51:ff:7b:12:12:a1:aa:c3:bb:38:65:35:fa:
11:d2:61:3b:03:19:22:b3:83:25:28:01:72:d3:11:27:b9:28:
98:79:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:17 2025 by rpki-client