Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: 77nOmatW7npPRXuWByAjgz7Mpgr4/t7baSl4eXtVRvA=
Subject key identifier: A6:4D:DB:2E:85:91:15:E1:6D:53:34:87:73:49:35:07:B2:82:97:90
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 0194BBCE71C9AE227EF2C49602D0CE5684B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: LdO/BvOEW8dHkPRVsd1eWr5F45QnAX/l1b0Wbc2tgLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:c9:ae:22:7e:f2:c4:96:02:d0:ce:56:84:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=a64ddb2e859115e16d53348773493507b2829790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:2b:91:7c:37:5d:ff:ef:ee:8f:d6:22:f2:
46:0a:25:c7:b5:54:60:ec:e8:76:94:22:98:d1:9b:
3b:5e:db:83:4e:28:1c:a9:fe:d9:83:e8:98:e3:67:
c7:a8:3e:6a:19:a5:60:f2:7c:34:b1:05:c4:d8:c0:
8e:e2:af:c4:c6:d8:a3:a7:3c:96:25:a6:f8:7c:5c:
03:0a:a9:92:21:8d:a3:0f:8c:bf:91:ac:fa:96:11:
76:ff:31:fe:14:66:dc:7d:ab:1f:ab:df:e7:0a:a7:
80:4f:26:70:a8:64:bb:9c:f3:d1:e0:57:00:af:88:
8e:d1:0d:9c:33:1e:b5:04:f0:2f:4f:81:bd:5e:1d:
0c:7a:b5:76:0e:f0:98:db:53:ff:bc:7f:3a:05:d6:
da:e1:82:79:43:ef:70:42:20:ad:09:d7:d4:9c:4f:
f2:5e:13:4f:af:92:23:41:16:9e:63:2b:49:c4:a6:
7d:cb:6e:bb:10:98:15:17:c1:86:71:35:31:12:40:
66:42:f3:3f:d5:83:51:a8:b4:af:28:45:e5:6c:63:
b7:31:20:9c:5d:86:a2:ca:35:33:c5:c1:0e:95:f7:
48:33:15:22:f5:65:fe:d6:a0:8a:6e:f6:9c:52:77:
d2:8a:ae:44:7b:91:9f:e4:2c:a1:04:09:65:99:d0:
19:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4D:DB:2E:85:91:15:E1:6D:53:34:87:73:49:35:07:B2:82:97:90
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:67:70:07:50:4c:d0:81:37:ea:00:87:45:a9:f9:57:37:d0:
15:09:e4:ab:fd:22:10:05:1d:e2:50:14:6e:ed:f0:43:e7:f8:
17:7a:eb:ed:a4:c2:9a:c4:0e:80:dd:a5:52:b8:bd:6e:04:c2:
06:1a:83:8d:38:40:8b:63:7d:36:a8:3f:8c:e7:40:00:22:98:
76:e4:70:43:c2:e4:67:a2:0f:20:c9:6f:c8:2b:f0:93:5b:1d:
69:5a:63:7e:23:20:2d:05:c8:d6:f2:cb:73:0a:01:df:ff:c2:
72:b6:75:a4:fb:38:53:95:83:da:af:b4:6b:b6:49:9c:9b:19:
7f:4a:15:c2:18:c9:36:63:89:ae:23:a4:84:6a:2d:7f:3f:3e:
94:e9:06:40:b4:f4:0d:30:ca:14:a9:95:9d:bc:39:49:a7:87:
91:d0:a7:cb:fc:26:28:4e:41:eb:c9:47:f7:e8:12:d2:30:08:
73:99:81:6f:8d:89:21:e2:e2:4d:a5:41:c1:70:0a:91:91:59:
6c:d0:a3:05:71:08:86:b4:b3:1a:d7:b8:15:88:11:7d:09:aa:
54:23:e6:b2:be:8a:c4:2f:e3:f1:29:00:6b:d7:f0:8f:80:d8:
89:fb:43:c9:8a:68:d8:cb:df:62:bd:98:2a:1d:03:ec:ce:c8:
7f:fa:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:01 2025 by rpki-client