Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier: y9wjVTFk63R9sD25Lo8HM83YPMOKL9bw6CqsHDPjtGQ=
Subject key identifier: AA:31:E8:5B:B0:E2:4A:29:51:29:84:58:2E:2F:03:D0:DA:95:98:B7
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer: /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial: 0194BBCEB6B4B24DE5256A7DEDDE9FCA0895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number: 04B4
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: XcHKbrgFCZLT0Rkrf7BlQh8BRIopwUPqrKXy0/9zCLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b6:b4:b2:4d:e5:25:6a:7d:ed:de:9f:ca:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=aa31e85bb0e24a29512984582e2f03d0da9598b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:17:d9:16:95:d5:9a:4d:93:4b:3e:20:48:
da:17:93:25:32:20:8c:f8:5d:15:de:6e:2b:2d:4e:
b9:53:70:87:e2:5c:68:90:bd:fe:15:83:7d:12:94:
a5:e4:f1:ac:63:37:c1:94:33:bb:15:9f:5e:1b:e8:
27:51:e9:d1:63:8d:41:f8:5b:81:05:ee:35:f0:92:
0d:82:72:b7:23:cc:a7:0d:da:2b:e8:1f:f5:ef:1c:
71:00:65:51:d8:85:81:99:ff:d4:c7:5f:0e:2c:db:
aa:02:72:fe:4d:cb:a0:2d:d8:d8:26:04:54:d4:a2:
46:59:45:68:35:f5:e2:97:5f:0e:87:37:e0:d3:ad:
9b:d6:68:94:5b:c8:ab:0a:3f:02:d1:3a:34:86:57:
68:c2:3c:19:bc:88:00:da:0d:49:84:0b:88:f3:5c:
8e:e3:6a:eb:fd:1a:a1:28:a6:5d:a8:37:34:2b:0d:
7a:73:f1:83:51:83:79:12:c4:f5:67:ef:0c:b7:6a:
94:e3:21:76:12:9e:fd:ce:9a:4f:76:a3:2a:85:dd:
7d:ac:97:27:dd:a6:9c:54:14:47:18:86:ea:9b:08:
2a:2c:ed:2c:b5:93:c5:be:c3:4b:f7:b1:bf:75:ab:
96:b2:04:bb:7b:ad:71:13:12:d6:e9:eb:4e:e6:75:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:E8:5B:B0:E2:4A:29:51:29:84:58:2E:2F:03:D0:DA:95:98:B7
X509v3 Authority Key Identifier:
keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:ba:d2:b4:90:ee:ed:69:76:36:5b:a0:ee:b7:e6:ef:2c:
13:f7:89:85:ff:90:79:15:fa:ad:d1:b4:18:b2:de:16:c7:2e:
3e:b9:66:ba:85:71:57:0d:1f:8e:6b:22:17:b9:d6:4f:a5:80:
d9:f9:8a:2a:6e:22:32:76:22:74:4b:8e:e2:f9:fc:a8:af:e5:
25:1c:d8:68:af:9b:0d:a4:a5:97:9e:01:78:b4:8b:22:8a:96:
07:08:a8:3f:dc:09:71:c8:2b:63:ea:b9:7c:32:5a:63:fb:21:
3e:07:84:a4:4e:80:10:53:fe:80:92:81:23:82:f4:66:8d:f7:
b7:80:c3:49:f4:12:b2:b3:7f:7d:1c:99:48:63:4f:15:a0:ec:
ce:50:62:cd:eb:0c:14:15:bf:07:ed:2e:5d:19:60:57:ce:6f:
09:d8:88:49:9c:a1:09:d9:4a:8c:9e:78:15:59:a6:ee:07:0a:
e6:84:8f:a2:1d:a6:6c:38:45:6f:f1:89:57:30:e2:8e:b8:20:
81:3c:d3:6c:c2:61:a4:e7:21:b7:b5:27:44:2d:10:ec:fb:d0:
1c:eb:a0:b0:82:8f:47:62:55:0d:63:6d:8a:4f:51:1c:d7:4f:
5a:97:24:41:29:57:9f:63:ab:cf:a0:6e:b9:37:66:e0:70:27:
e2:ba:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:35 2025 by rpki-client