Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
File: In2aKDPXQRs1_yA45zADD88vmBM.mft (raw, json)
Hash identifier: X2FkZFQMubDhKsrWN/hTv5xt/k6kKkm4NwgIgwQBHaA=
Subject key identifier: 97:25:63:68:1C:7C:C0:75:94:D0:E7:3C:36:6B:0A:DB:10:0B:3B:69
Authority key identifier: 22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
Certificate issuer: /CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Certificate serial: 0194BBCDD631CA9927D517B389976749C1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
Manifest number: 09F2
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: In2aKDPXQRs1_yA45zADD88vmBM.crl (hash: B/9UjKvaI41dnRueOFTZYYtNa9XfFCSMgm49caxQklI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d6:31:ca:99:27:d5:17:b3:89:97:67:49:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227d9a2833d7411b35ff2038e730030fcf2f9813
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=972563681c7cc07594d0e73c366b0adb100b3b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:29:ff:69:4d:d3:f9:88:ee:52:33:7f:ea:f3:
35:f6:ec:18:66:52:eb:b7:f4:33:2e:f3:0b:2a:f8:
3e:70:51:95:a7:74:65:2f:01:37:d0:18:48:51:d3:
ea:58:8c:79:1b:7e:d0:47:b0:c3:80:be:87:fb:2b:
5e:58:08:50:39:9f:5d:41:11:ab:6d:98:13:2f:70:
31:0b:3c:bd:4b:f5:b3:b7:18:92:2d:20:74:db:05:
f8:94:c4:19:1d:19:3d:5d:ea:0a:32:de:8a:25:57:
e1:03:b5:c5:44:42:1a:70:17:66:e5:9f:1d:49:5e:
d1:98:5b:7e:34:34:d6:1b:20:15:f7:40:b1:ba:c6:
08:2c:d4:13:e3:ca:cf:d6:dd:94:d6:44:65:9f:1e:
7b:0d:db:cc:5f:ea:d5:4a:75:d2:c0:a6:58:5f:c2:
e7:a8:e6:4e:88:9e:e6:e3:f0:e1:9e:41:8b:70:3f:
b6:fa:59:1a:c7:68:88:f9:e3:dd:93:74:f4:11:22:
73:34:10:bf:9f:8d:24:a1:ea:fd:69:cb:56:28:a7:
b2:8b:12:f3:28:1a:2d:12:dd:33:3f:cc:c5:9a:26:
13:38:67:7b:ed:17:fc:57:f5:a4:a9:5e:c1:56:61:
85:e2:b8:45:ac:2e:7a:f7:4f:94:49:82:07:3c:27:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:25:63:68:1C:7C:C0:75:94:D0:E7:3C:36:6B:0A:DB:10:0B:3B:69
X509v3 Authority Key Identifier:
keyid:22:7D:9A:28:33:D7:41:1B:35:FF:20:38:E7:30:03:0F:CF:2F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In2aKDPXQRs1_yA45zADD88vmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28dab2-b9a7-492e-8625-fd1188fc59bd/1/In2aKDPXQRs1_yA45zADD88vmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:41:3a:5e:17:2c:16:29:6f:0d:8f:ec:43:99:46:d2:41:
8c:f1:f4:80:27:3b:5c:8c:95:bf:e9:8e:e9:08:59:dc:35:38:
97:df:fa:58:ad:b8:ca:15:2b:38:3a:89:58:0a:f8:2e:a7:83:
16:b6:7e:ed:19:5b:6a:55:7d:2c:bc:6e:d2:0d:4e:69:d9:57:
0f:12:38:09:19:d6:eb:f2:7a:a7:99:5a:1c:31:47:e1:55:c3:
45:83:77:54:4a:42:28:e1:1b:45:42:f4:fd:8c:55:8f:9a:6d:
3f:ad:ea:96:dc:21:20:2a:7a:5b:4d:8c:3c:35:b9:02:2c:cd:
93:8f:17:30:33:c7:52:5a:1d:80:ce:e7:97:b7:db:95:2e:9d:
16:69:ab:ed:48:cc:38:20:a5:39:22:78:e3:0f:6d:2d:6c:83:
5e:7f:27:1d:53:88:e4:cc:37:ad:bc:87:e0:61:49:36:e9:86:
70:62:a8:61:14:e8:8e:ea:fd:27:f0:e8:6a:60:11:7f:5e:97:
51:01:97:5f:a8:1b:e4:54:7c:c7:31:57:79:c2:b2:b6:1e:60:
44:bc:b4:f5:e5:76:f7:db:c5:f4:d7:a6:ac:a0:42:a2:67:85:
de:6e:2d:8b:c8:7a:22:5a:9e:d4:92:61:35:52:f1:6a:b1:c4:
e3:da:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:57 2025 by rpki-client