Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
File: iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft (raw, json)
Hash identifier: 0iTM+eI2bNir0e9y6AfDRi3vC/MSodU51x2r+01xVTo=
Subject key identifier: D6:0E:96:3B:55:9B:9C:9B:74:65:D6:F6:50:D5:78:E5:E0:16:EE:98
Authority key identifier: 89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
Certificate issuer: /CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Certificate serial: 0194BCE0C83862B71C3CB49DBDA7129061E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
Manifest number: 0402
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl (hash: 01P8TvF7CpziCdc7vs6Vix4CTI0BvpzCJU2NX4iYpGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c8:38:62:b7:1c:3c:b4:9d:bd:a7:12:90:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890f3fab2349c01b1ac8fd0b921c60318ce184d6
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=d60e963b559b9c9b7465d6f650d578e5e016ee98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:80:d5:b4:c7:e0:29:7a:a1:06:c2:3d:56:
34:83:8e:f9:b9:31:4b:8d:e3:d5:cc:0a:a1:bd:06:
c6:7a:07:b0:17:5e:63:4e:4f:cf:d7:c8:84:f6:b6:
1f:bf:7a:45:1e:87:fe:1d:10:f1:73:da:ee:76:8e:
9c:b3:2c:63:2f:fb:54:f9:6a:5b:18:54:66:64:f1:
0f:22:8b:51:fd:50:f9:ea:f1:c9:ad:6c:56:fd:94:
45:9b:11:93:9f:cc:2e:00:74:21:a0:fe:89:67:4b:
de:55:9f:66:b7:44:b7:49:e6:bf:ed:69:c9:53:bb:
f1:75:c5:bb:0a:4d:91:8d:a9:6e:6c:64:92:24:2c:
34:a7:52:bc:12:d1:52:53:12:70:47:d8:57:b5:4b:
1d:ac:1f:ac:d4:a7:2a:14:ef:c0:f3:6d:04:60:57:
7c:4f:a7:03:bb:a1:d2:4d:7e:ad:ba:ec:18:f1:85:
e8:e2:78:e4:f1:a7:bb:c7:10:95:e5:3b:3c:60:e0:
64:14:b4:1e:1b:c9:11:0f:eb:06:a0:eb:ae:18:5f:
80:2e:9e:87:d6:31:22:62:47:26:6d:b5:98:3e:52:
65:ae:a0:13:5c:9e:1b:93:54:74:34:f5:c7:b4:65:
48:c0:64:3f:8f:e9:0d:3e:b9:6d:24:2a:d8:4b:70:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:96:3B:55:9B:9C:9B:74:65:D6:F6:50:D5:78:E5:E0:16:EE:98
X509v3 Authority Key Identifier:
keyid:89:0F:3F:AB:23:49:C0:1B:1A:C8:FD:0B:92:1C:60:31:8C:E1:84:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQ8_qyNJwBsayP0LkhxgMYzhhNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1ce3e3-c859-4b71-b6d2-9359d8de2975/1/iQ8_qyNJwBsayP0LkhxgMYzhhNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b8:86:26:c6:38:e4:1b:43:c2:8a:8e:4b:28:9a:27:3b:6e:
89:b7:5f:59:cd:27:13:2f:0c:5c:91:7a:ed:48:82:22:bc:86:
14:eb:29:01:9f:c4:17:0c:02:4f:f6:74:66:e5:6a:6a:78:d4:
fb:c2:cb:70:71:ad:02:d1:11:1f:a5:85:4a:47:26:47:5d:8b:
bc:e8:81:32:3c:a4:d0:c7:1e:47:c8:6d:7a:7c:bf:1a:fe:6b:
e6:4e:80:65:d9:b2:1d:76:86:d8:0b:df:c4:e5:91:c3:f6:1e:
59:70:f1:40:d5:41:8c:16:13:17:99:f6:d2:04:bb:6a:56:06:
65:56:84:fa:d1:68:10:4b:ae:e8:e9:cd:c7:c1:99:c8:bc:0f:
dd:0e:c6:5d:b8:db:16:33:bf:c2:0c:4a:64:b5:3d:b5:e4:45:
95:ff:cd:32:14:f9:c4:20:03:81:70:2b:7a:c9:30:16:64:2c:
18:2f:f9:3a:94:cf:6b:1a:96:a8:17:07:2b:02:d0:de:66:b5:
51:69:3f:e4:7c:8a:e6:8d:f9:26:52:07:ea:bd:7e:b2:ee:07:
68:f1:dd:cf:ca:97:ba:d7:57:c1:e5:7f:03:ac:4d:4d:4d:90:
5a:84:70:b5:06:4f:a3:e4:00:af:88:f4:c8:58:82:a9:5d:68:
d4:7b:33:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:47 2025 by rpki-client