Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier: QAIIaDXyDx5iD10Opy/VSTGTcwv9Nvbx7/xHVrvK9lA=
Subject key identifier: D0:19:5F:60:6F:68:11:E1:10:7B:B7:12:AC:D8:25:C3:D5:34:EC:4F
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial: 0194BCA980ABA0A0EACCEA05AAD5B11BD05A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number: D9
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: kstRPbhnsmsk0eLv92AdQsfUSM5I1ckkKQplnNLniwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:ab:a0:a0:ea:cc:ea:05:aa:d5:b1:1b:d0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=d0195f606f6811e1107bb712acd825c3d534ec4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:61:3d:dc:26:c8:59:51:53:2f:27:97:b2:
83:a9:c6:5e:4f:0e:fb:0d:d7:a0:6b:bf:10:62:d5:
33:e4:f0:1c:fc:7e:87:5a:09:f0:f6:72:17:3e:f1:
e8:93:d6:46:28:c1:e7:4d:e0:9f:af:b6:4b:37:0b:
f3:3d:bb:74:e7:61:5c:46:c7:44:63:d4:cd:1f:93:
bb:cb:68:00:bf:d1:4c:5e:fb:a9:ee:f6:82:69:f9:
86:d0:06:70:c6:9e:5a:ef:6b:f4:cd:26:a0:b8:01:
20:f3:e1:78:12:95:4f:19:94:78:e9:eb:51:97:99:
0a:2f:38:26:5a:1c:fd:c5:02:4f:ea:4e:48:d5:80:
5b:68:73:6c:c4:ac:99:55:aa:b6:eb:97:1e:9e:40:
ef:2e:4f:c4:54:2a:5d:48:71:7e:3d:2c:f6:a2:74:
c4:69:06:7d:c5:8c:86:2d:bf:c0:e6:a2:57:63:88:
f7:54:bf:d4:7c:3b:1a:6e:b1:02:6f:7b:57:bd:fd:
0e:9d:9d:00:b9:42:b9:28:c9:a3:c9:85:31:d6:bb:
a3:17:f6:a5:a7:0f:5a:dc:9a:f0:05:3e:de:5f:5a:
01:82:71:e8:07:d5:08:64:d2:dc:52:23:8b:72:2a:
58:2c:1d:71:52:e3:62:0f:99:9a:40:8c:d3:c5:b4:
f9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:5F:60:6F:68:11:E1:10:7B:B7:12:AC:D8:25:C3:D5:34:EC:4F
X509v3 Authority Key Identifier:
keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ea:03:a7:af:6c:f1:b5:6d:7f:6d:5a:b7:ac:9b:f4:79:a8:
5b:f7:cf:62:05:52:12:41:68:6a:7a:7f:db:07:e4:3a:ed:5b:
32:19:d5:40:dc:37:fe:9a:c4:71:0a:d9:98:b3:f4:68:34:ee:
da:fe:1f:b3:7a:45:c4:4a:22:16:ed:84:d4:d8:0a:5e:68:0b:
4f:9c:8e:d2:03:45:78:98:2f:a8:e6:28:c4:da:4a:f6:f0:05:
1f:c9:0b:ea:5b:ce:a9:25:93:ae:7b:4d:f7:63:5a:87:e8:09:
0b:1f:ed:01:0e:d8:93:be:6f:58:eb:3b:ad:6b:7f:48:19:9f:
f8:49:c8:eb:1f:dc:7d:05:f8:fe:fc:e0:d2:0b:0b:4c:80:55:
c0:34:ec:63:d6:2c:7e:ba:3e:25:26:46:df:28:f2:7c:1f:30:
15:fd:45:f6:08:fd:65:d1:b3:48:f2:31:26:a3:a0:93:ef:73:
63:be:39:c1:ad:9b:16:3c:47:22:91:ef:9f:bf:b2:f9:41:af:
7b:50:af:90:e6:4b:bb:17:f8:d5:47:f3:97:38:bf:35:a5:ee:
01:41:db:a4:6c:77:59:8d:2e:dc:dd:a7:dc:b4:9b:52:b2:81:
36:4f:4e:ef:9d:e6:b7:5a:b5:a9:4c:50:e5:c6:43:9a:8c:ca:
1c:45:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:12 2025 by rpki-client