Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/2fa725-945c-48df-b629-2d140e4c5a3f/1/iPdXItsls3I97Npdhw32m_DYZa4.mft
File: iPdXItsls3I97Npdhw32m_DYZa4.mft (raw, json)
Hash identifier: g9V/eIq7pmNQy1XFkJtpmOJrK1agc1Q4HKqLbv1EcE8=
Subject key identifier: DD:A7:D4:EC:29:90:A9:BC:2F:A4:1E:88:91:A0:25:1D:3B:0D:2E:05
Authority key identifier: 88:F7:57:22:DB:25:B3:72:3D:EC:DA:5D:87:0D:F6:9B:F0:D8:65:AE
Certificate issuer: /CN=88f75722db25b3723decda5d870df69bf0d865ae
Certificate serial: 0194BBCEB8A16E6326714BFBF3D9C1EAD03F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPdXItsls3I97Npdhw32m_DYZa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/2fa725-945c-48df-b629-2d140e4c5a3f/1/iPdXItsls3I97Npdhw32m_DYZa4.mft
Manifest number: 0E22
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: iPdXItsls3I97Npdhw32m_DYZa4.crl (hash: 9+rRPXxJ3DTNyiO8+QzXzlUHHw+/l5SWvta8GYPRi1g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:a1:6e:63:26:71:4b:fb:f3:d9:c1:ea:d0:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f75722db25b3723decda5d870df69bf0d865ae
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=dda7d4ec2990a9bc2fa41e8891a0251d3b0d2e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:77:d2:23:78:2e:55:40:c3:e9:2d:b7:54:
44:0d:30:37:68:3b:78:6d:cd:dd:24:06:b4:8d:44:
6b:4d:bf:7e:53:66:bb:5c:d4:bb:79:54:68:36:98:
9a:5d:dd:c4:d8:cc:cd:40:05:f0:fe:bd:3c:e9:15:
86:40:0a:4c:a1:00:d1:67:33:f3:8c:f2:56:7f:e9:
cd:e7:ef:39:9a:e0:44:07:91:68:9d:dd:80:43:64:
d0:12:b5:cd:d9:6b:f1:bc:9f:0b:df:0a:28:d6:c9:
20:bb:48:64:5c:01:8f:fc:db:71:c9:a5:9c:60:c3:
99:12:3b:a6:78:75:5b:4d:2b:43:32:57:a5:ce:9a:
11:7e:d5:40:71:c8:ce:df:e8:c4:54:3e:e6:ad:ad:
8d:df:99:02:9f:ef:8b:0f:20:2d:5d:85:fc:2a:76:
0b:46:f4:9d:dd:bf:4e:57:31:68:fa:d6:90:a8:a6:
ff:f6:98:99:a6:77:9a:68:4b:59:24:a3:de:41:ac:
b2:95:fb:14:95:c6:49:94:5a:8a:0a:1e:74:97:ca:
ae:ca:41:06:d8:40:fd:bd:87:e5:0f:d8:57:b8:25:
cd:51:50:38:b2:94:3a:be:23:a2:19:28:55:a7:e4:
d2:55:7d:a1:09:b7:fc:4c:7a:01:62:68:67:24:a5:
08:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:D4:EC:29:90:A9:BC:2F:A4:1E:88:91:A0:25:1D:3B:0D:2E:05
X509v3 Authority Key Identifier:
keyid:88:F7:57:22:DB:25:B3:72:3D:EC:DA:5D:87:0D:F6:9B:F0:D8:65:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPdXItsls3I97Npdhw32m_DYZa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2fa725-945c-48df-b629-2d140e4c5a3f/1/iPdXItsls3I97Npdhw32m_DYZa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/2fa725-945c-48df-b629-2d140e4c5a3f/1/iPdXItsls3I97Npdhw32m_DYZa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b1:13:bd:fe:25:40:0d:61:3f:9f:02:91:46:55:d3:28:91:
98:80:02:a4:10:06:a9:b8:66:21:28:a5:34:b2:ef:cb:25:27:
75:39:43:eb:b5:e1:60:9a:2b:84:24:b6:51:64:19:df:1d:3b:
0d:22:92:bd:37:3e:3f:17:cb:bf:05:e7:ae:7e:c5:be:2e:cf:
4f:3d:58:ed:84:32:29:e7:c8:70:c8:16:c6:6e:f5:34:86:ab:
db:90:a2:9b:56:cf:ee:85:ff:1b:27:bc:5e:03:61:49:f1:af:
14:25:55:13:89:6f:72:44:64:62:60:56:e9:08:14:74:c8:6f:
78:4d:d4:d2:1a:e0:13:ed:ae:27:18:00:70:a7:56:9c:58:d2:
17:1b:f8:84:8c:a5:df:08:a6:83:1e:1e:36:c9:a7:82:a5:74:
2f:b4:39:22:52:cd:35:91:de:45:77:db:d5:19:8f:e7:98:14:
e3:20:f5:11:15:fc:36:f0:4f:26:b3:5f:19:e0:85:4e:41:ac:
25:93:f8:87:1c:cc:3d:bc:91:8f:24:54:7e:fd:6c:6e:ae:10:
b3:a3:7f:28:1c:a2:11:d6:59:e7:65:5a:37:59:33:29:10:11:
2d:4f:f8:52:ac:90:a1:52:97:5a:dd:a2:22:3e:23:cb:fc:ec:
90:05:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client