Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
File: iuSaSeoGdwqH11pcg1b0Vk4asew.mft (raw, json)
Hash identifier: B98SToD/9HHCUmLI8ycZW50Rfig9Tn8fvvk403eJk+Y=
Subject key identifier: CB:17:D0:37:B6:A5:B7:C1:E9:3D:2F:A6:D9:A9:A3:DB:1A:84:61:89
Authority key identifier: 8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
Certificate issuer: /CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Certificate serial: 0194BD17BDEB072273D22B9DD3EFC5ABFFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
Manifest number: 01C1
Signing time: Fri 31 Jan 2025 16:00:37 +0000
Manifest this update: Fri 31 Jan 2025 16:00:37 +0000
Manifest next update: Sat 01 Feb 2025 16:00:37 +0000
Files and hashes: 1: iuSaSeoGdwqH11pcg1b0Vk4asew.crl (hash: Le7oHvJFZ+KZsoEoNQwV8o0nMUOhMQaNWyqDD/LDVqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bd:eb:07:22:73:d2:2b:9d:d3:ef:c5:ab:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae49a49ea06770a87d75a5c8356f4564e1ab1ec
Validity
Not Before: Jan 31 16:00:37 2025 GMT
Not After : Feb 1 16:00:37 2025 GMT
Subject: CN=cb17d037b6a5b7c1e93d2fa6d9a9a3db1a846189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2d:90:a2:4c:fd:3c:5a:c0:74:66:a6:57:90:
49:9b:d3:b6:e8:3b:17:e8:21:8e:e0:31:9d:9b:79:
2f:9e:3c:c3:6d:a5:f9:81:17:d5:68:fa:61:67:a8:
36:2c:53:fb:d0:25:be:f2:66:a3:9e:a9:a4:4b:5d:
cd:32:54:b9:c4:43:36:3d:17:e1:8f:16:c9:7d:0b:
8e:73:46:d2:1d:f1:44:be:48:16:1f:a2:19:c0:4a:
3a:97:72:9b:01:ef:f8:1e:e6:76:f4:00:67:ea:92:
1a:77:49:29:0a:c9:84:8e:80:45:64:7d:85:9f:ff:
ce:2b:23:90:df:36:fb:67:03:f7:ce:03:3f:f0:09:
d0:cd:6f:fd:32:1b:43:d5:4e:c9:04:0e:a3:2f:78:
e2:f6:ee:1a:76:8f:6e:55:62:12:8c:c1:b6:d8:c3:
18:37:b7:16:0f:9a:51:da:1d:f8:13:ce:6b:3e:c7:
44:ba:92:72:86:c5:4b:d5:46:b6:bd:22:14:4c:37:
c1:c4:44:c9:e1:db:f9:12:1f:0c:4b:e2:3c:2d:f4:
96:eb:a0:60:08:ce:29:f3:2c:3f:32:ce:72:d1:1b:
70:5d:b4:73:f0:63:c8:18:28:2b:39:90:6e:ec:f8:
cb:b3:72:51:d6:62:8e:58:26:a7:01:14:3f:76:a8:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:D0:37:B6:A5:B7:C1:E9:3D:2F:A6:D9:A9:A3:DB:1A:84:61:89
X509v3 Authority Key Identifier:
keyid:8A:E4:9A:49:EA:06:77:0A:87:D7:5A:5C:83:56:F4:56:4E:1A:B1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuSaSeoGdwqH11pcg1b0Vk4asew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0221a-771f-46e6-b3c3-97f08c6d98d3/1/iuSaSeoGdwqH11pcg1b0Vk4asew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:84:21:77:16:e0:15:80:f7:52:75:a1:3e:96:9d:ed:6e:db:
46:17:be:04:11:6f:8d:55:79:57:24:34:c6:95:42:c9:5c:21:
fe:ac:29:ac:14:55:97:3c:41:91:0e:a4:62:a6:f9:42:b1:f4:
47:e4:80:ca:a3:3f:d2:c8:47:29:0f:cf:c0:6a:ed:02:c0:3f:
ee:6f:57:4f:37:a2:40:05:f3:07:aa:53:7f:9f:cd:07:6c:bd:
aa:8e:91:50:75:2f:5f:88:0b:a7:9e:59:62:94:d8:f1:df:51:
b3:d5:50:77:51:3f:31:5f:f2:ea:87:27:18:05:40:4d:27:2b:
03:99:bf:d3:51:08:b5:a4:61:b7:56:14:fa:df:6a:3b:30:03:
1f:ae:ce:8f:49:64:ba:98:3f:c4:e8:35:de:2e:6d:69:86:1b:
c3:e4:bc:db:89:f4:b0:eb:11:29:0f:7a:cb:ad:c6:9c:3e:6b:
c7:48:c0:7a:b1:93:72:cf:22:47:18:ff:93:09:c2:30:1f:53:
30:eb:6b:12:f1:a1:7b:53:e3:7e:60:97:ac:95:93:54:21:79:
00:df:36:4b:30:42:7a:a4:41:34:2b:ab:ff:81:e6:8b:c6:08:
a6:88:48:73:3d:90:0e:94:42:cc:92:ae:ac:4e:8d:73:d1:1c:
eb:20:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:36 2025 by rpki-client