Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
File: ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft (raw, json)
Hash identifier: 1M63YlHhaT2Zj5V8DSYuvuJXG99ZDveB5YBWoPoEQN8=
Subject key identifier: 6A:E4:49:7F:5D:15:38:D6:3E:4C:94:0D:35:71:B4:7D:F7:17:08:A2
Authority key identifier: 22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
Certificate issuer: /CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Certificate serial: 0194BC72A8E8F453C6B7CE5F6AAAF3A6F146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
Manifest number: 0A2E
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl (hash: BYiCtGVXT0+X6Bul2h1x8AZIFUSt7l8xRHnsAoXSQao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:e8:f4:53:c6:b7:ce:5f:6a:aa:f3:a6:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22dc6e4743ed5cc843032852896ef15f4892edb0
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=6ae4497f5d1538d63e4c940d3571b47df71708a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:51:5e:07:f1:7d:f0:25:b7:40:c9:d1:76:
53:5d:18:ee:eb:a2:09:12:01:1c:97:ac:97:68:99:
00:ff:59:9c:48:f4:83:ee:b9:5d:05:34:e5:da:7d:
0b:60:d1:0f:ba:e2:e1:d9:98:a3:7b:52:1c:14:32:
d1:26:ae:85:f3:a4:3b:00:13:06:f0:16:3e:25:e1:
99:59:36:a9:26:85:95:b9:ac:86:cd:08:ea:b7:91:
be:66:d2:28:94:54:28:7b:46:7a:2a:e0:56:7a:51:
6c:ef:7c:0a:43:1f:b1:75:a8:93:b9:ef:29:83:9e:
ab:9e:0d:6f:fe:cd:8e:b5:4b:5c:d8:f9:ea:c3:bf:
d4:8e:87:d3:29:9f:cc:17:55:7e:e7:85:7d:32:85:
19:72:cd:5b:21:ee:9b:9e:a9:fb:2f:48:bb:f6:23:
f6:34:c6:1d:4f:74:8f:19:de:a4:af:16:2c:14:55:
f3:db:7e:0a:55:ba:81:24:29:0e:2a:7b:46:9e:13:
28:a9:44:68:b6:8e:a8:f6:a2:67:50:47:d5:cd:85:
ed:19:8b:a8:10:a4:68:c4:59:d0:a2:25:31:d3:ea:
d6:f8:38:a3:2d:cf:87:46:bd:95:0d:b6:af:e9:e0:
a3:34:2f:d6:7f:5b:e2:25:92:e4:ad:79:70:8e:db:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:49:7F:5D:15:38:D6:3E:4C:94:0D:35:71:B4:7D:F7:17:08:A2
X509v3 Authority Key Identifier:
keyid:22:DC:6E:47:43:ED:5C:C8:43:03:28:52:89:6E:F1:5F:48:92:ED:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItxuR0PtXMhDAyhSiW7xX0iS7bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/daf850-f587-44b2-8de4-a8585ff93546/1/ItxuR0PtXMhDAyhSiW7xX0iS7bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e7:3c:a6:38:74:d2:d3:13:da:0a:c0:e8:65:55:45:b0:84:
48:66:99:09:45:84:40:72:86:d3:49:57:3c:42:66:9b:96:93:
fd:c4:4d:2a:09:08:de:d9:4d:eb:6d:15:46:df:8f:e7:61:64:
3c:8f:4a:65:57:c6:57:fb:10:e2:f9:8f:d4:0a:84:77:96:d4:
59:42:7a:b1:c3:4e:df:b8:91:97:9e:e0:3e:19:40:6d:a5:33:
a8:29:b7:0f:1d:42:62:7b:b0:7c:67:ff:ea:b9:28:f5:f8:4d:
ae:1d:5f:d4:a0:f3:59:c2:59:01:55:64:8a:88:4d:88:72:36:
e4:fa:86:e1:a9:99:40:45:01:a4:90:31:a0:8f:cc:2b:99:99:
a4:2e:d2:03:ac:ac:a3:0f:2c:6d:85:58:7e:a3:a2:38:e5:0d:
6c:67:8d:f0:72:f2:50:1c:49:a1:6f:32:e4:a2:47:79:08:30:
0f:e5:ef:fe:5e:54:fc:e6:46:d8:01:68:31:4d:dc:3c:67:7c:
02:ab:04:51:af:98:b3:4c:65:cc:34:47:d6:91:28:66:8f:6f:
ec:78:2a:cf:b5:37:bb:87:f9:e6:0e:d5:5e:3f:2a:e8:40:49:
3c:ab:e9:36:e2:0e:1c:f3:72:ce:27:d8:af:f3:ff:b6:7b:21:
66:50:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:55 2025 by rpki-client