Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier: 1bm1AZX5H8eLmmFbnml63v5FOcKFr3DRkOjfGdvym14=
Subject key identifier: 5A:90:11:92:F7:09:02:51:6D:E1:08:0D:11:8C:01:02:FE:8A:6E:4C
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial: 0194BC3C6E28D54744D3C229BDE4F1A38739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number: 1424
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: Gdak3ayK0k6iQUov5rDyLaoGGv3TIbOsFeT++Ud3ubk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:28:d5:47:44:d3:c2:29:bd:e4:f1:a3:87:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=5a901192f70902516de1080d118c0102fe8a6e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e9:4b:e3:b9:a3:cd:8e:40:03:38:b9:54:3b:
a6:de:0a:d9:73:66:4d:da:26:a3:7d:f3:0a:64:f3:
a0:06:8d:c8:26:97:e7:96:16:87:44:a3:f9:27:3a:
6f:41:9f:b2:ad:c8:f0:4c:1a:a2:ca:00:82:05:5f:
e3:ae:09:a1:61:49:5c:38:58:2a:49:58:87:55:5d:
8e:8a:53:45:4b:56:d2:d6:18:95:5e:89:04:e7:d2:
99:f0:9d:dc:a6:cf:dd:87:d0:1c:d5:42:b7:91:03:
34:80:7f:8b:f7:84:59:26:55:7b:47:2e:ec:ae:8f:
fa:f0:67:59:e8:42:b4:0b:62:df:7c:97:33:84:c1:
5e:72:52:aa:88:ba:8c:c5:50:25:7a:40:f5:df:d3:
91:eb:2e:71:e7:8a:7b:8d:ae:f0:cb:e0:9f:e7:b7:
c6:9d:de:6e:bb:6f:3f:29:de:2e:42:cd:00:14:c2:
4f:98:39:08:7e:72:4a:75:85:ff:73:0f:dd:6b:e0:
19:42:e4:09:26:f1:70:d1:13:8d:74:34:52:3a:dd:
f3:7a:e5:c7:ef:14:ba:ee:77:c0:38:04:f3:6f:91:
c2:07:ae:5c:58:b8:c6:8a:7b:63:54:6f:90:d4:14:
ee:0f:11:f0:ae:b6:9b:6e:86:88:8f:1e:01:10:3e:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:90:11:92:F7:09:02:51:6D:E1:08:0D:11:8C:01:02:FE:8A:6E:4C
X509v3 Authority Key Identifier:
keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4b:39:2f:88:fb:d5:e0:13:91:be:60:2b:f0:31:de:d7:0d:
eb:23:3a:89:bb:44:28:6f:0b:2e:5e:67:a5:b7:bb:78:85:0e:
f2:24:61:aa:f2:29:fc:16:c4:03:a5:53:98:ee:08:2d:b9:24:
3e:81:c6:24:6e:8a:d0:c3:70:1c:e4:30:01:72:01:56:da:f0:
bd:a6:d4:e5:8c:05:11:61:cd:6e:1b:0b:f7:41:99:4a:93:30:
d4:e9:18:ca:b7:25:96:af:7c:51:73:46:0f:25:f4:01:b7:2d:
d3:87:45:46:eb:ff:55:df:e6:c1:71:d2:fe:93:e4:ee:53:5f:
5b:97:56:31:51:6c:9d:f1:dc:e4:53:93:e9:4f:f2:0c:b5:ed:
50:eb:01:55:8c:3b:fe:82:76:88:75:22:e6:b8:70:84:83:cc:
18:73:72:e9:05:9c:e7:bc:13:fb:b9:17:a8:db:cb:aa:a0:0e:
66:41:90:50:32:1e:a5:11:fe:73:73:93:30:36:80:ea:7e:fa:
be:f1:45:64:76:2e:01:d9:24:5d:e5:04:0f:6b:96:ed:3e:fc:
6d:3d:39:49:5a:b4:be:3c:03:76:64:a5:e6:e3:75:c8:0a:5d:
30:83:d2:3c:af:b9:d2:46:bf:b4:21:d0:e1:6e:c1:0a:2e:d2:
f1:c7:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:00:43 2025 by rpki-client