Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
File: r-iiApeGib2NX15X_MG_64Z8Mio.mft (raw, json)
Hash identifier: 9IBy0lsIx1AJZvHajpKJ4nkOGUuIWQ3B53hrrrKdiRc=
Subject key identifier: A5:7D:A0:00:48:B1:F6:D2:77:2A:22:B1:D3:8F:83:7C:1E:D8:B7:2A
Authority key identifier: AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
Certificate issuer: /CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Certificate serial: 0194BBCE891F80898EE48E185C31567053EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: r-iiApeGib2NX15X_MG_64Z8Mio.crl (hash: F8Ura6TqR5oyLk77WyDXqrsobDPHuGMu7MpEOqfBpCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:1f:80:89:8e:e4:8e:18:5c:31:56:70:53:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a202978689bd8d5f5e57fcc1bfeb867c322a
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=a57da00048b1f6d2772a22b1d38f837c1ed8b72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:e1:97:51:6f:29:d9:7a:7d:08:1d:4d:c2:
01:ff:e7:f1:e5:85:26:5b:30:c9:01:10:0f:b0:7b:
d6:f4:f9:f8:9b:95:db:36:cf:6f:f1:24:fe:d9:42:
d0:2c:7a:64:7f:4d:4a:2b:d3:aa:48:cc:db:d9:e2:
15:00:b7:6b:9c:c5:a1:c8:56:bc:0e:5d:ea:07:3c:
34:42:53:b2:b6:22:83:c3:bc:ed:79:60:3f:e0:9e:
ee:7f:fc:b7:5e:fd:b6:fd:f7:ef:de:e7:a1:4e:0e:
5a:ac:f2:0a:65:35:f0:7e:37:1e:43:26:c1:fa:1c:
26:c0:f7:de:3a:d6:7d:91:a2:01:b9:f3:e3:60:7f:
46:4e:92:68:f6:6b:a6:67:d8:d5:cb:db:2e:71:06:
95:41:41:76:3e:5e:50:dd:a8:16:bb:f3:f4:79:cd:
13:b1:08:2e:a5:88:c5:ad:62:22:21:90:21:e7:01:
a1:51:72:70:ee:19:5a:2e:d8:7e:38:39:40:52:af:
8d:ca:5e:79:46:be:22:87:29:c1:17:ae:d6:81:7c:
11:7d:b9:3e:07:6c:4a:19:36:c7:61:08:c8:79:ad:
d9:5b:9c:ff:a6:8a:e3:57:93:d2:33:b6:61:37:fe:
21:73:60:03:b2:ea:ce:56:fd:a1:8a:ec:39:9a:5a:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:A0:00:48:B1:F6:D2:77:2A:22:B1:D3:8F:83:7C:1E:D8:B7:2A
X509v3 Authority Key Identifier:
keyid:AF:E8:A2:02:97:86:89:BD:8D:5F:5E:57:FC:C1:BF:EB:86:7C:32:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iiApeGib2NX15X_MG_64Z8Mio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f907aa-2acd-4dc7-9f0d-d7b08948f7c7/1/r-iiApeGib2NX15X_MG_64Z8Mio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:e5:48:be:e3:fc:4b:03:ec:24:95:24:52:b4:ad:c4:ed:
f2:15:d9:4a:f8:70:07:6b:d9:c2:2c:fa:57:43:22:a9:4c:a6:
05:ef:45:a2:5d:ca:31:59:17:55:b4:25:cd:c5:e7:b8:6b:db:
9b:27:6e:5f:22:d8:9a:b7:91:94:44:2b:97:60:d1:79:de:76:
84:86:78:e7:05:d1:ca:27:ee:69:39:64:0c:a6:30:54:a4:30:
a2:a2:b1:be:30:a9:31:90:bf:bf:71:b0:57:61:9c:7d:bd:5c:
70:1c:51:c0:51:6b:3f:bf:a2:51:a9:92:af:89:8d:e0:da:0c:
ce:02:0e:08:5a:09:3a:cc:7f:bf:ab:ce:43:3a:40:5d:77:5a:
7c:c0:6b:df:cf:33:8e:3f:80:0f:c6:3d:5d:4a:09:87:cd:28:
d2:a2:4e:06:28:02:6a:9b:8f:fd:d4:21:dd:68:88:a2:6d:a1:
35:fe:74:b5:47:48:a6:f4:70:0f:f1:b1:e5:22:69:4e:7e:ea:
68:8e:ab:a2:39:98:47:42:1c:82:a4:72:d3:a1:83:00:58:57:
6f:da:de:9d:14:ff:d3:df:56:5d:9f:1c:33:54:a9:20:a9:f5:
7c:fc:96:45:fe:58:62:13:bc:20:2f:3a:31:42:f8:d5:4c:09:
75:5c:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:01 2025 by rpki-client