Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
File: izHINiDus1ExJXtb-vqrOTRSyJE.mft (raw, json)
Hash identifier: x4lPGP+Jd5Mnul4PrIVX770uY5dbPBnmVBOCkm+qZYU=
Subject key identifier: DF:3F:2B:91:18:32:EB:F9:CF:96:AB:AC:6E:D8:4D:8F:6A:9D:C1:64
Authority key identifier: 8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
Certificate issuer: /CN=8b31c83620eeb35131257b5bfafaab393452c891
Certificate serial: 0194BD178D211831A0E04DBF3D4FBDBDE5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: izHINiDus1ExJXtb-vqrOTRSyJE.crl (hash: nOcRcW+7GUAgLpkClQEpQw9uoF/jt+MdN2y3fMzmpF4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:21:18:31:a0:e0:4d:bf:3d:4f:bd:bd:e5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31c83620eeb35131257b5bfafaab393452c891
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=df3f2b911832ebf9cf96abac6ed84d8f6a9dc164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:35:49:5d:9e:1c:c8:2d:0f:4f:a2:9d:32:
da:9b:4b:09:a0:cd:fe:86:66:1e:64:5c:1c:9e:7a:
fa:f5:51:7f:35:5c:1b:a8:ef:95:e6:f8:21:16:d4:
0c:27:8d:62:39:88:a0:ea:b8:fa:c3:b7:fd:fb:ab:
83:8f:9e:bf:b5:f5:8c:fd:12:0c:dc:ec:30:28:45:
e4:24:2f:4d:e3:ac:2c:65:35:c7:2a:0e:e4:35:62:
f6:7e:4d:fa:cc:39:59:ee:4d:a8:33:c5:84:8c:32:
04:a5:36:18:81:0a:4e:b9:d0:ec:23:7f:d2:41:4b:
1d:1a:4b:6e:73:cb:55:df:aa:b5:1b:71:e6:9a:be:
a4:3e:ef:f3:2c:c3:0b:88:88:42:1f:c5:f2:ec:ea:
28:e4:69:e4:cf:13:fa:12:e5:97:cd:0a:5e:60:f9:
83:32:cb:b1:bd:1a:66:40:97:a9:3a:94:1b:50:ca:
19:cb:2c:f8:cd:d0:9f:fd:71:d3:0e:af:bb:d2:ff:
3a:10:01:92:d4:57:4a:fc:3e:b0:97:a8:8b:4a:04:
58:ee:c7:60:fa:00:52:cb:34:ce:ac:dd:c7:a5:eb:
ae:01:52:ca:b0:7f:75:2d:53:25:fd:09:49:8c:32:
2a:d4:0b:e4:7b:a5:8c:cc:85:d1:6d:56:48:e0:89:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:2B:91:18:32:EB:F9:CF:96:AB:AC:6E:D8:4D:8F:6A:9D:C1:64
X509v3 Authority Key Identifier:
keyid:8B:31:C8:36:20:EE:B3:51:31:25:7B:5B:FA:FA:AB:39:34:52:C8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izHINiDus1ExJXtb-vqrOTRSyJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f74d38-965d-4a29-ad8a-f84674d46303/1/izHINiDus1ExJXtb-vqrOTRSyJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:eb:74:b3:a2:d9:71:c3:53:51:8f:07:34:07:61:f3:98:
e3:d2:b9:2c:f6:5c:05:51:9e:80:d4:ef:75:ee:4d:0d:05:3b:
93:5b:63:52:ea:6e:93:f2:73:32:ea:0f:cb:34:f7:1d:2c:ed:
95:ef:9a:bb:20:e8:5b:74:7b:30:90:7b:2d:4c:20:89:02:fc:
a5:ae:c5:e5:86:50:98:5a:25:cf:b0:5b:76:30:4a:45:d0:c3:
0f:d2:01:9d:01:72:be:d3:a3:4c:98:91:89:e6:7b:0b:17:a4:
90:6d:03:4a:57:8c:b5:44:b1:5a:0a:51:6f:fd:f0:95:d8:08:
8a:de:f4:31:d2:f8:27:4c:5a:14:04:60:6a:b6:de:f1:ef:00:
d7:9e:6e:16:bc:04:bc:5a:24:63:5d:b9:08:15:14:bc:ac:f5:
71:b1:39:ab:86:35:88:c3:af:b1:8b:c3:63:bf:6c:82:93:57:
52:5a:d3:78:f4:7c:76:da:d4:f8:82:cf:c5:79:8e:6a:2e:e0:
b3:e6:47:57:d5:e7:e5:05:dc:1f:a8:5b:48:55:f9:69:f8:05:
14:b1:95:d5:35:c2:2d:fb:db:1e:92:b0:ea:16:8e:c1:75:e2:
5a:e2:94:33:7d:a1:03:e7:6a:b1:36:cb:b5:78:5e:79:95:b4:
1c:64:b2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:47 2025 by rpki-client