Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
File: INyR5mZJTQ3FaiuB0imr1u41-Ew.mft (raw, json)
Hash identifier: CHAtBoL8kLe9u7sFmy51lR5G+zc5kl5AqJoe9Ux8ZnI=
Subject key identifier: CC:78:21:7E:99:9E:58:A7:9A:45:CF:B3:C4:99:F7:BA:54:E0:0A:15
Authority key identifier: 20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
Certificate issuer: /CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Certificate serial: 0194BBCEEFD4269EB4D06B7F2089EA15BAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: INyR5mZJTQ3FaiuB0imr1u41-Ew.crl (hash: JLOS77SgH0kFD2JMLBuzPSNwNwS8BKEKo6Fi3ve/EZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:d4:26:9e:b4:d0:6b:7f:20:89:ea:15:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20dc91e666494d0dc56a2b81d229abd6ee35f84c
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=cc78217e999e58a79a45cfb3c499f7ba54e00a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:57:25:37:c2:1f:20:77:60:1b:83:b3:0e:
a0:72:c5:06:bd:70:fc:5f:bb:b2:25:47:d5:a0:95:
c8:a8:54:56:8f:c5:ea:70:ef:b2:9f:be:74:0c:a7:
c4:44:bb:31:eb:a3:68:e6:64:14:7c:73:7e:46:ba:
fe:9a:cb:c8:95:0c:f8:54:01:8c:3f:7f:c8:42:df:
1f:a4:9b:7f:1d:99:1e:e9:3b:b2:4e:4e:97:33:3a:
5d:a5:9d:5d:09:f2:0b:0a:40:d5:02:18:a3:1b:4f:
01:43:e5:8c:14:43:1c:97:08:e5:b5:5f:15:be:56:
02:2f:f8:c6:1d:a3:64:ae:29:12:9c:a8:fe:88:a6:
41:94:af:47:14:e6:6d:f3:0d:0d:c2:96:52:99:6b:
88:0d:02:b1:1a:58:a0:6f:e7:37:28:ef:68:da:bb:
4c:b6:8f:dd:96:6a:3d:c4:25:7c:d9:ae:b5:fd:ff:
03:7b:fa:cd:d0:c5:a0:5a:fc:0e:69:63:4f:db:ce:
51:09:5b:db:f7:62:d2:7e:66:96:6b:97:3e:b8:7f:
a8:50:6f:33:2a:3c:b2:6d:87:a2:e4:f0:90:fe:2a:
62:2c:73:1b:ae:f1:45:6c:4b:0f:bb:b0:76:b8:3f:
fd:42:28:5d:32:c7:0f:ee:03:b0:d6:fb:18:7a:7c:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:78:21:7E:99:9E:58:A7:9A:45:CF:B3:C4:99:F7:BA:54:E0:0A:15
X509v3 Authority Key Identifier:
keyid:20:DC:91:E6:66:49:4D:0D:C5:6A:2B:81:D2:29:AB:D6:EE:35:F8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INyR5mZJTQ3FaiuB0imr1u41-Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5ff708-cb7a-41e9-9093-1d00ea841d3e/1/INyR5mZJTQ3FaiuB0imr1u41-Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:df:97:99:4d:2d:41:ee:4f:62:9f:8c:0c:82:30:42:0e:
36:b2:6c:68:5d:9b:26:f2:a3:a6:5b:49:6a:44:82:d9:fc:0f:
37:33:0a:21:21:80:ec:cb:1a:80:a4:ae:16:51:5f:d5:72:e9:
94:19:47:a6:50:15:12:f4:28:49:8e:2e:27:29:17:55:cf:65:
13:8e:80:76:1b:a3:59:96:70:46:85:40:f3:f9:d6:67:31:18:
bd:ae:2e:3f:9c:f0:23:32:4c:5d:09:0a:2c:26:8a:41:59:d1:
59:3f:67:82:39:3b:d6:95:61:ad:71:9d:65:81:d2:17:30:cd:
39:89:55:2d:d3:2e:a1:b0:d3:b3:22:26:27:eb:c7:e3:29:ba:
08:aa:d7:ef:cf:18:86:a0:d9:1c:d9:42:b9:49:31:d9:25:2c:
07:6e:06:a9:ae:e9:bd:d8:d7:dd:c2:43:1a:40:96:9a:33:0a:
10:66:4a:63:47:53:36:76:d4:f7:4d:44:0b:cd:87:9c:b0:d3:
1e:a7:02:2e:85:38:cc:fa:95:00:e4:e6:42:b8:dc:58:cc:f3:
ae:c2:6b:2a:57:7a:dd:b2:56:48:13:6b:8a:d1:c2:57:93:3b:
92:b3:39:96:05:70:52:45:69:82:17:b6:c0:a2:6c:fe:75:a4:
3c:dd:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:49 2025 by rpki-client