Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.mft
File: IhQgnik48W3KWTVwH6aG2Q_De54.mft (raw, json)
Hash identifier: D1DdnVjjSQggFC6vbRETUlVGEutCTJVO2NC95CEFFAE=
Subject key identifier: CE:8C:42:B7:91:52:7B:81:25:21:A2:62:A8:D7:4D:47:2A:96:FF:0F
Authority key identifier: 22:14:20:9E:29:38:F1:6D:CA:59:35:70:1F:A6:86:D9:0F:C3:7B:9E
Certificate issuer: /CN=2214209e2938f16dca5935701fa686d90fc37b9e
Certificate serial: 0194BC04E9D6E863ADC43E39AF791DAC56E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhQgnik48W3KWTVwH6aG2Q_De54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.mft
Manifest number: 02B6
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: IhQgnik48W3KWTVwH6aG2Q_De54.crl (hash: MmZxQkNMyqP++PV/FnzIr87J5F57xv3a34t6gqE9FgE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:d6:e8:63:ad:c4:3e:39:af:79:1d:ac:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2214209e2938f16dca5935701fa686d90fc37b9e
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=ce8c42b791527b812521a262a8d74d472a96ff0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:95:f7:89:b6:fd:bb:18:c8:b9:61:8b:e5:
88:71:78:d1:fc:23:f2:aa:eb:5a:76:de:03:91:ec:
db:f4:5a:ee:20:f2:99:f5:85:ef:6e:a9:ad:32:a4:
86:ac:a9:c7:76:4c:43:41:44:85:5a:72:3a:66:26:
66:6c:3e:27:db:ce:35:ae:a1:f7:9d:9d:11:b2:6c:
35:ed:a8:d6:eb:36:9d:3c:86:53:a8:94:4e:36:b0:
dc:f2:6a:fb:74:ef:42:c1:08:ea:31:9e:b9:cf:d9:
8e:e4:3b:87:4c:f0:e9:4a:c4:67:d5:62:30:d1:43:
f9:d1:e4:9c:39:0a:29:7a:19:c6:ab:0a:f6:6b:64:
82:a8:68:c3:df:f4:af:46:1a:eb:8e:ee:b4:8a:55:
d3:e5:fa:ea:c1:b2:e2:db:73:6a:54:10:6d:ca:a2:
74:a0:37:81:3d:86:3a:db:8e:95:0e:dd:79:0e:ba:
20:64:aa:4a:b7:94:0b:40:c9:a0:c2:d0:0d:28:c7:
34:27:bf:d7:a1:90:36:9d:3a:63:64:82:2d:8c:58:
b5:26:1a:be:27:ec:f7:78:fc:46:5c:55:6b:e8:1f:
64:fd:75:b9:7a:ff:68:27:d1:3b:ef:f8:c8:85:50:
84:61:6f:30:0b:bb:c2:77:03:2b:b7:1b:8c:61:6c:
7f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:42:B7:91:52:7B:81:25:21:A2:62:A8:D7:4D:47:2A:96:FF:0F
X509v3 Authority Key Identifier:
keyid:22:14:20:9E:29:38:F1:6D:CA:59:35:70:1F:A6:86:D9:0F:C3:7B:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhQgnik48W3KWTVwH6aG2Q_De54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9f46c0-90be-41cc-ad5d-4add393a723e/1/IhQgnik48W3KWTVwH6aG2Q_De54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:65:45:ee:2d:4a:d0:88:0e:14:ca:d4:c1:d6:bc:69:db:19:
36:9c:f8:81:9e:e4:d4:d2:c0:a0:22:31:88:64:7e:0f:29:dc:
6a:67:7b:ac:bc:1f:61:d7:77:4f:ae:92:c0:81:d5:cb:3f:fe:
b9:20:24:33:ed:36:52:51:1a:98:b9:85:07:7b:25:ab:36:b1:
e1:5b:30:6b:55:a0:b7:fd:eb:ac:90:b7:1a:a8:ee:77:12:05:
71:7d:cd:b5:d1:f3:00:0a:3f:39:45:d0:bf:3e:2a:25:b8:50:
d4:2a:6c:40:c2:ee:0e:8c:4d:d9:dd:3e:3d:06:e8:92:04:59:
bf:e9:55:b9:e9:13:64:ff:a8:bc:dd:67:16:3a:9a:37:75:49:
03:69:cd:69:26:fc:a1:10:9d:10:9b:80:ae:1f:18:3b:ef:80:
45:63:39:95:69:32:9c:d1:04:51:5b:4e:80:20:fe:fd:20:be:
72:39:8d:ab:8f:9f:61:1c:ae:40:a6:da:1f:a3:9e:cf:34:41:
2e:b9:ab:7e:08:e9:ad:1e:e5:cb:c2:cd:39:c7:2a:9e:0e:05:
3a:de:67:c5:ad:fa:f2:56:4f:14:2b:6b:12:22:86:f9:21:fb:
04:81:79:f8:d0:b2:cc:b4:74:ee:8a:9d:13:15:fe:c2:01:8a:
7f:09:0f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:46:02 2025 by rpki-client