Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier: B7LYwh51B6poX0BEyvNz7bXqXQi906cPx9EB4u6ySVU=
Subject key identifier: 8C:89:9E:39:FB:3F:58:21:86:49:D0:1A:D2:E8:F0:F8:6E:58:0F:E4
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial: 0194BBCECF28DB522A4DF446667D82BF1415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number: 0C2A
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: loADo5P5tYs5yDp5eNHmpTI5BMz0wUG3HwJLPRpoJ80=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cf:28:db:52:2a:4d:f4:46:66:7d:82:bf:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=8c899e39fb3f58218649d01ad2e8f0f86e580fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:3c:c6:2f:a2:ec:cc:8e:03:e5:14:8c:96:
bd:96:4a:4f:2d:ed:f2:73:92:aa:a5:32:27:35:c2:
4e:05:83:12:2a:7a:e3:92:83:86:50:f5:d7:b5:1c:
ee:7f:24:0d:e3:25:28:c0:cd:3a:e9:86:d8:ae:07:
d0:1d:6c:77:47:ae:43:dd:aa:f5:ef:e8:f9:9f:d8:
73:05:28:81:f0:0e:08:31:cf:c6:31:64:cb:67:7f:
b4:1d:8b:9d:6f:44:14:88:dd:76:7b:48:f9:39:99:
c9:3a:50:c3:40:d1:cb:7b:96:37:f4:72:c2:0d:4e:
65:f2:5a:30:6a:0c:3c:1b:9c:55:8c:b6:eb:99:93:
d7:01:20:5a:36:1d:ef:51:a7:cd:51:53:36:47:2b:
c8:50:fe:f4:8f:a5:46:cc:65:14:b5:8f:3d:5f:d9:
8d:69:db:6b:bb:0a:ac:86:2b:45:3e:00:7a:57:ae:
29:fb:af:7b:9e:6d:18:10:9b:d6:ef:15:70:85:ef:
16:90:af:fb:19:37:30:bc:d8:13:87:03:4d:9a:57:
0c:84:d5:db:8d:e4:d0:8a:4a:c1:ef:22:bc:1b:86:
28:66:5c:a1:dd:6f:6b:8a:85:6e:e1:c6:fb:52:47:
3f:99:54:8d:53:6b:f7:ec:fc:91:0c:d7:26:db:40:
83:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:89:9E:39:FB:3F:58:21:86:49:D0:1A:D2:E8:F0:F8:6E:58:0F:E4
X509v3 Authority Key Identifier:
keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:55:07:00:48:4b:a6:6e:63:44:05:17:51:7d:4d:8a:3b:fe:
e1:9f:99:4f:d9:87:2d:09:46:95:4f:8e:1b:e2:fb:ee:21:88:
bb:4e:ca:24:3e:ee:35:f4:f0:4c:6a:ad:17:ea:2a:35:51:e3:
98:e9:4e:07:cb:b5:ff:f1:86:44:5b:66:d5:1b:3e:7d:22:5d:
a8:cc:14:f6:70:00:ed:1b:8f:7a:7e:c2:e1:0a:d2:63:0e:b9:
4c:6a:fd:64:02:15:20:20:17:6c:ae:57:fe:2d:6a:7e:74:c5:
3a:27:4b:57:7f:9e:a4:4c:58:af:c4:ce:8a:1f:80:0c:ec:f5:
b2:4d:b9:ae:81:82:4e:b1:a7:10:5f:d1:3e:70:8f:98:bc:d1:
ec:88:71:99:71:25:0a:59:b8:63:7b:ee:29:2d:9c:29:57:a9:
0a:d0:5a:81:4b:f9:1f:de:fd:3a:31:86:71:78:30:82:67:e1:
8f:a7:33:4b:7b:e6:d5:6b:ff:8d:23:6b:3a:d8:fb:61:7b:ac:
65:1a:a0:ad:67:c5:f3:a9:48:71:cd:75:da:c5:54:0c:06:a4:
11:a0:8a:21:b4:46:33:3c:a7:da:25:54:fb:3c:f6:42:ef:26:
94:f7:60:66:b6:b5:b8:c8:9e:9a:c1:e4:cf:e9:21:06:3f:c9:
e4:c1:1e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:58 2025 by rpki-client