Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
File: 1MiI65YKABkAwnleiq-iaPYC2EI.mft (raw, json)
Hash identifier: Pjg/K65ZgMuqHqE0iWtKLWkAohVkPI15BEZhpIu5POw=
Subject key identifier: AA:CD:1D:EA:8D:0C:C0:76:5C:D3:53:B9:13:E2:12:F7:CB:64:36:41
Authority key identifier: D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
Certificate issuer: /CN=d4c888eb960a001900c2795e8aafa268f602d842
Certificate serial: 0194BBCE41C299DC929035EB349B5F0FB34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
Manifest number: 0936
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 1MiI65YKABkAwnleiq-iaPYC2EI.crl (hash: lKjjEZcVbFl6zVhWJjOUP8JkPSkU+LX75L0rDS5VNzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:41:c2:99:dc:92:90:35:eb:34:9b:5f:0f:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c888eb960a001900c2795e8aafa268f602d842
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=aacd1dea8d0cc0765cd353b913e212f7cb643641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:38:d6:4b:e9:ab:a6:96:47:2d:1d:f0:2c:
5a:2a:5e:58:ef:38:b1:35:10:45:d3:13:ce:aa:92:
d8:a2:f9:31:70:b7:0f:17:b0:19:cf:f3:68:59:28:
76:11:f3:85:2a:60:4c:5a:ab:11:cf:66:99:c0:e4:
7b:14:b9:72:2c:79:da:99:19:0b:63:79:58:f1:e8:
dd:ed:a9:be:4f:35:48:09:3d:0b:fa:33:6a:39:17:
71:b1:55:8a:45:bd:e2:c2:a0:30:43:7e:29:37:69:
04:0a:78:10:49:a3:d5:b5:e4:e7:89:6c:e3:28:a2:
4a:e6:cf:12:0a:0a:9e:54:3b:0a:3a:5d:86:31:c1:
eb:ca:c8:05:f7:1a:3d:83:5e:57:0d:a3:6a:ff:7e:
a8:3a:3b:40:27:6f:ce:85:a3:03:63:b2:e8:d7:51:
85:7e:63:60:c3:69:b4:46:67:58:be:62:a2:a0:71:
f2:c6:23:ad:e7:cc:b1:a9:d9:5f:5f:3c:ec:49:94:
4f:69:59:44:78:bd:98:bc:b5:ff:4d:8b:b1:d2:ae:
3f:ca:a6:bd:f9:bf:a2:70:e8:5b:c8:7b:78:14:77:
c0:66:ed:71:6d:20:0b:d0:cb:79:87:8f:03:1c:d5:
31:1a:88:7d:b5:ed:b9:21:70:fe:df:19:b7:f0:dd:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CD:1D:EA:8D:0C:C0:76:5C:D3:53:B9:13:E2:12:F7:CB:64:36:41
X509v3 Authority Key Identifier:
keyid:D4:C8:88:EB:96:0A:00:19:00:C2:79:5E:8A:AF:A2:68:F6:02:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MiI65YKABkAwnleiq-iaPYC2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2d734f-aa8c-4735-ac71-15d7691f4a2a/1/1MiI65YKABkAwnleiq-iaPYC2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dd:d8:90:a7:46:e6:fb:b4:15:7e:5c:5b:a8:a8:31:c2:7f:
1e:61:08:e3:1e:1d:be:78:da:c0:a4:0d:79:f4:7c:e8:9c:14:
a0:2a:7e:60:fd:de:33:8f:d7:62:a0:1b:e7:df:72:10:e5:ab:
05:d4:1e:05:48:1d:7b:63:f2:e5:8b:c3:1f:71:d3:8e:d3:5f:
c2:f0:ef:33:23:64:49:48:68:05:f2:eb:73:79:04:78:bd:5e:
b3:39:9c:5d:c6:60:7a:61:6f:b8:92:36:0f:d9:b1:28:48:da:
a2:83:f8:4e:14:cb:61:c1:e3:95:75:52:e2:45:f4:45:2c:76:
0e:6b:ac:7d:c7:3d:e8:e0:a1:6a:d7:e4:77:14:5a:4c:da:8f:
33:15:fd:a7:fc:41:7e:c6:44:b3:14:33:0f:56:9b:97:2e:6e:
1e:69:37:2f:22:e1:93:b2:d3:81:1b:ac:22:83:d1:23:e8:e1:
13:97:8b:da:4d:31:a9:42:5d:c6:ff:29:2b:d2:0c:5f:5d:b6:
df:82:a0:82:0e:f0:05:3d:c3:83:bd:90:00:9e:00:94:df:54:
a3:e3:cc:34:5b:4e:61:9b:89:9d:d3:ea:06:b1:42:d6:8d:a7:
d0:c7:99:11:46:e4:83:46:e5:fd:49:fd:f0:6e:ed:ec:83:a4:
b0:8b:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client