Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: u8nrmI4+wLgDOBmIAI8yAHEaSoSNEDq/OXz+wa+6UeQ=
Subject key identifier: 84:3A:84:EA:7B:00:27:E4:5D:33:BA:6D:14:B3:85:EC:E3:D0:5B:81
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 0194BC3C21804F4299F5BDFA734CE5B05764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:44 +0000
Manifest this update: Fri 31 Jan 2025 12:00:44 +0000
Manifest next update: Sat 01 Feb 2025 12:00:44 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: itZzLanYRKeY2TM92RSShck76DGyldzsLySQX/iUC30=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:21:80:4f:42:99:f5:bd:fa:73:4c:e5:b0:57:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Jan 31 12:00:44 2025 GMT
Not After : Feb 1 12:00:44 2025 GMT
Subject: CN=843a84ea7b0027e45d33ba6d14b385ece3d05b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:2f:9f:bf:0a:49:bb:65:6d:c8:84:e2:b7:
a4:58:e7:3c:2a:1e:86:17:3e:38:33:1b:e7:bf:3a:
5e:e9:75:37:a2:cd:5c:b2:5d:7a:84:ec:3c:68:62:
d1:03:2b:5f:97:0b:a2:cf:22:21:58:09:2e:c8:10:
6e:1e:c9:66:48:52:f4:48:e7:c1:e4:bf:08:34:b0:
86:10:a7:54:e2:21:8c:83:64:94:32:ea:0c:c0:0c:
82:b9:79:2c:ba:b3:2f:3e:56:85:56:05:1a:4a:96:
b1:4c:23:7b:90:50:fd:a9:57:56:34:2d:8c:bb:25:
f4:b5:38:4d:06:35:11:50:d1:6d:fd:29:4d:18:13:
5e:c4:fc:00:fa:20:11:63:34:94:32:03:57:fb:29:
07:b4:1b:48:fd:3d:d7:4e:08:0c:6f:28:13:ea:74:
d8:8e:94:85:52:dc:be:51:cc:03:5d:72:62:0d:c0:
13:ac:ac:28:a3:aa:8c:28:72:d4:1c:b5:4b:39:87:
ae:dd:c5:73:a0:04:ad:32:fc:a8:5d:c0:00:fc:ae:
de:6b:18:21:3b:40:c9:5d:66:0f:a5:70:70:0e:83:
a9:36:9f:de:3b:fd:95:b4:2e:07:2a:11:f0:4d:7f:
26:00:a6:33:ff:63:47:1b:00:7b:b8:53:61:b6:61:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:84:EA:7B:00:27:E4:5D:33:BA:6D:14:B3:85:EC:E3:D0:5B:81
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:ce:a2:e3:f5:ec:39:da:dc:0c:3c:e9:95:61:52:05:dc:
d7:9f:f6:b9:25:fd:63:d2:f0:55:86:e8:ad:12:59:24:59:3b:
92:04:e6:00:0e:e3:f3:31:ca:82:2d:c0:4b:7b:ed:f0:55:e3:
7b:6a:96:5c:df:53:6f:13:fb:5d:23:02:e1:b4:80:d0:b7:c3:
ac:5a:d4:08:16:80:53:c2:8f:2c:ba:62:a8:4b:f1:ec:29:dd:
00:be:fb:a7:76:7a:6d:30:19:12:4b:9d:65:55:0b:93:76:bb:
97:26:82:61:a8:40:c7:fb:fd:81:9f:78:8a:44:03:af:44:48:
af:ea:41:69:e4:63:4f:0a:77:65:b1:63:87:4e:67:40:58:5e:
9b:d2:95:a9:83:16:33:39:0c:2f:90:f6:80:f6:e5:3c:4f:ae:
1c:23:0a:4d:6c:c3:ff:1d:e7:d9:bd:09:45:87:3c:8c:79:a7:
84:6f:e1:23:a9:34:4d:bc:e4:6b:4d:13:a9:87:e7:68:c3:a1:
60:c3:21:87:9e:3f:32:27:83:93:33:33:8b:fb:be:d6:59:03:
95:4c:3f:68:ba:79:8a:27:75:80:ad:28:b4:3e:e6:19:b1:0a:
70:a0:1a:12:4b:47:d9:46:05:bb:b6:fe:0d:31:82:84:00:de:
20:32:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client