Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
File: I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft (raw, json)
Hash identifier: 0CEUzEwSUjDpoAAXTPxCaqlzOLPRXfok65v5gO3c5n8=
Subject key identifier: BF:69:8C:D8:48:84:9A:F0:F6:86:DB:3D:65:D5:1F:70:18:D1:9C:32
Authority key identifier: 23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0
Certificate issuer: /CN=23f91084058819889a4a8f32ea347759543134f0
Certificate serial: 0194BC3C8197D0C44501DB58FDDF9A63C094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl (hash: LWj0cRp8Ki6vjAHy30jlAX6Ec4M1A05CISIeVntdeAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:81:97:d0:c4:45:01:db:58:fd:df:9a:63:c0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f91084058819889a4a8f32ea347759543134f0
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=bf698cd848849af0f686db3d65d51f7018d19c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:28:eb:e5:09:34:da:31:b5:5e:6f:6f:42:
93:cb:8c:0e:ed:48:3d:e7:c0:80:7e:68:35:8d:8f:
90:62:a9:58:9f:30:02:c5:f3:a1:03:9d:b4:28:3e:
6b:60:13:8b:1e:4d:c2:42:67:09:e9:87:3d:fc:a5:
dc:c6:b4:6c:be:f7:2f:50:ee:b5:a5:78:c0:63:2f:
e9:6d:db:8c:e8:e4:b8:ac:90:c7:4c:9d:e5:8c:7f:
8b:4b:d3:39:b5:86:a9:45:bd:59:02:35:38:fe:b6:
ba:d3:83:09:11:b4:7b:c6:6c:06:e5:01:f8:95:11:
e6:b4:bf:2b:87:d1:4e:0b:cb:33:fa:d8:eb:6a:3e:
35:74:a1:5f:1c:22:bf:14:f0:bd:95:e4:f8:94:c7:
a1:64:5b:44:04:11:7b:82:6a:ea:31:ce:17:35:3f:
c6:a7:18:cc:0d:93:bd:60:5f:3f:d6:83:ef:27:ef:
9e:d8:59:ad:56:19:8b:a4:6a:24:b6:37:cd:15:57:
d3:c8:92:91:27:cc:af:42:b7:43:07:8b:72:48:ec:
5b:05:ec:0a:0a:3d:a3:eb:e4:5d:91:38:3e:e6:a5:
39:95:bc:9d:4d:41:01:35:f3:10:3f:e2:b5:b4:60:
1c:27:35:e3:c6:82:5b:79:18:74:3a:f1:80:e2:31:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:8C:D8:48:84:9A:F0:F6:86:DB:3D:65:D5:1F:70:18:D1:9C:32
X509v3 Authority Key Identifier:
keyid:23:F9:10:84:05:88:19:88:9A:4A:8F:32:EA:34:77:59:54:31:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_kQhAWIGYiaSo8y6jR3WVQxNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/205007-79c6-4852-8924-fdced45d2fec/1/I_kQhAWIGYiaSo8y6jR3WVQxNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:a9:59:48:f0:06:20:00:08:fb:f1:38:47:63:24:aa:0a:
49:d9:d3:c4:e3:57:a4:59:3d:98:65:d5:18:31:d7:b2:65:8f:
84:40:c7:62:df:a0:f4:e1:18:da:21:5a:8f:a8:f3:ad:dd:59:
67:5c:47:e8:ca:0e:05:9c:f4:e9:96:bd:c2:a6:f7:ee:32:30:
d1:fc:85:2d:e8:38:1c:b8:7f:70:ae:75:7b:ad:29:b2:2a:a4:
fc:70:90:2a:7b:ef:7f:da:98:c8:a4:0e:b1:4c:13:4e:18:66:
69:f4:16:26:16:df:2d:4d:94:d7:3e:94:15:e1:75:3e:d9:f2:
24:b9:f2:32:2a:55:99:7a:4b:20:98:46:7d:3d:05:3b:75:2c:
05:d2:84:df:a3:a9:7e:bd:96:1f:de:f4:1d:17:3f:18:2a:3f:
eb:52:e4:8e:30:75:4d:33:2b:3b:ec:c2:cb:aa:f4:ca:58:4a:
ed:5e:2b:d4:00:aa:0d:dc:4c:af:3e:e6:cc:dd:11:1c:9f:c1:
a4:d2:b6:b9:15:cd:76:07:1c:59:a9:1b:72:2a:6e:81:7c:21:
ec:be:d6:83:bb:61:34:2a:43:f3:df:bc:ff:62:6b:ad:d2:d6:
30:c8:25:4a:88:e8:c5:38:57:30:15:47:e5:e0:8e:d9:fe:df:
90:b9:de:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:28:06 2025 by rpki-client