Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: PmbxkRacjv5xt6XNKyPDSQrCNDfs/EUALSKFXHO24FI=
Subject key identifier: 0C:38:42:07:D6:C8:14:F3:98:B2:A9:4C:52:A6:E5:54:96:B8:E0:30
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0194BBCE07BF4D936268B9409E2162E33612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 02EE
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: W32HO5LVLOxAJqeIGZ4I0/PRQ/p6ZJuqBEdQQIfqMRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:bf:4d:93:62:68:b9:40:9e:21:62:e3:36:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=0c384207d6c814f398b2a94c52a6e55496b8e030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:45:76:67:c0:29:27:cd:8f:3f:57:0c:d0:
84:2d:9e:a7:59:ac:28:d3:fd:a1:e0:96:66:fe:88:
b5:bd:31:6d:99:fd:13:1b:e0:7c:22:18:3b:7f:9a:
9f:aa:69:8f:aa:72:5c:67:5e:aa:ee:10:a6:60:3d:
02:49:60:6b:b0:ad:2b:33:a3:61:0d:cd:fd:c7:f1:
d1:d6:dc:75:06:81:67:6c:75:90:ca:a7:78:2d:0a:
9a:df:de:8a:e7:66:8d:50:e9:a7:ab:b8:82:77:e5:
06:e3:0d:b7:09:18:13:dc:12:d3:fe:ba:65:dc:e2:
c3:cb:b9:01:23:d3:5f:24:23:c5:6e:0f:c1:90:df:
94:c0:ce:e6:85:7e:35:11:ea:51:fd:5c:c4:30:67:
97:f4:21:85:66:66:0b:2c:bd:14:a8:3c:2f:a7:ed:
87:d1:02:85:99:66:bf:22:01:81:58:b7:29:09:ee:
16:ad:6d:b4:45:00:15:b0:5e:82:6a:5f:ad:a7:d0:
10:06:84:80:19:d4:77:cd:7d:11:77:50:e1:20:a4:
63:b5:38:9b:88:0c:30:8c:bc:71:e1:c5:77:fa:e1:
ce:07:8f:9d:c7:a3:bf:e3:bb:93:19:da:c5:47:27:
2b:99:55:14:0b:ba:27:61:fb:a8:20:54:0f:dd:3d:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:42:07:D6:C8:14:F3:98:B2:A9:4C:52:A6:E5:54:96:B8:E0:30
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f6:c9:6f:8e:c7:68:4e:77:3d:23:30:ed:d9:f2:48:59:de:
64:a9:4b:4f:6d:29:0a:68:7f:7c:a3:20:1f:ee:30:20:75:2a:
de:7f:ca:8d:fd:dc:8f:90:b5:01:5f:35:dd:5d:a3:09:f3:a7:
f1:cb:fa:e1:a9:93:72:85:19:f7:8b:72:e6:19:87:74:77:55:
52:df:92:98:67:6a:e2:e1:36:8c:63:6d:44:e7:9c:39:c5:0a:
06:00:81:e5:d0:55:99:94:c1:8f:58:c2:28:3a:71:8e:b3:b4:
4d:8b:e3:a8:12:6c:af:7e:3a:ab:96:2e:93:fb:0b:83:dd:b0:
01:4e:fc:4c:d7:67:68:67:b9:a4:84:cc:8c:3c:92:8b:8f:98:
61:0c:d3:06:dd:b8:59:21:67:47:a6:c3:cb:e0:cd:3c:32:d3:
a0:55:f1:34:75:1e:88:19:75:3a:cd:75:10:39:fe:ad:8b:67:
0c:3a:e3:8c:c8:6b:75:40:31:4a:7e:a5:45:95:4f:ef:57:0d:
06:9c:61:67:34:98:8f:95:ab:b8:f4:9c:95:d9:41:93:f2:56:
e9:ca:a4:af:cd:b6:96:04:6e:e9:9b:07:35:65:d2:68:83:c6:
3b:f5:ac:d8:2f:63:95:81:75:f8:e4:9e:77:07:ea:97:12:59:
85:34:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client