Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: OAtxShtx4XdAfbC8g3H7vv4srYRDlXzf3gTo4ioZ6gE=
Subject key identifier: 2A:FA:0A:CC:BE:A7:CD:69:6A:1F:75:EF:13:19:BD:64:21:66:57:DB
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 0194BD1796ECFDE25B5D4545225A4890C882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 2C
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: 2bGQtEIBTInuRKlThxxsANd118Q08Azw18yJE9+bCFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:ec:fd:e2:5b:5d:45:45:22:5a:48:90:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=2afa0accbea7cd696a1f75ef1319bd64216657db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:bd:1a:f9:3b:87:3f:88:1b:27:b4:c3:77:
47:72:04:69:b6:45:12:d4:36:1d:c0:dd:94:95:00:
63:71:24:5d:c4:23:1e:a5:3e:a1:ae:52:04:a4:f8:
c1:bc:84:bd:8f:b0:c8:69:01:1f:4e:eb:11:8e:5c:
c6:83:db:0b:8e:e1:d6:63:a5:a2:7e:a2:69:6a:27:
a2:f4:fe:1d:c9:f9:43:1b:23:29:0a:61:db:45:f4:
d2:96:86:b8:a5:eb:2d:1f:0b:b0:68:63:77:38:df:
fd:d6:8d:37:f4:43:71:f6:f9:84:de:e6:cd:0b:c6:
49:eb:2f:b8:6f:61:58:01:ca:1a:2f:bd:e7:93:2d:
90:cd:06:f5:29:5a:ae:49:89:4e:4c:2e:da:7a:00:
a2:b8:21:aa:7f:bf:56:e5:34:9f:3f:3e:3d:0a:9a:
00:2d:44:6c:b3:6e:fc:72:7e:44:4b:a4:59:5d:7f:
a6:dd:be:f3:f7:99:4e:59:31:86:88:ed:56:eb:70:
f0:a8:87:cb:c1:1e:ac:b7:3f:ec:0d:ca:5a:25:b7:
4c:95:92:30:e7:39:98:09:49:24:ae:c3:ef:4e:50:
36:31:4a:e3:0e:e8:74:b1:98:06:be:34:52:76:ea:
0b:24:b0:b8:1e:ef:ac:28:ab:88:40:e8:dc:09:bf:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FA:0A:CC:BE:A7:CD:69:6A:1F:75:EF:13:19:BD:64:21:66:57:DB
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:25:60:01:f2:cb:2f:1c:a3:2b:51:20:74:59:9f:97:3e:
76:ea:28:96:10:5d:7b:fe:0a:3e:41:52:a7:94:9f:09:ea:d1:
f5:6a:c6:1a:c5:f1:8a:97:93:35:c2:a1:79:90:5f:f5:16:4c:
84:d9:da:71:60:7a:2e:07:87:fe:1d:99:50:dc:83:72:94:8a:
96:cd:ef:93:60:8c:11:ff:34:f6:a8:28:b1:65:6a:ba:2c:09:
57:b3:b5:36:74:19:c4:6c:c3:67:52:8a:aa:30:23:f5:de:f4:
d0:a1:71:b2:3f:8d:c5:ad:15:ce:c3:e1:a3:4d:39:b8:6c:4d:
3a:c1:86:cb:b8:f3:f6:7e:61:6f:e8:73:9c:8d:dc:b3:4e:cb:
39:a1:cb:c3:c0:92:8f:68:ee:13:e2:f4:e1:fc:50:a9:1a:9e:
78:fa:34:ea:70:52:36:2f:b9:4d:33:ca:28:cb:1c:c1:71:98:
58:5c:2c:37:9d:54:aa:1a:f3:08:13:f5:7b:13:b9:04:4c:9f:
65:97:b7:e0:94:0a:5c:f9:75:84:1a:8f:80:db:ae:bc:2b:15:
7c:4e:fa:eb:31:b0:7a:67:d7:bc:58:f8:58:a5:38:c5:74:a8:
28:7d:58:d6:e0:b0:60:4e:13:59:97:e7:18:1b:1e:ca:da:f0:
05:12:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:22 2025 by rpki-client