Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File: IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier: NY3FTWmMDBwNG6m/Tz8O/F6PUbN8pEHjJ+Dka0x/9t4=
Subject key identifier: AC:8B:AA:50:13:1F:F9:06:3D:63:A5:B6:29:DF:70:4D:6E:E2:A0:9A
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer: /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial: 0194BC73155714B0DFA753A98D89660FD73B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number: 0AD1
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: S4xDM10MjhNqDWT36DFkdW7hrmr0n3anjkx2JTGP4Lw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:57:14:b0:df:a7:53:a9:8d:89:66:0f:d7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=ac8baa50131ff9063d63a5b629df704d6ee2a09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:09:f5:c5:6d:68:ed:78:72:d3:ee:3e:64:92:
b0:04:3f:64:f3:23:eb:16:6c:b4:d6:63:e1:ce:7c:
52:9a:e2:24:3e:a5:90:60:aa:35:52:70:7a:92:3b:
8e:03:f8:ba:6f:e9:00:38:3a:22:df:45:e0:16:da:
b7:68:29:8f:b8:9d:6f:d8:98:63:c4:fd:0c:18:55:
2c:a3:33:fb:e8:5f:44:65:2a:d4:a0:57:b1:39:65:
42:d3:2a:78:aa:89:37:76:96:32:c6:8f:8d:c9:ce:
25:1e:19:c9:bf:10:1b:f4:23:22:53:9e:c3:88:da:
c9:fc:83:a8:0c:d9:e3:fb:f8:ce:a2:e9:ce:5f:bc:
32:85:16:b2:af:c2:5d:79:34:c1:9c:5e:16:8c:6d:
8c:f2:20:b8:ac:af:4f:e3:25:32:94:6e:c1:e8:9a:
5e:cf:55:46:ce:da:45:88:e2:77:4f:06:b4:59:57:
3c:66:64:e1:28:7c:56:fb:26:08:76:ed:40:0d:c5:
60:67:70:c2:44:90:36:bb:02:1b:c6:25:16:7b:7f:
73:c1:d7:7d:aa:92:7e:6d:3e:62:8a:6c:4c:a8:58:
56:1b:a4:df:b7:5f:cb:14:54:7e:db:a1:40:e0:e1:
ea:e1:ca:91:36:68:3f:7f:86:5f:0c:9f:fc:b3:7d:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8B:AA:50:13:1F:F9:06:3D:63:A5:B6:29:DF:70:4D:6E:E2:A0:9A
X509v3 Authority Key Identifier:
keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a9:69:26:ba:70:6b:3b:4a:80:ac:56:59:77:d9:2f:be:e4:
9b:63:8b:a6:f0:f3:0a:1e:8c:81:68:df:14:ec:0d:0c:0f:a6:
5c:2e:b2:35:d9:85:31:4b:37:3c:56:3e:7b:8d:ac:31:ff:ea:
c4:fa:e1:40:30:15:32:46:97:eb:30:55:47:e9:1f:5b:57:61:
38:ec:f0:b4:1c:3f:49:7a:44:e2:c4:d0:0c:04:ac:cd:41:a2:
5d:e4:1f:d0:dd:23:38:46:5d:bb:2e:62:82:b7:d7:af:3b:11:
9e:75:ef:ad:6f:2a:e4:2e:b2:9c:87:f4:4b:d6:b7:7c:5f:40:
7c:88:28:e8:40:1d:4b:26:b6:8f:b0:56:ea:b4:41:46:73:18:
ea:62:f1:2d:7e:b5:c9:bb:0f:59:06:06:c1:c2:92:14:3d:4d:
a5:67:ea:07:96:b3:dd:65:07:e3:fd:1c:9b:71:76:05:cf:c3:
d8:ee:06:7e:35:84:82:bc:6b:10:58:ff:74:bc:5d:cf:a5:46:
e5:20:b7:a1:a2:44:56:3a:72:da:e7:0a:d3:80:28:f8:60:84:
e9:47:50:52:f5:66:70:eb:e3:7e:07:25:fa:d5:8b:40:a9:b9:
a2:6f:ab:79:78:0b:ba:84:4e:3d:d1:d3:a9:16:91:fb:9e:86:
07:b1:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:23 2025 by rpki-client