Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
File: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft (raw, json)
Hash identifier: bBj53/beTjWF9QaJsntPTzUcEmRsGxATpc6mhgAdeVU=
Subject key identifier: EA:E2:AB:FF:31:56:6F:59:01:FC:44:D7:7E:FD:0F:66:F7:45:AF:73
Authority key identifier: 22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
Certificate issuer: /CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Certificate serial: 0194BCAA360BBAE3028928E1798E17E44720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
Manifest number: 09FB
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl (hash: fBXnPMZgq40p6vVYyOysLn7+lR6tmtmoaMS/zdetYsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:0b:ba:e3:02:89:28:e1:79:8e:17:e4:47:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fbef695fa95d0c95909e51aa1fab94fc40267d
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=eae2abff31566f5901fc44d77efd0f66f745af73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:93:f9:cc:43:7a:f6:0c:8e:d7:0a:b6:ca:0c:
4a:59:df:bc:9b:be:ae:40:e9:c5:a6:35:a1:57:e8:
3a:bf:f7:78:4e:0b:17:2d:46:5f:f3:3b:d6:38:21:
57:08:87:fa:36:c2:49:c4:1e:ea:ee:03:4f:b8:7c:
57:17:e7:66:59:fe:f0:5e:09:14:1d:8e:c5:83:9c:
05:b3:6e:f8:29:2b:1a:db:74:96:db:9f:4f:a6:ea:
15:54:c5:29:3f:43:62:44:54:86:20:82:db:df:35:
1a:78:47:b2:24:7b:f7:f2:c1:23:0e:eb:6f:b4:9d:
6f:50:1b:9d:a9:8d:83:bc:bc:cb:56:f0:39:9b:98:
e3:7e:14:b9:0c:8d:fe:af:a2:60:47:1a:84:67:ca:
b3:3c:cf:02:ec:8a:fe:9e:4b:cc:3d:66:6f:19:1a:
2d:fa:27:3e:68:4b:52:fe:ea:1f:d0:3e:7c:0a:9a:
3e:fa:11:91:2f:da:3a:6a:ae:9e:be:67:68:bb:fb:
57:75:fa:ef:8d:93:ad:b5:80:4b:87:2e:d2:e6:10:
b3:45:27:bf:14:9c:92:cc:da:03:23:51:b2:4f:09:
12:a2:1f:6c:1e:ff:f9:a4:bd:a3:8b:14:f1:dc:65:
f7:1a:ed:f8:f7:40:a9:69:b8:54:4b:82:9b:84:c2:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:AB:FF:31:56:6F:59:01:FC:44:D7:7E:FD:0F:66:F7:45:AF:73
X509v3 Authority Key Identifier:
keyid:22:FB:EF:69:5F:A9:5D:0C:95:90:9E:51:AA:1F:AB:94:FC:40:26:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/87aa20-222c-4acb-b291-f629508c072d/1/IvvvaV-pXQyVkJ5Rqh-rlPxAJn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d6:23:80:0c:d2:de:cf:19:f8:9f:d0:c8:8d:f0:d6:be:1e:
d4:96:28:2e:89:f6:20:1f:3b:a6:fa:3d:a7:fc:93:47:b6:92:
87:f4:80:4f:dd:38:a3:85:dd:82:11:8d:5d:c5:3e:79:7c:79:
41:15:d1:fe:78:2a:da:0d:88:e6:d9:e0:32:a6:f8:d2:2a:07:
c1:79:7a:1e:d7:fa:81:90:a6:50:10:e7:d5:67:33:a6:83:9e:
fb:7a:5f:cd:78:40:46:eb:0f:6b:0d:1a:40:db:d5:06:df:43:
73:9b:ed:0b:82:91:11:81:47:35:f3:19:44:f9:b4:d4:02:2a:
c1:a1:e5:07:be:6b:c3:17:cb:27:3b:c5:2c:73:36:42:0a:09:
2a:12:01:d8:91:04:9a:df:f8:7b:41:f7:b7:2f:b9:69:de:56:
59:78:da:13:a2:71:82:21:49:85:e5:d3:d6:a3:76:77:08:6c:
22:48:9d:a5:77:7d:ca:31:41:d3:2c:60:bb:a5:98:45:21:7e:
d4:f7:63:85:79:c1:ef:7f:a3:6e:8e:e2:74:a1:1d:e7:3a:d5:
cf:0e:2f:2b:3e:56:0a:64:fa:da:f2:7a:de:d6:4d:7c:93:48:
5e:d7:31:da:53:99:6f:9d:5b:7a:05:75:06:b0:ad:c1:49:9c:
fd:9a:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:16 2025 by rpki-client