Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: wSXQ7dFjYW8TVUsHXS5Bnq2qpoMOeJ0/N/bzDUCwG/I=
Subject key identifier: 15:E8:F2:F2:6F:01:BE:34:77:29:D3:D9:F0:3E:86:58:5D:E8:79:3C
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 0194BCAA0366E9F9523FF067C2144A84A88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 131B
Signing time: Fri 31 Jan 2025 14:00:45 +0000
Manifest this update: Fri 31 Jan 2025 14:00:45 +0000
Manifest next update: Sat 01 Feb 2025 14:00:45 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: aGXFoeN6C2dzQExtWeUD1m2lAmh5c43YVJI/zud9Rfo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:03:66:e9:f9:52:3f:f0:67:c2:14:4a:84:a8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Jan 31 14:00:45 2025 GMT
Not After : Feb 1 14:00:45 2025 GMT
Subject: CN=15e8f2f26f01be347729d3d9f03e86585de8793c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:cb:65:75:7c:84:3b:7a:f3:2e:b2:c7:f4:
26:4b:0c:ca:f4:5d:49:88:6c:e3:78:56:64:b2:91:
a9:ad:79:f9:e4:b5:dd:49:e2:20:0d:78:8a:70:14:
9a:b9:27:b7:4a:d1:86:1a:73:9a:a0:c2:8b:ca:b8:
16:1c:be:01:80:93:d0:0f:66:c2:a6:31:90:26:40:
57:58:c1:aa:96:d7:77:b0:7d:d9:a8:e1:ff:c0:dd:
d0:42:81:df:b5:b1:c3:06:fa:52:48:cd:77:95:46:
f6:78:18:f6:fc:a7:79:1b:a9:3f:18:32:6a:f2:74:
30:5e:9b:10:51:59:58:d7:6a:fd:cc:e8:c0:e3:46:
2f:2f:dd:e1:ee:58:15:5d:aa:f4:3a:63:7b:e2:18:
bb:b4:1e:83:7f:d3:a7:76:ed:11:76:1e:1f:4b:9d:
71:4e:53:e4:3e:2c:29:2c:3e:30:60:b8:f8:db:c8:
3d:74:92:ba:0b:06:34:97:9d:0a:34:be:12:09:15:
78:5a:f7:0b:61:bd:3c:fa:fc:6a:b1:3f:60:eb:f9:
e2:e4:2b:01:c1:98:97:6b:6e:c9:ae:07:79:e4:06:
8a:36:7a:67:df:00:53:75:b0:7c:e8:78:69:25:aa:
f9:82:6e:aa:2c:a5:4f:0a:a2:2b:ed:f4:80:56:1a:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:F2:F2:6F:01:BE:34:77:29:D3:D9:F0:3E:86:58:5D:E8:79:3C
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:07:f3:b8:b8:1b:08:0a:2a:2c:65:a1:d4:af:98:81:e3:
f7:31:dd:12:8d:65:e1:92:2c:ff:13:84:0e:61:9f:94:d0:9c:
0e:2c:b7:7c:40:07:41:9a:24:d1:2f:24:77:c7:ff:d9:bd:bd:
27:d9:54:fc:9c:c8:a5:0c:2a:0e:a3:d9:d6:6f:39:05:80:fe:
71:18:64:42:fd:63:94:d3:fc:85:94:e0:1a:c3:e0:4f:53:69:
02:1b:95:eb:2b:18:32:e4:5c:cd:da:5c:e8:b1:e1:03:9e:5b:
34:73:53:be:7a:b6:a9:76:5e:b2:3a:be:d1:45:d3:fa:7f:43:
2d:69:10:aa:d5:31:9a:4b:15:36:00:36:d6:82:de:4f:74:43:
a6:51:7c:06:3f:0e:f3:ef:69:be:56:ca:57:8b:12:0b:75:35:
09:22:4d:da:ba:4c:db:74:02:ca:b6:58:ca:b1:48:13:df:3d:
91:60:ed:db:90:61:f2:a2:dc:1f:d5:7e:ef:56:0d:1d:c5:7a:
7c:f1:1e:d9:0b:f2:01:b8:22:29:54:2d:4a:75:2e:10:24:71:
ad:c9:41:71:4c:b0:78:ce:0c:23:5d:98:30:6d:02:90:b7:10:
c6:33:d5:73:0b:ed:6c:2c:c7:14:41:4b:8a:98:17:1e:96:54:
df:fa:c1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:32 2025 by rpki-client