Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
File: IPdQab1W78UXA4PtMcrSJGT98DA.mft (raw, json)
Hash identifier: 0/OEWPyr/o0OSX9VkCe4B/sujc6DA1rb4DfDUm6Tqaw=
Subject key identifier: 3F:94:47:38:06:DD:98:95:77:94:5D:70:A7:3F:80:9F:A9:AF:84:A7
Authority key identifier: 20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
Certificate issuer: /CN=20f75069bd56efc5170383ed31cad22464fdf030
Certificate serial: 0194BC73180A91C47D70C91A3244B9AA9C3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
Manifest number: 01D9
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: IPdQab1W78UXA4PtMcrSJGT98DA.crl (hash: oQHUg6ecAOT1Rtq/9oSCZCR+l/LjVWIeSZwMvGnWUt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:0a:91:c4:7d:70:c9:1a:32:44:b9:aa:9c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f75069bd56efc5170383ed31cad22464fdf030
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=3f94473806dd989577945d70a73f809fa9af84a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:d3:9b:3d:95:4a:dc:cc:2c:11:7a:dc:67:
ef:fe:c9:74:3d:a8:76:4e:67:89:4a:ba:80:0a:a6:
ac:c5:01:4e:6c:63:01:a2:68:10:80:bb:b2:a3:11:
00:4e:d4:b6:41:cc:c8:f1:d7:42:b9:fe:d0:74:22:
2c:21:28:ea:4c:f9:4d:4d:f5:c3:a2:5c:a6:04:85:
ef:39:54:8e:56:d6:ec:c5:60:e3:81:8e:b1:71:69:
ce:6a:b0:cb:c5:f8:af:92:d6:c5:7e:e8:4f:f6:07:
6c:85:87:8f:7d:59:4a:1b:57:63:e2:24:4d:39:e3:
9d:27:9b:10:c3:e2:f4:c1:54:85:d2:55:28:50:b5:
cd:e1:02:a2:9b:44:30:f1:b8:4d:6d:03:fe:13:eb:
bb:3c:3a:7f:4c:77:90:9e:cb:3d:ca:2b:d1:40:bf:
2f:e4:fc:0d:f6:45:36:dd:25:24:ec:b3:d7:48:1d:
4e:44:4b:06:9c:62:a1:6a:f9:b3:c7:e4:06:e9:dc:
da:37:e9:1f:cd:01:31:dd:df:f5:cd:5e:2f:76:b2:
06:12:a6:37:37:cd:61:fd:c6:9c:85:03:21:4b:fe:
31:a2:d2:bd:eb:41:1c:c2:bb:f3:d2:28:45:48:d3:
bb:67:45:0e:32:da:f3:2c:65:42:e1:75:aa:e7:9c:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:94:47:38:06:DD:98:95:77:94:5D:70:A7:3F:80:9F:A9:AF:84:A7
X509v3 Authority Key Identifier:
keyid:20:F7:50:69:BD:56:EF:C5:17:03:83:ED:31:CA:D2:24:64:FD:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPdQab1W78UXA4PtMcrSJGT98DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/95cd70-50cd-46bd-8e06-b9705d7d3579/1/IPdQab1W78UXA4PtMcrSJGT98DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:aa:2e:de:a7:14:bd:69:d5:44:16:25:6b:cb:b2:95:f7:14:
86:8a:58:ed:f2:4e:c8:18:54:89:92:18:3d:b4:f9:80:a5:a0:
3c:3f:be:d9:f2:30:1a:a4:c5:01:c5:73:24:9f:f9:06:c5:a1:
d1:a4:d5:72:33:4c:d8:da:ee:9f:fb:5e:31:ec:4e:d9:cc:6b:
94:d1:2a:08:9e:d2:d8:ff:4e:ac:5b:b5:55:b2:78:c8:e1:5d:
81:4a:04:9e:fb:0a:12:07:ae:ba:a4:17:6a:15:de:e7:dc:49:
1f:fd:61:aa:96:b1:10:bb:db:75:c8:31:07:f9:31:74:1b:55:
79:19:e2:02:ea:19:16:8d:6f:8c:28:0f:63:18:7a:d1:74:ca:
d4:8b:4b:65:b8:37:af:c9:4f:61:b5:22:50:81:3d:70:66:c5:
fc:9e:47:1a:6e:c6:37:a3:34:df:c9:c7:13:e9:b4:95:57:76:
cc:6a:53:30:65:ea:86:ed:96:93:a7:ef:ce:b4:d7:4a:2f:f5:
df:58:11:52:cd:e3:02:af:6c:2e:8d:7e:af:a5:d8:db:9c:80:
59:0a:89:de:cc:1d:d0:24:cc:da:62:33:44:e9:f2:11:cf:77:
c7:36:93:46:44:44:c4:cc:88:97:12:57:78:e7:d8:e2:3e:9b:
82:6f:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:59 2025 by rpki-client