Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: 69X2+tQktgRoGqc8bjUmPLu0+OXzpastWqklJPxKJdY=
Subject key identifier: A7:6E:3B:14:48:77:39:91:37:C5:0E:7F:20:5C:79:30:8A:C7:43:1F
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 0194BC3C171B2B10C28D1F5C45B7C674288B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: srT29pTIZYkUcblbP7lSAWD2VITrgxIGgcydhfyEZ4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:1b:2b:10:c2:8d:1f:5c:45:b7:c6:74:28:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=a76e3b144877399137c50e7f205c79308ac7431f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c4:40:3e:e7:ae:fd:00:16:47:b5:90:be:8f:
d7:ad:56:97:55:f7:c8:54:5c:3c:8b:a2:be:8b:e7:
db:66:97:37:c9:4f:6b:db:bd:65:ca:3b:d0:2b:5a:
4a:ac:01:ab:ff:e9:d1:7c:89:fe:24:88:57:21:f6:
b9:a4:51:9b:df:00:2f:36:f7:4d:10:c7:a2:9a:55:
e2:79:46:76:0b:bb:7e:56:e4:f8:4e:d8:f2:fd:59:
3c:00:17:e7:40:fd:e1:d8:f7:7c:c3:f6:d2:9c:0f:
2f:75:70:47:93:87:99:c3:c3:97:2b:4a:fa:c5:d4:
5e:c3:8f:7c:f5:e4:19:06:47:53:d3:31:d7:d4:42:
bb:3c:96:d6:11:d7:13:9a:c3:f5:d8:0d:27:b6:18:
3a:9d:51:49:8f:a7:15:2a:a4:4d:ea:5f:28:a4:fa:
60:23:a8:92:5e:06:85:f5:b5:7c:b0:07:b9:14:f3:
bb:57:a4:8a:99:fd:ec:95:31:2b:9f:9d:1c:84:f9:
e2:23:e5:39:a7:24:e8:4c:5b:eb:a4:84:33:f0:48:
4b:a5:27:1b:82:f3:68:28:0b:fd:77:a6:c5:0b:7b:
b0:08:60:2a:a6:c2:d4:39:82:25:b8:2b:fb:8a:db:
bd:52:d0:a3:d7:a4:0e:9b:c2:51:83:9a:60:1f:6b:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:3B:14:48:77:39:91:37:C5:0E:7F:20:5C:79:30:8A:C7:43:1F
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:07:79:26:11:e3:d4:57:6c:91:bc:df:f4:0f:7c:f2:3e:
e1:d2:bc:24:ae:41:ab:58:55:03:58:d9:e9:4c:69:03:83:67:
16:20:e1:ed:a1:7d:c0:4f:63:9c:f2:d0:b0:77:38:07:60:30:
be:21:4c:5a:49:cb:20:0b:f8:60:13:9d:f1:e3:9b:0a:f5:40:
88:ea:4d:8f:52:58:50:61:63:51:71:51:ea:2e:4f:0b:ec:eb:
de:2a:21:de:4f:93:01:37:b3:d3:66:43:e4:81:68:75:b2:af:
0d:8a:f9:b0:53:3b:33:41:d7:fb:1c:cf:ef:4f:22:ce:92:9b:
93:b8:73:0c:b0:cd:c2:be:3d:b3:0f:f5:11:cf:d7:f9:c9:37:
8e:2f:65:24:98:cd:a4:25:20:f5:76:6f:c8:71:84:a4:bd:59:
75:ab:c8:8a:63:13:a1:9b:0f:85:06:84:98:36:16:5a:22:aa:
40:53:42:71:60:51:90:40:42:5a:a6:f5:2b:10:9a:20:9a:3e:
99:fe:01:7d:88:69:c5:a2:50:c0:b7:a9:59:fa:9d:58:05:11:
71:5f:7d:d0:68:b7:83:00:50:02:2d:94:a3:9e:f5:70:e6:61:
34:dc:d6:95:07:0f:a7:1d:25:44:41:5f:1e:68:17:b2:90:a8:
16:3c:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:10 2025 by rpki-client