Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
File: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft (raw, json)
Hash identifier: V5jyG+3ktvKLkForwEc8L/RzAkEDOA6g4Mgjum8EnKo=
Subject key identifier: 2D:A7:69:08:85:31:56:39:62:E7:FB:AE:96:CA:03:03:B5:9D:D1:87
Authority key identifier: 89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
Certificate issuer: /CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Certificate serial: 0194BBCEC83E4D39C6E198AC9FE13FDD8DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
Manifest number: 106F
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl (hash: yn+nBiQlaMY5M0ITLWcpWTGnhE9e+zs3QGwAqahLu9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:3e:4d:39:c6:e1:98:ac:9f:e1:3f:dd:8d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8936df4ac2f467ea66c1197a8629d3f64bb563f0
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=2da769088531563962e7fbae96ca0303b59dd187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:ef:1d:b9:2f:eb:82:48:24:85:9f:cc:82:
5a:88:54:53:63:d3:0a:da:95:fa:93:f0:71:c1:08:
d0:45:86:fb:d9:7e:9c:de:7b:e1:fb:98:a8:dd:c7:
2c:0a:e3:9e:83:5a:4f:42:be:e0:b8:1e:aa:52:f2:
ea:20:b6:6a:14:01:01:43:af:aa:42:77:d6:01:f7:
20:a3:37:22:e5:8e:98:1d:53:53:ab:22:a0:b2:f6:
97:07:77:95:14:84:0b:e3:de:a7:0e:6b:02:15:cd:
f9:7b:d6:51:71:6d:4e:f2:11:81:c2:4c:d2:94:ad:
36:59:5e:d0:1c:31:a2:ab:a9:9f:0c:64:06:b1:3d:
a3:48:6b:e6:dc:a8:70:07:75:1e:fe:9c:9a:37:69:
ab:f1:7a:df:24:73:aa:5e:1a:58:9e:0d:1a:13:9e:
d9:62:67:1f:a4:ca:9c:18:50:c0:cf:cb:60:e0:43:
83:77:5d:e1:b2:90:a9:e7:76:73:b6:35:c5:cc:0b:
d9:0c:a6:28:45:d2:18:4c:46:1c:29:d5:d3:b3:ba:
cf:10:eb:15:02:a0:51:47:99:4d:aa:bd:74:a7:ca:
01:08:2b:30:42:79:10:16:76:1a:f1:17:59:ad:a4:
c9:29:b5:cc:9d:52:fa:4f:97:68:d3:60:72:ab:fd:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:69:08:85:31:56:39:62:E7:FB:AE:96:CA:03:03:B5:9D:D1:87
X509v3 Authority Key Identifier:
keyid:89:36:DF:4A:C2:F4:67:EA:66:C1:19:7A:86:29:D3:F6:4B:B5:63:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/7895f8-ac31-4798-8404-4e278dd48a3f/1/iTbfSsL0Z-pmwRl6hinT9ku1Y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:5e:6a:55:d5:a7:a3:27:a6:17:c9:2e:19:44:68:7e:15:
42:31:ad:b8:3f:9a:db:d0:60:36:06:2b:be:75:68:30:46:a7:
cb:a7:26:e2:c9:8a:af:a3:16:c0:a0:ee:c5:84:06:3a:a8:ea:
57:c1:19:4c:75:3b:af:72:81:a0:37:39:d7:a9:64:fd:bd:89:
f6:fd:65:a8:14:0f:a9:21:93:ff:eb:05:e2:f3:b3:60:b4:1f:
96:6f:d1:de:a2:90:ac:f9:fa:0f:ae:5b:73:96:b5:dc:1d:d6:
2e:d9:50:99:ae:7b:45:59:27:6e:4f:ca:14:85:13:63:cf:b0:
7a:7e:68:a1:8b:fc:b1:52:a7:f9:b5:29:27:61:c3:96:9c:ab:
4a:36:28:79:87:f3:6d:78:13:bf:9e:e8:bc:28:7a:d7:1e:01:
3a:45:f7:e1:0b:00:17:19:1c:9d:7f:2a:1f:18:39:f1:84:b1:
7f:60:87:ac:3c:1f:72:dc:ac:c1:d6:de:3e:de:4a:f4:55:39:
c0:1d:b6:c9:90:5f:d2:89:c9:4c:f5:bd:08:a1:03:fc:dc:91:
62:9f:d5:f6:90:1d:8a:be:a7:42:3b:04:b7:a0:66:3a:75:20:
1d:14:b9:d6:3c:d4:23:35:b0:61:4e:57:c8:e2:fd:31:f3:c2:
dc:19:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:36 2025 by rpki-client