Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
File: iqrwV67ry_cGh34qqnSjljgL4hU.mft (raw, json)
Hash identifier: c5wD3hplrG+eloIn738kndQIDFfazWAm3ttiV2rEIOw=
Subject key identifier: 21:74:3F:F8:23:16:81:B3:6B:C8:05:D0:FA:57:F5:84:0E:71:65:95
Authority key identifier: 8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
Certificate issuer: /CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Certificate serial: 0194BC729728673DF0FA238772E9E7A670FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
Manifest number: 01BC
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: iqrwV67ry_cGh34qqnSjljgL4hU.crl (hash: tXdxqJiDcAPMrn80pryANSPmFOKeu/nQw8NYOAzYRmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:28:67:3d:f0:fa:23:87:72:e9:e7:a6:70:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=21743ff8231681b36bc805d0fa57f5840e716595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:8f:f1:ab:da:db:20:47:99:a7:d5:4d:c8:
eb:3e:0d:a2:5a:a1:a6:8c:bf:b9:59:ab:a1:dd:23:
09:17:bc:a0:68:c1:10:d5:39:f9:e4:f2:8b:90:a2:
88:9b:36:b5:1b:15:6b:11:c9:c0:68:51:98:a2:ea:
f2:a7:24:48:a4:6c:dd:a4:22:f4:92:79:54:c7:9b:
30:ab:39:85:19:55:94:97:12:a5:c3:d9:00:75:e0:
4c:ed:0b:cc:10:a1:1b:d5:97:95:92:c7:7d:24:38:
09:63:c2:ee:21:4a:9d:8e:9a:38:a0:7c:ee:62:31:
76:2d:b8:34:50:82:3c:ee:35:b7:2a:5a:44:aa:7b:
a9:bd:d0:89:1c:1b:cb:6b:1e:d2:41:b8:0c:5c:ea:
38:c1:ab:ee:84:6a:db:1f:d7:fb:8d:29:6d:40:00:
43:9c:af:23:cb:22:b1:f3:e3:38:14:20:18:b1:71:
d5:ce:5c:14:46:41:45:af:44:d3:84:6e:8a:58:88:
4f:4a:47:02:51:04:28:43:fe:d2:67:53:1e:8e:fa:
b5:ba:1a:7f:06:61:be:1d:5c:bb:2e:5e:86:eb:8e:
f7:40:d8:dc:ec:a6:a7:9f:43:3c:4a:a4:9e:89:ac:
0b:c0:38:a1:c0:86:fa:46:a2:13:d0:b4:59:76:5b:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:74:3F:F8:23:16:81:B3:6B:C8:05:D0:FA:57:F5:84:0E:71:65:95
X509v3 Authority Key Identifier:
keyid:8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f3:09:3d:39:88:03:da:22:0c:a2:b6:29:35:8c:98:fa:8d:
00:df:89:9f:c4:d5:f8:5a:05:b3:17:d0:bf:c7:38:c3:5e:57:
72:c1:6b:86:f6:e1:c5:23:21:cf:b2:29:77:43:7a:5a:cf:1c:
70:a6:40:3e:78:27:00:71:2e:76:14:fd:ac:99:ec:b0:ae:f8:
0a:7b:a8:db:38:e7:68:fb:e7:21:be:f8:09:5d:1d:0a:3f:d6:
73:2c:58:a3:82:d4:f0:c4:02:e6:08:c0:36:de:00:73:60:37:
0d:0e:36:71:d2:7f:ac:e4:d2:bb:fb:58:2c:30:89:41:0a:d3:
58:e9:b5:c7:d1:bc:88:5c:59:23:98:00:90:6a:39:ac:57:a1:
e1:3b:56:10:d3:ea:ae:4c:8d:d1:0a:96:bf:0c:b4:e4:52:b4:
78:41:88:7c:1f:44:da:0f:93:04:5d:f4:8f:66:23:5e:23:0a:
43:d7:a6:f7:a6:23:61:59:b1:25:2d:a2:5b:a1:fb:d0:80:77:
92:e7:8d:78:a1:c5:95:56:fa:a0:db:97:02:c9:cc:16:a3:53:
d0:f0:b8:b2:9e:04:21:09:48:a0:04:c7:3e:47:76:dc:0b:54:
e9:d9:63:f3:00:8d:48:df:1f:7a:ee:13:f1:76:6c:15:03:61:
d8:1b:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:59 2025 by rpki-client