Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
File: 20iBY9r1DbZG3k3yTTTLrJk_RX8.mft (raw, json)
Hash identifier: a9froIsK8ayVAdBNURYsgX1P0t/XYaI9kNzg/m5kJp0=
Subject key identifier: FE:57:7E:6C:BF:94:26:87:A0:6E:6F:BF:45:B1:74:06:FA:2E:47:C9
Authority key identifier: DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
Certificate issuer: /CN=db488163daf50db646de4df24d34cbac993f457f
Certificate serial: 0194BD177C5E1F5313FE39CC1A3455BDA4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 20iBY9r1DbZG3k3yTTTLrJk_RX8.crl (hash: uiZhBt5BQLM6a6Z7ikOEur/XhbxnxQ1/xHmFE9pJEuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:5e:1f:53:13:fe:39:cc:1a:34:55:bd:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db488163daf50db646de4df24d34cbac993f457f
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=fe577e6cbf942687a06e6fbf45b17406fa2e47c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2a:0c:05:62:9f:05:9a:1b:1c:38:14:ba:37:
cc:57:3e:01:e5:8d:d5:48:fe:ce:e1:45:a4:32:1d:
98:0a:8e:f3:23:05:f0:03:1e:e9:4e:9b:c7:4c:f0:
09:d5:67:38:0e:a3:d4:c0:4c:60:b6:9c:e4:78:95:
a7:f8:b9:e2:08:9d:90:7f:a2:dd:57:6e:6e:97:8a:
fa:d5:17:13:51:b2:68:aa:ec:3a:82:f0:42:65:66:
76:69:27:37:55:f1:84:4a:3a:47:ba:4c:97:3b:31:
cf:32:fd:de:d0:9a:db:13:fe:e0:da:62:c3:50:94:
81:08:b3:e1:d3:59:aa:cc:43:38:06:e0:38:9c:76:
4a:45:04:14:b8:9b:35:fa:56:42:95:08:d7:5b:2c:
9d:7d:1b:16:a0:fa:01:ad:17:a3:b6:f1:ce:28:cf:
04:69:c6:55:c2:f2:80:59:35:34:26:f9:0a:52:57:
b4:d7:d4:b7:27:fe:62:5f:08:8a:9b:33:e3:d7:01:
e9:87:a0:ed:37:9f:02:8a:88:0c:c6:c4:8d:02:c9:
4b:44:7f:74:a6:4f:cd:40:1a:60:bf:0d:e7:c4:19:
a5:cb:6a:fb:e8:a7:55:71:96:15:3d:8f:b7:df:3f:
1a:dd:8d:da:43:3b:45:5b:ef:6f:26:ca:82:e2:35:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:57:7E:6C:BF:94:26:87:A0:6E:6F:BF:45:B1:74:06:FA:2E:47:C9
X509v3 Authority Key Identifier:
keyid:DB:48:81:63:DA:F5:0D:B6:46:DE:4D:F2:4D:34:CB:AC:99:3F:45:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20iBY9r1DbZG3k3yTTTLrJk_RX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4e5c10-71ed-4deb-b4e0-19d57ff1fbd9/1/20iBY9r1DbZG3k3yTTTLrJk_RX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d9:8f:38:61:91:be:c5:d8:23:a2:32:9b:84:71:99:41:28:
95:b8:e0:47:70:d8:ba:a8:4d:92:9c:83:1e:6c:e5:53:d7:57:
5c:8c:b0:e7:cc:22:bd:e8:17:34:1b:48:02:7a:c9:4d:8f:40:
67:86:6a:71:4f:74:55:a7:9e:67:e2:62:f1:7e:ed:6e:c1:dd:
00:96:c7:70:42:48:dd:03:93:ec:a1:21:dd:32:05:0b:70:bf:
e6:a6:54:b6:a4:10:4a:27:b7:58:40:aa:3c:dc:16:16:50:22:
d9:6a:89:ff:c1:30:ef:4f:89:c9:de:fa:5d:a8:bc:6e:3f:53:
33:8f:07:5c:fe:1e:15:d9:60:bf:a8:ee:39:e8:08:ab:ec:e4:
99:86:0e:17:34:59:f1:72:7c:62:46:c5:88:ee:a2:4d:60:be:
cf:1f:26:05:ec:b8:a2:4c:1a:2b:83:74:8d:c0:ee:db:61:ee:
09:d1:44:5d:43:c6:b0:8f:49:13:06:a8:30:3a:ca:8e:8a:f5:
92:42:e3:c6:7c:3d:17:b2:55:33:10:61:3b:16:6f:cc:9c:8f:
af:e0:5a:46:e3:a1:0d:87:3f:e5:10:85:1c:64:43:1d:92:a3:
ee:94:ef:5e:d6:0b:53:6e:c8:24:12:28:80:81:24:be:a3:8e:
76:28:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:52 2025 by rpki-client