Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
File: ICNzDgbEv7_6ypBeUxJldCwXirQ.mft (raw, json)
Hash identifier: 5vrJ1NA2ZZDMeucooDa5gqFC9QKnr0XUyn/1jmVzrjY=
Subject key identifier: A2:EB:76:E9:B7:94:5A:3B:C0:C6:BA:CF:FE:74:5D:D3:2D:AA:36:6D
Authority key identifier: 20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
Certificate issuer: /CN=2023730e06c4bfbffaca905e531265742c178ab4
Certificate serial: 0194BBCDD70EDDBB50C4DA0337F544F3AED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
Manifest number: 0DFE
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: ICNzDgbEv7_6ypBeUxJldCwXirQ.crl (hash: uO4WHyFKBdLnIyG5ACb32nyxwZRmYntdrOVCKp/e5AM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:0e:dd:bb:50:c4:da:03:37:f5:44:f3:ae:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2023730e06c4bfbffaca905e531265742c178ab4
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=a2eb76e9b7945a3bc0c6bacffe745dd32daa366d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:ac:65:71:ca:ac:46:c7:32:de:23:f6:ea:
7c:43:ef:fa:5b:6a:31:dd:a1:9d:79:4d:7e:73:32:
e5:b9:52:f8:05:1c:2b:c7:f9:09:0d:9e:17:17:d5:
24:fc:3a:76:84:37:ba:b1:1f:5e:92:43:58:58:ff:
0f:f3:3b:d0:36:44:46:1c:ed:c7:aa:8b:95:1c:47:
ae:04:1e:68:d7:95:00:0e:c8:a4:0b:3e:33:97:e8:
98:85:eb:dd:94:9f:bf:19:a6:4d:f9:81:62:15:54:
90:95:22:f4:d7:1e:e9:8d:22:f4:32:6b:9a:16:99:
02:0d:9e:45:11:bd:7b:74:88:d8:3d:49:0b:02:04:
9b:78:0a:9c:cc:dd:ad:e1:cf:b5:f6:c2:15:01:3f:
3c:18:64:03:a4:fd:ef:94:06:ed:fa:cb:a8:b2:83:
f6:59:ff:a7:9f:74:43:fd:7c:c9:ad:fb:8c:bd:e2:
65:66:cb:01:4c:7c:33:8a:8f:80:65:4f:20:39:ee:
14:b7:d2:fe:2d:de:ce:f7:5c:32:bd:4e:23:e6:41:
9a:1b:9c:4d:9b:41:35:40:8d:b6:2a:5b:5a:5b:da:
5b:43:b6:66:3c:4c:6c:cd:67:e7:d0:ef:6a:64:02:
e6:56:e5:2b:f2:e1:59:a5:99:70:0b:c0:57:a0:64:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:76:E9:B7:94:5A:3B:C0:C6:BA:CF:FE:74:5D:D3:2D:AA:36:6D
X509v3 Authority Key Identifier:
keyid:20:23:73:0E:06:C4:BF:BF:FA:CA:90:5E:53:12:65:74:2C:17:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICNzDgbEv7_6ypBeUxJldCwXirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/45d7c1-c4f0-4835-b466-b0335ba3e0c2/1/ICNzDgbEv7_6ypBeUxJldCwXirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9e:eb:38:62:fd:a9:cb:04:ee:7d:9a:3b:99:1a:80:ff:92:
2b:e0:84:b3:2c:0c:83:4e:6e:df:f8:10:d1:49:60:86:85:aa:
a1:37:17:40:27:d7:e6:04:14:6a:27:93:e2:78:3d:88:3a:87:
f7:3d:05:d2:f1:f4:34:9c:94:99:68:8e:87:bc:62:b5:a3:04:
72:32:23:37:7d:f5:f7:f3:be:4e:9c:e7:27:d1:05:ff:9b:4c:
ed:60:2f:ec:20:5c:87:a8:a1:a5:c0:a3:b9:f4:3c:16:4b:ef:
16:6a:66:cf:ea:68:34:d6:4b:57:7f:61:ce:61:31:7f:34:97:
33:a3:d5:0e:db:66:c6:c8:09:65:7a:bb:d2:78:b6:a6:19:6a:
f3:6d:8b:d2:a1:46:4c:ef:15:dc:eb:dc:6d:d5:1d:bd:f0:e0:
11:90:5b:e3:aa:bd:6e:1f:9f:4e:a7:87:5a:92:36:b4:2b:90:
1e:84:b5:ed:8d:a3:31:4c:cb:81:12:50:13:d4:19:22:ea:19:
15:3a:90:5d:d6:c7:f0:74:4d:46:60:3b:da:93:a5:f8:82:7d:
a6:b1:ec:66:ff:0a:78:77:2a:0e:1a:c5:cc:12:ea:2b:60:12:
8d:e3:ec:60:99:b6:9a:bb:d1:15:a7:dd:a5:0d:42:f7:93:0f:
4b:bb:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:30:19 2025 by rpki-client