Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File: sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier: AqEkdp5WxNWrq/VdBykXuxy0jD3znxpgYzcVsUGiHd4=
Subject key identifier: 4C:C3:4A:D0:7A:EC:E3:62:4E:64:4B:94:53:48:A6:9F:DF:69:35:CE
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer: /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial: 0194BC3CB6D0FB47B5057B5BFDA102737FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number: 089D
Signing time: Fri 31 Jan 2025 12:01:23 +0000
Manifest this update: Fri 31 Jan 2025 12:01:23 +0000
Manifest next update: Sat 01 Feb 2025 12:01:23 +0000
Files and hashes: 1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: CckhGWjdU+8S7MtgQz5BlZgdnlb1KPu5ZEeDUimNqOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b6:d0:fb:47:b5:05:7b:5b:fd:a1:02:73:7f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
Validity
Not Before: Jan 31 12:01:23 2025 GMT
Not After : Feb 1 12:01:23 2025 GMT
Subject: CN=4cc34ad07aece3624e644b945348a69fdf6935ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:bd:56:a3:00:4b:f9:93:df:59:0f:5a:ae:
b9:6a:d4:f9:c8:6d:32:c3:e4:e4:ae:65:66:e0:c9:
07:66:d7:ca:cb:dd:ff:97:90:92:68:9a:8b:90:b8:
3b:16:5d:ad:ae:79:7a:28:c4:00:f5:34:ec:dc:10:
bd:e7:70:45:4e:78:9a:16:75:8c:ba:b8:a2:73:c3:
8e:40:8d:2a:87:b1:6f:34:08:ef:ae:e3:67:ff:2b:
b3:dd:74:79:87:4f:d5:38:2e:3a:0c:34:a3:73:ef:
36:2b:cb:13:00:2f:39:e3:c0:cb:46:29:70:66:6d:
d2:77:6d:e1:ce:81:ec:e9:81:d3:a5:6c:ab:83:f7:
d2:fe:7f:b1:41:f8:54:60:ec:74:d7:51:0f:a0:33:
75:10:ef:d2:72:e2:a3:af:c9:22:33:3a:9f:ff:54:
0b:e4:87:56:47:87:01:16:98:50:f1:80:83:0f:02:
55:42:2e:37:1b:3e:d8:ad:97:ce:d9:82:d4:96:21:
0b:ed:89:7b:2c:45:0d:da:24:52:77:06:fa:2f:bf:
52:8a:05:d5:a0:19:6c:fe:b8:72:62:40:f8:17:31:
1d:4b:56:f3:75:2a:5e:48:c4:3c:c8:42:72:3d:1b:
2d:5e:90:f8:fa:11:11:2d:c5:5c:de:b5:74:47:a8:
cb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:4A:D0:7A:EC:E3:62:4E:64:4B:94:53:48:A6:9F:DF:69:35:CE
X509v3 Authority Key Identifier:
keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:fb:88:65:d7:14:f9:17:ec:11:c1:47:de:20:c4:d7:44:91:
3a:97:ef:56:d3:b6:26:77:4e:da:47:a6:4e:73:5e:17:d3:84:
0a:0f:9c:3e:da:b1:ac:64:60:e7:19:a6:35:20:13:2a:68:a7:
0b:9c:b6:85:d9:af:74:fb:7c:4b:40:d3:ae:67:7d:5c:8d:81:
a8:68:56:5d:8c:b2:14:3d:bd:d8:7c:38:c2:98:3f:68:9d:a0:
a7:74:46:cb:d8:c9:83:e9:6a:5c:2e:9b:20:45:d8:0b:a7:90:
e2:2f:7b:b2:6b:01:e8:0e:ba:15:7b:7a:6d:b0:4f:fb:97:98:
26:32:0f:c6:42:96:61:d6:5a:a3:7c:c8:93:48:f7:81:9d:82:
8d:46:27:f2:e8:70:33:52:05:7f:91:34:20:ba:06:ba:89:f5:
0d:6b:ea:76:15:6c:b8:65:99:f5:cd:b3:4f:c5:ef:2b:6b:ea:
db:94:60:80:90:20:c8:c6:00:c6:3e:b5:29:e6:d0:6f:7d:e2:
18:ac:9e:e2:71:5b:3c:84:f3:3b:ec:c3:91:e6:62:a5:33:43:
9e:e0:03:e9:01:46:f3:40:87:aa:e8:95:29:ee:9d:53:2c:4d:
b4:61:a8:13:79:7f:4b:a5:e2:40:8d:b0:ce:17:0b:b3:6a:1e:
95:5f:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:34 2025 by rpki-client