Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: sbvICWGdfR0iBSCXMV67rqerg2g2124zoHIjZFtPPxA=
Subject key identifier: 41:A6:88:0E:98:BD:D5:7E:62:A8:15:19:CA:03:AB:1A:6E:BC:94:76
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 0194BCE0D06C6995037AEF63B8709B8A8D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: Mw6KrIKiMgjQCyoApXHF0giw9UL8Ft0DKwyPjwe7RyQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d0:6c:69:95:03:7a:ef:63:b8:70:9b:8a:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=41a6880e98bdd57e62a81519ca03ab1a6ebc9476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:53:5e:b7:12:4a:61:92:ea:04:b3:a6:39:
11:76:b7:f9:d5:f7:75:ff:21:a7:db:f0:b5:97:5f:
30:d8:cc:15:4a:aa:b4:ab:3a:7f:ea:30:22:a5:ef:
b5:74:25:7f:7c:a6:56:7c:91:01:bd:5f:53:71:ec:
1d:ad:92:19:8a:ca:c5:32:0e:fd:02:dc:9d:20:72:
14:4f:76:6b:0f:44:f5:53:ae:ef:f5:d3:d0:9d:b1:
31:89:ba:d3:e5:38:15:e3:af:41:88:ef:af:e6:63:
df:77:97:a2:0f:2c:e1:48:d5:d2:0c:c7:b9:4f:0f:
0a:63:60:c8:ec:d6:54:c4:a4:c4:5b:47:2c:15:31:
77:e7:28:a5:56:cb:07:45:d7:34:78:b6:39:28:ac:
13:58:ff:07:ed:c9:14:74:3b:34:e5:3f:8d:49:b0:
c5:d8:c4:27:0b:e7:31:cc:ee:a2:5b:ab:0e:3e:01:
31:31:6a:b1:8e:75:23:a5:ab:67:8e:77:b4:94:fc:
11:dd:80:8e:9c:92:86:6d:4d:0b:50:87:b8:8d:04:
76:34:d6:82:70:dd:ff:83:5f:12:dc:64:75:86:94:
a2:ea:94:25:3e:3a:24:ef:2b:77:0c:70:1a:b6:b7:
ba:4f:cd:6c:64:2d:ab:87:79:3c:9e:58:31:67:f6:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A6:88:0E:98:BD:D5:7E:62:A8:15:19:CA:03:AB:1A:6E:BC:94:76
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:c6:e7:db:bf:b5:c7:7e:4d:60:38:40:a0:70:1f:0d:7c:
41:b4:46:18:29:d0:77:de:85:65:26:0e:e1:d8:0c:13:2d:bb:
eb:0b:0a:0d:2f:1d:3a:7a:43:22:9d:ac:46:70:2a:b3:d0:b2:
ae:b8:b0:ae:6a:cf:e8:0a:d2:de:90:08:1c:5c:cc:01:11:ca:
4e:80:42:19:49:44:dc:c6:47:a4:f6:0b:e2:99:08:69:9a:b1:
34:14:c2:80:5c:ed:af:8c:8d:0d:87:c3:0f:f9:04:93:a4:dd:
55:bc:d0:08:8f:a0:25:d7:7a:04:77:6e:29:3c:b4:88:c1:f2:
a0:ac:07:23:a2:6e:ef:0f:f9:de:a4:d7:6c:4b:61:43:bc:83:
88:54:bd:37:1a:35:aa:3e:61:07:c3:67:b7:cf:2b:52:80:63:
68:a2:04:17:ec:06:7f:a1:8f:f6:c1:de:a6:74:df:c6:a9:66:
06:c2:8c:7d:c8:b5:b5:fa:bc:31:65:a9:36:59:49:04:2a:6e:
1a:29:c6:1f:5a:f9:f5:b8:ae:74:f6:57:ef:bb:72:80:36:c3:
83:30:0b:16:58:85:70:37:bd:9f:96:31:6b:12:84:47:8c:d6:
6f:e1:a8:8f:50:dc:08:ac:e2:7c:34:ce:07:16:58:e9:f3:ef:
20:fd:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:44 2025 by rpki-client