Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
File: IgTxXPMNc4SLB038rCYTgAYVatQ.mft (raw, json)
Hash identifier: 6MRltl8lEgoVI6TO0N+xzhH3Kg+XMU+C6bcIqLQ2zNA=
Subject key identifier: FA:74:33:0E:A8:E4:12:22:65:C9:C0:EA:61:0E:A1:2C:C3:BF:2A:93
Authority key identifier: 22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
Certificate issuer: /CN=2204f15cf30d73848b074dfcac26138006156ad4
Certificate serial: 0194BBCEDF36A012A797C50523DE4CEA6703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
Manifest number: 0B37
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: IgTxXPMNc4SLB038rCYTgAYVatQ.crl (hash: Bl4NaYDLOd1Ye6tiFjqWywUTr/H34pOuPy188JYLuiI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:36:a0:12:a7:97:c5:05:23:de:4c:ea:67:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2204f15cf30d73848b074dfcac26138006156ad4
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=fa74330ea8e4122265c9c0ea610ea12cc3bf2a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:42:58:b2:03:21:b6:5a:73:f2:fe:73:c9:
b1:fa:5b:b8:8a:ce:15:44:df:14:d1:cb:37:71:85:
09:b1:33:4b:18:3d:96:f8:a6:33:fa:57:a4:3c:99:
75:b6:77:e1:a8:eb:d5:e2:25:85:1a:b3:42:2d:86:
cb:2b:f6:7d:01:f3:06:93:9f:a4:a3:7a:45:e5:12:
ef:5d:c5:d8:fe:e3:ab:d8:48:b4:b4:0e:57:f7:54:
ed:53:1c:a9:6c:f1:5e:a8:d1:7f:f3:c7:6a:ce:c5:
45:46:ea:1a:d1:eb:ec:43:ca:6e:c3:8e:33:17:32:
bc:6b:b0:dc:05:33:a9:f5:2b:64:fa:1f:0e:b9:13:
8e:b7:ff:bf:74:b8:2b:93:9d:17:59:8b:d5:64:7a:
4e:8d:80:3f:4e:51:29:07:63:5b:bf:32:82:19:7b:
8b:21:82:7c:7a:8e:77:4d:14:f9:16:4d:e2:de:c8:
b2:7c:74:08:e4:da:f1:09:96:d3:79:e6:63:1a:46:
9d:41:c8:f7:6f:e8:c8:6f:2f:79:53:ac:0b:09:4d:
76:24:aa:2d:0e:7d:93:19:28:b3:49:d0:6d:8e:ac:
6c:05:70:f5:d3:ce:4d:62:db:31:aa:f1:c1:2f:d9:
16:dd:c3:76:d5:85:80:4c:a9:11:b2:75:48:a3:de:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:33:0E:A8:E4:12:22:65:C9:C0:EA:61:0E:A1:2C:C3:BF:2A:93
X509v3 Authority Key Identifier:
keyid:22:04:F1:5C:F3:0D:73:84:8B:07:4D:FC:AC:26:13:80:06:15:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgTxXPMNc4SLB038rCYTgAYVatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3872cf-aa59-4c98-b7a3-c1b10239dd58/1/IgTxXPMNc4SLB038rCYTgAYVatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:69:60:35:c8:dd:95:8e:91:65:f5:90:c9:c7:a1:f6:66:38:
0f:7c:2c:c6:9c:c9:dc:93:0f:9b:b0:39:b2:0c:01:ac:8b:9c:
df:85:00:bb:e6:5a:c6:c5:f3:7f:17:44:92:76:b9:91:fa:03:
4b:2f:bc:e1:65:1c:28:0a:98:a4:af:9d:45:32:12:a8:1f:14:
0a:ff:81:48:c9:d8:fe:a8:1c:03:d9:5f:04:d7:88:d8:1f:90:
c6:5d:f7:f3:bd:d0:e9:81:a1:5b:d3:47:b2:29:06:3b:be:bb:
34:21:5f:37:5b:f9:b3:82:67:93:5a:be:dd:67:72:bb:1e:84:
14:0d:e6:5d:7c:8f:47:bc:75:b0:ca:12:ad:9b:b2:7d:21:b5:
00:00:2a:4c:7a:12:52:e3:09:a1:fd:32:18:8a:8f:06:7d:b5:
40:70:da:ad:dd:49:f8:b7:38:ab:fa:fe:ca:80:81:07:ee:eb:
fe:ab:e6:83:90:4b:9c:a0:04:41:81:64:b3:5e:67:d5:74:80:
25:5a:fc:87:38:7e:24:62:6d:84:c1:46:4d:00:28:55:c3:66:
f2:71:7e:ec:88:11:62:3f:24:e6:eb:41:6d:ee:24:0b:6c:27:
7c:04:29:a1:2e:f2:c6:85:83:6a:fc:20:3a:7c:8d:34:18:87:
69:39:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client