Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
File: 214_2Taim0KaFIK070HDJuKTfSo.mft (raw, json)
Hash identifier: +pmscImCX+LHgWAH7EmZG4laLfNaZNXf9WkpoieFI2o=
Subject key identifier: DE:90:1E:8F:69:8A:DD:DF:6E:A7:B9:CB:17:AC:17:14:96:70:A9:1A
Authority key identifier: DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
Certificate issuer: /CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Certificate serial: 0194BC3C2D04859532CB991E041AEC0A6FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: 214_2Taim0KaFIK070HDJuKTfSo.crl (hash: gau6jg0P0RDe5cNl4iWW8SDZAaG0SqCZH+LRG9aP1Dw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2d:04:85:95:32:cb:99:1e:04:1a:ec:0a:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db5e3fd936a29b429a1482b4ef41c326e2937d2a
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=de901e8f698adddf6ea7b9cb17ac17149670a91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:f9:6c:23:7b:3a:33:14:c8:69:94:f0:46:
43:08:d9:d2:1f:f5:88:65:d8:7b:1a:33:ee:54:69:
f6:0b:0e:6d:d4:6c:18:13:5d:55:42:02:88:f1:42:
b8:dc:34:87:1d:6d:5d:83:5b:c3:cc:bd:e7:45:aa:
7d:44:30:89:85:97:80:f4:2c:f3:8f:22:d8:c5:e9:
a8:9f:8f:0e:72:f1:a2:4e:61:cd:d5:2c:f4:e0:f0:
6f:53:36:de:c6:20:ca:37:1b:b4:72:58:ed:c8:01:
0b:84:e7:01:5a:d4:cf:c7:71:1c:69:29:85:1c:7b:
60:e4:db:ed:7a:b7:2d:3a:40:b4:0d:89:81:54:1d:
10:e4:24:e2:07:ab:96:55:67:12:81:c6:5b:a4:9e:
c9:8b:23:6e:04:dc:5c:88:a8:57:0e:a2:87:05:39:
14:a9:3f:48:19:bf:39:5c:9b:19:1d:2f:e9:e1:5f:
dd:bc:8d:06:fd:a7:1d:0e:a4:78:c7:7c:1d:0d:4b:
d8:52:48:04:f3:a4:ec:17:62:02:b0:c4:20:24:cd:
74:ea:1b:30:82:8f:9b:97:f1:34:d5:c1:5e:fe:d8:
5d:39:33:07:23:e3:be:26:b0:fa:46:f2:88:01:d7:
68:72:b1:14:9a:ed:23:de:bc:65:62:3e:de:c5:ba:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:90:1E:8F:69:8A:DD:DF:6E:A7:B9:CB:17:AC:17:14:96:70:A9:1A
X509v3 Authority Key Identifier:
keyid:DB:5E:3F:D9:36:A2:9B:42:9A:14:82:B4:EF:41:C3:26:E2:93:7D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/214_2Taim0KaFIK070HDJuKTfSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/aae17f-c35b-407c-896b-7e57691bbed9/1/214_2Taim0KaFIK070HDJuKTfSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:84:0f:49:69:b6:71:77:77:10:01:db:32:99:0e:5e:4b:f7:
71:76:18:a4:13:ec:33:29:96:b9:61:38:4b:25:85:6b:0d:f2:
db:5d:6f:d9:90:0d:87:26:c4:9a:0a:75:b4:c0:fe:5d:ae:cb:
e0:da:de:15:59:dd:6e:cd:0b:ca:ec:a2:ae:f9:f6:9d:36:3c:
d9:fb:3a:86:68:88:e9:66:59:eb:eb:ea:d1:76:30:1c:4b:c3:
4f:5d:8e:41:11:49:15:6c:2a:bf:94:fd:0f:ad:a8:d8:51:76:
b1:43:ec:94:f8:12:9b:0a:e9:2c:bf:d1:c2:a0:89:b0:a0:d0:
a5:9b:7f:45:65:b7:cd:51:2d:67:ac:e5:f2:be:73:e5:08:fa:
ef:af:ae:6e:40:ee:98:c8:39:a7:81:68:13:23:3a:9d:c0:ad:
86:9f:57:2f:01:12:37:67:25:9b:84:f6:07:4c:e8:5a:88:87:
f2:6f:e0:e8:26:35:66:92:7b:a2:40:a3:81:f3:55:d9:0e:29:
73:91:75:a2:4a:e1:36:b9:d3:6e:74:48:72:58:04:6d:54:f9:
d0:1a:0b:14:be:e8:98:ab:d6:3c:ac:69:14:30:4b:c2:c1:c8:
7e:95:0b:51:93:fe:55:73:88:e9:47:24:d9:fd:66:70:8c:69:
e5:1f:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:34 2025 by rpki-client