Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
File: Igmk3BOlMEp6okvhwXi6QuF5L4U.mft (raw, json)
Hash identifier: lY3WHJT990i8Pobq7HFqtnfEMuSRvzig4slTbBYnqoo=
Subject key identifier: FF:78:9C:5B:2B:17:7C:39:68:E4:C5:17:27:B4:37:A9:AE:AE:FE:69
Authority key identifier: 22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
Certificate issuer: /CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Certificate serial: 0194BCE078FC050C2C0AF863EEA870A909D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
Manifest number: 0F
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: Igmk3BOlMEp6okvhwXi6QuF5L4U.crl (hash: wH379fvx25hm3J4ZU1mksC/hP+MElBM7bnQXhzrwOnc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:78:fc:05:0c:2c:0a:f8:63:ee:a8:70:a9:09:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2209a4dc13a5304a7aa24be1c178ba42e1792f85
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=ff789c5b2b177c3968e4c51727b437a9aeaefe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:80:59:e8:14:72:ef:2f:c3:c6:0f:81:41:
b4:33:46:ca:ab:04:1d:a1:08:dc:80:b2:2a:25:4d:
bd:e4:77:71:32:d4:f2:5b:fd:9b:30:c9:15:25:6c:
b0:ee:f4:df:bc:11:2a:20:73:cb:c0:ef:91:23:e0:
50:70:c5:18:4e:87:de:63:39:b1:2f:0e:5a:14:5e:
d6:d8:af:34:77:59:2a:24:15:40:bd:2d:32:23:15:
c3:be:d7:93:86:ed:1b:64:70:73:6f:3d:b2:83:dc:
2f:1d:c3:34:bd:ab:f0:85:2d:57:f5:4e:65:a9:1f:
e7:02:b2:57:01:d6:35:ce:92:e9:8e:63:a6:27:1c:
e8:7e:1c:8c:ae:33:18:a0:33:2b:15:8f:fc:9c:1b:
9f:8c:38:ab:e9:88:45:43:5d:95:e7:ef:24:b9:76:
2e:b4:61:6d:87:6b:26:1a:4d:46:92:20:51:a4:65:
08:fb:33:45:11:8b:26:4c:e1:46:80:f2:33:9e:4a:
f3:83:d8:f2:3e:c4:3c:eb:14:0d:4d:a8:04:a9:46:
e5:1b:fa:c6:fd:cd:ac:d8:e9:4a:43:97:08:a2:cf:
67:b4:3c:8c:d8:7f:71:a3:1c:fd:e1:41:a5:bf:fa:
85:51:2d:68:44:19:e6:3d:9d:17:76:30:4c:cc:6c:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:78:9C:5B:2B:17:7C:39:68:E4:C5:17:27:B4:37:A9:AE:AE:FE:69
X509v3 Authority Key Identifier:
keyid:22:09:A4:DC:13:A5:30:4A:7A:A2:4B:E1:C1:78:BA:42:E1:79:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Igmk3BOlMEp6okvhwXi6QuF5L4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4862a-511e-4c0c-951f-68afd4745149/1/Igmk3BOlMEp6okvhwXi6QuF5L4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9d:30:69:7d:7d:2b:a6:57:b4:2c:c5:c4:51:d1:1f:3b:be:
5a:20:5f:ca:16:d1:d1:b1:e5:92:9c:c3:38:fb:fe:23:a2:12:
86:65:cf:e7:b4:8f:c2:2e:ce:26:c7:c2:32:30:b0:69:03:e8:
6b:a2:25:61:ae:dd:38:76:3f:b8:c0:09:8a:28:75:80:2b:07:
8a:2c:20:c9:9b:52:4d:02:d6:50:26:4b:cd:bd:57:3e:12:d0:
96:da:00:e7:04:13:b0:aa:7c:00:f0:8f:9c:a6:13:ad:57:87:
64:e0:1b:5f:8d:47:0f:40:aa:54:54:ce:05:2d:30:6b:06:9d:
ee:a4:ca:27:fc:89:df:3b:18:32:a1:de:9e:4c:70:23:9a:ac:
ef:47:8f:ed:0d:5e:c9:a2:cc:f0:75:bb:41:d2:db:e0:df:b5:
ef:5e:ce:41:94:57:0a:5b:cc:24:74:ed:16:66:d2:06:eb:8d:
da:56:ec:1e:49:91:20:a0:98:a0:2c:c3:db:61:fb:ef:fd:2e:
4b:2a:a9:89:9a:3f:bd:01:bf:47:bf:68:ca:67:ab:ce:1c:93:
bf:7f:dc:d3:ec:57:02:0f:e2:5c:ce:c6:8e:52:cd:7d:21:a3:
60:ad:1b:2d:3d:27:d0:e5:55:fa:9b:50:f9:f3:9d:53:36:40:
4b:4d:55:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:21 2025 by rpki-client