Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
File: icKIUyrvyGlxuY1bTR2YGW2ey4U.mft (raw, json)
Hash identifier: 6gCmJPIXJNykUSk5wR8KUtkd2ZuaAfUS62HmWG1uoqw=
Subject key identifier: 50:F5:B6:E8:87:08:48:0A:10:3F:B5:4E:E3:71:FA:ED:3C:08:D2:6E
Authority key identifier: 89:C2:88:53:2A:EF:C8:69:71:B9:8D:5B:4D:1D:98:19:6D:9E:CB:85
Certificate issuer: /CN=89c288532aefc86971b98d5b4d1d98196d9ecb85
Certificate serial: 0194BBCDE7E1A47E266DA0AD7D380F49E149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icKIUyrvyGlxuY1bTR2YGW2ey4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
Manifest number: 059A
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: icKIUyrvyGlxuY1bTR2YGW2ey4U.crl (hash: h8d98q+H03vo0qVuMn2SGRgIuMkus6EiXSl0NOJn2UQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e7:e1:a4:7e:26:6d:a0:ad:7d:38:0f:49:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c288532aefc86971b98d5b4d1d98196d9ecb85
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=50f5b6e88708480a103fb54ee371faed3c08d26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:3b:e1:08:cb:60:8c:76:1c:99:37:9e:20:
3f:5a:56:51:ea:93:e9:2e:af:d0:c2:ea:70:69:9f:
c9:f5:dc:89:df:01:5a:38:6a:fb:4d:f0:a9:6c:de:
b5:b1:20:7e:0f:cc:89:d1:50:da:16:5a:7c:c8:11:
6b:59:c9:19:71:6c:85:d9:00:9d:85:7d:9e:c3:f7:
33:a4:00:03:3f:8a:b1:ca:30:9d:0e:1b:76:74:cc:
63:d2:3b:6e:39:38:91:5c:e3:14:6d:f9:55:e4:4b:
e5:27:00:05:a1:e6:76:39:1d:ef:01:c3:d8:66:20:
75:fc:10:44:bb:14:7e:14:ca:f3:cc:9f:c5:e5:8e:
57:71:c0:2b:26:d1:4f:f4:c8:e7:98:1a:09:5c:6a:
2e:ea:9a:42:27:e3:a7:5b:f4:85:5a:b0:9c:65:d9:
2b:7b:4a:71:a0:e7:eb:0d:d0:18:6d:07:a1:4a:e3:
c7:6e:de:5f:98:7d:71:0d:3c:5d:a7:b0:bd:7f:be:
f3:cf:0c:4e:ef:41:6c:9e:8f:5a:b0:eb:40:e9:c7:
0e:2b:0e:c8:98:c0:f9:49:96:f0:bb:8c:cc:a3:84:
48:0b:bb:c9:89:d1:0d:2d:7b:ae:a8:e4:a4:90:a8:
0d:74:d7:73:33:16:cc:a1:ac:a1:4d:18:8c:46:f5:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F5:B6:E8:87:08:48:0A:10:3F:B5:4E:E3:71:FA:ED:3C:08:D2:6E
X509v3 Authority Key Identifier:
keyid:89:C2:88:53:2A:EF:C8:69:71:B9:8D:5B:4D:1D:98:19:6D:9E:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icKIUyrvyGlxuY1bTR2YGW2ey4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/18dd8b-a010-42ca-bc99-0f867d9ff58e/1/icKIUyrvyGlxuY1bTR2YGW2ey4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fa:e8:06:fd:65:92:81:b5:47:78:cb:8d:84:7e:bd:b7:c0:
25:58:ad:b3:69:83:e0:f4:b9:04:5f:78:99:9f:54:ae:75:a4:
32:a4:80:19:08:08:76:e8:b2:f4:3d:b1:86:51:26:76:7d:5a:
0a:c3:3a:3b:68:ff:68:f0:27:03:78:8b:cd:4e:7f:25:00:37:
cc:23:49:98:34:5b:5b:7c:ed:37:f6:f9:ea:58:82:5f:8c:5c:
e4:a4:81:b7:4c:aa:b9:e4:05:44:70:29:39:7f:53:27:8c:06:
f2:69:95:09:13:21:78:90:37:31:a1:cc:7e:98:f4:f9:a3:52:
c6:49:4a:99:5d:5a:9f:43:60:e5:5f:d9:f1:8e:65:3c:40:4d:
1f:43:06:a9:c3:0b:2f:fa:44:a9:ac:4f:ab:71:71:b7:71:f1:
7d:cf:5f:af:c2:67:24:3a:10:21:5f:b0:07:d2:52:dc:91:8e:
03:32:a5:fb:9a:f2:3f:3c:c4:9a:d7:fc:cf:51:86:fe:53:b4:
65:04:f5:e5:b8:65:85:82:30:48:a6:a0:17:51:1a:1a:f5:1d:
3a:a6:1f:b4:16:2a:ef:f1:27:62:97:9a:e9:9a:cc:5d:43:aa:
27:01:0c:7a:a3:e9:ee:0e:38:2b:f2:95:53:95:94:de:40:3a:
47:02:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client