Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: 1Jjaxh1AVsVmqTgwhmXi547+V1UnVLde4pseimEFV2Y=
Subject key identifier: 81:95:4A:0E:5C:29:D1:8D:84:18:15:DD:C2:3D:AC:A8:10:01:2D:F4
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0194BD174DAE0EA3F3A429B51CDE21CF97A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: bHVwpXwyrQf5dRLz8HyaCvokqyPT1+CgxP1u6MmdZeM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:ae:0e:a3:f3:a4:29:b5:1c:de:21:cf:97:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=81954a0e5c29d18d841815ddc23daca810012df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:fd:e1:3b:33:66:c0:8d:94:57:27:7c:26:
c1:90:23:7b:cd:5e:ce:3f:81:a8:fe:ee:4c:08:f1:
c3:a7:24:22:b9:7b:f2:e7:1c:03:77:9b:44:f7:2b:
c0:dc:56:a8:4c:5a:1a:28:29:78:7b:aa:e7:51:05:
01:ad:a3:2f:31:16:a8:f5:2e:ca:1e:b7:11:3b:92:
72:46:4d:ba:32:2f:7d:50:27:76:9e:1e:31:b6:3d:
21:49:9e:2a:41:71:96:3d:ff:d3:34:83:b6:38:80:
2a:41:73:ba:12:63:e7:10:a2:24:04:d9:4b:7f:92:
44:22:b4:75:71:38:f0:08:bd:5a:9f:c4:d0:ea:5b:
a9:16:db:1d:b7:39:8e:69:88:3b:d9:b9:6e:52:d8:
54:a9:ba:63:18:b1:0e:90:a3:9c:66:00:51:74:af:
04:e0:f3:cc:5f:59:a5:0a:75:b3:f8:14:43:60:5c:
3e:3b:94:57:0e:35:8c:23:c7:1f:2f:67:e5:58:69:
ef:fd:df:11:da:fe:1d:51:a0:f1:95:c9:61:06:05:
75:c6:ed:ef:0c:4b:ba:c5:79:ed:a9:ae:9d:3b:95:
56:6c:97:a1:61:72:b4:9c:75:20:d7:93:9e:6c:1b:
33:39:15:d2:a6:f9:8d:9a:5a:ac:5b:92:4f:79:44:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:95:4A:0E:5C:29:D1:8D:84:18:15:DD:C2:3D:AC:A8:10:01:2D:F4
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:52:57:90:7b:b9:7b:8a:f6:aa:5d:4d:cc:99:2a:a8:2a:3b:
cc:95:55:f0:ce:83:f4:f1:f7:bb:52:5d:a2:60:b0:c3:5f:dc:
ca:96:ee:02:d3:cb:96:0a:65:f4:c0:61:da:eb:76:7d:f5:0a:
aa:72:c3:32:b9:9e:01:10:b2:dc:d2:8d:fb:be:5c:c9:2b:cc:
fc:0b:bd:73:01:88:07:74:61:58:b1:3e:7b:92:25:da:96:bf:
c2:b4:13:61:a6:00:4d:74:fd:89:7e:f9:83:b2:3f:35:59:20:
66:71:f9:b8:e5:10:4b:6e:1e:b6:61:39:e8:ad:28:b2:ea:42:
4e:69:23:49:f6:ac:9f:6f:91:c4:af:5f:11:68:ef:b4:75:7f:
b5:47:63:66:b1:23:6f:88:13:98:76:c0:6e:39:f8:16:c5:28:
ca:7a:5c:22:5f:f4:f0:fc:a2:17:10:8c:50:7a:09:9c:82:24:
70:53:72:a3:66:36:b0:7a:05:d2:4a:f7:a9:a8:6d:f3:40:77:
b3:d8:cd:be:cf:0d:58:4d:55:7a:d6:cc:ae:1e:f3:8e:23:ea:
54:a2:02:70:0e:64:08:ff:46:69:1d:3b:07:36:ca:07:2d:d9:
81:c4:39:d4:57:f6:a3:b8:22:b7:4b:7e:b6:47:c3:3b:73:b6:
db:6c:12:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:10 2025 by rpki-client