Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
File: IQdBCPDRRZtitsetsn1pNLoL56U.mft (raw, json)
Hash identifier: MRkG0s7tC3rBYHGQ3Eij6SlmFfTiNPKdta3ROSfGx4s=
Subject key identifier: 6B:CD:27:1E:0D:B3:49:6F:8A:EA:F1:9D:9B:09:46:18:AF:E5:05:F4
Authority key identifier: 21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
Certificate issuer: /CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Certificate serial: 0194BC72D278D640CE35B7C5B67396D7257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
Manifest number: 13B8
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: IQdBCPDRRZtitsetsn1pNLoL56U.crl (hash: xohnByJ91sBayO9JqqsSDLZCULXhCmLk3Qd+99+Y+yE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:78:d6:40:ce:35:b7:c5:b6:73:96:d7:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21074108f0d1459b62b6c7adb27d6934ba0be7a5
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=6bcd271e0db3496f8aeaf19d9b094618afe505f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:3a:7a:3e:3b:50:75:f1:f4:90:6f:cd:23:
85:5e:72:c9:44:9b:73:ac:3d:21:eb:76:97:1d:83:
11:71:c6:98:39:2b:d6:0f:80:02:f1:8c:ce:0e:62:
f5:a4:df:e4:3a:ad:e5:90:78:ec:00:2a:53:88:73:
1f:2d:e3:a0:1a:22:8e:88:65:e4:24:0c:f2:69:58:
d7:76:7a:a4:a1:66:9c:bf:eb:8b:12:12:be:da:7b:
58:96:86:1c:43:0e:9d:2f:9f:64:9e:3c:3f:5e:be:
38:62:d8:66:b1:77:47:6f:60:2c:08:93:82:12:72:
28:7e:06:c9:34:e9:3b:1f:14:64:75:e3:88:0b:77:
cf:1a:6c:73:12:b5:7a:b4:3c:0c:c3:fb:58:29:32:
b0:0a:22:d2:c9:04:6e:2e:56:0b:f3:ae:5f:3f:e5:
73:0a:9a:35:4e:98:ba:98:39:5e:43:dc:0e:e8:9c:
cd:28:a8:07:1d:0c:92:a1:73:8c:43:bf:58:de:ea:
9f:ee:fc:11:8a:eb:68:ec:7e:22:d3:c7:ac:4b:ca:
a1:6a:e8:18:5c:34:11:47:45:56:a0:f1:eb:6e:55:
0c:86:e6:93:10:f5:d6:91:31:23:85:00:11:fb:8e:
ea:d5:be:a0:5a:ce:78:0a:40:5b:83:1e:00:b2:15:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CD:27:1E:0D:B3:49:6F:8A:EA:F1:9D:9B:09:46:18:AF:E5:05:F4
X509v3 Authority Key Identifier:
keyid:21:07:41:08:F0:D1:45:9B:62:B6:C7:AD:B2:7D:69:34:BA:0B:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdBCPDRRZtitsetsn1pNLoL56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6efb44-012b-415f-8220-c6220e185694/1/IQdBCPDRRZtitsetsn1pNLoL56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3d:0a:c7:8c:c1:39:59:90:8a:86:7b:ae:da:f5:a3:4d:8f:
12:4c:f6:f5:37:43:19:1a:f1:9f:d8:ab:ca:ec:ec:64:8e:35:
57:57:3a:47:f3:85:c9:3b:be:53:1e:be:27:e3:cb:01:42:a9:
a1:2c:65:5e:4b:aa:a8:b5:6e:6b:95:0f:f9:48:54:64:fe:3b:
3e:25:61:3c:53:2c:b4:4d:8e:f4:7d:59:5e:4e:2b:8d:da:44:
82:98:9f:cd:6b:e7:19:51:9d:a6:61:7a:d7:e2:13:2d:3c:05:
b8:b8:6e:66:20:7c:2d:d3:e5:d9:df:99:64:51:ae:53:68:33:
28:52:45:95:a2:c1:5f:85:c0:dd:52:4d:65:a9:a0:28:58:85:
ab:c6:91:cf:32:6f:86:6f:31:aa:ad:5f:68:62:1b:39:53:9b:
80:b1:1d:24:d2:f4:c4:00:2f:65:85:65:e7:ce:0d:79:43:fb:
23:75:48:fc:b9:6a:c3:3a:dc:9f:4e:5d:a5:d7:2e:ff:6f:52:
9e:54:0f:2f:35:e6:58:31:1e:c0:cd:82:e3:a0:69:e6:01:cf:
5b:e3:08:55:ca:ae:54:c4:bc:67:fb:e4:06:f4:40:8c:bc:70:
5d:b5:47:78:1d:be:85:d2:fb:cf:35:76:5a:f8:7b:2f:e7:56:
f1:09:d3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:24:57 2025 by rpki-client