Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: 3SnZWUEy7sNH3jKXlXZqnhzAzYyDo5FInjPfAoXcFbk=
Subject key identifier: 45:AB:32:70:E9:9A:65:B9:D6:2B:4D:EA:51:46:E7:5F:2A:5A:CA:98
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0194BCE05EC118824DC86F5E3642DFADF4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 021E
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: nzAn2jUINA32x72jKD8CmkZJfjIOluACg/nt8+8MBjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5e:c1:18:82:4d:c8:6f:5e:36:42:df:ad:f4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=45ab3270e99a65b9d62b4dea5146e75f2a5aca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:44:b1:ef:8d:2f:c4:8a:de:79:73:45:7f:
40:83:8d:6b:6a:fe:c1:ea:c8:f8:c3:37:b4:d4:16:
7e:9e:54:84:e7:f3:07:e0:dd:97:6a:83:2a:82:c7:
90:11:de:5f:97:e6:53:89:f2:be:9d:90:0f:a2:85:
4b:4c:aa:30:7e:fe:77:70:c9:36:05:71:44:c0:cf:
34:99:bd:0e:d5:93:c4:70:93:16:ea:4b:ed:38:04:
73:34:7f:da:9c:03:1a:31:62:03:22:e7:7e:5c:f3:
a5:31:f0:4f:d6:49:1b:2b:df:e1:9f:bb:7a:66:b6:
29:89:6e:c0:8b:50:6a:68:46:b8:a0:e1:0f:a2:18:
ae:7a:f6:db:9a:90:be:7f:a5:c1:a3:5a:f6:79:56:
39:6a:a3:f7:76:fd:75:27:d3:be:cb:f5:7e:f0:7e:
ab:ea:c2:4f:56:6c:4a:51:56:5b:04:41:85:7c:4a:
e9:07:ed:be:80:75:7d:b1:df:2e:c1:45:0a:43:fc:
85:f4:c2:3f:51:7e:0a:09:d2:c2:35:63:36:46:b8:
b8:86:d0:28:a1:11:1a:ae:70:6f:82:8c:37:f5:8c:
e6:eb:4f:74:b5:20:cd:49:56:a8:87:ce:28:99:71:
b8:20:8f:66:68:e0:a1:65:34:6a:71:e7:23:9f:52:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AB:32:70:E9:9A:65:B9:D6:2B:4D:EA:51:46:E7:5F:2A:5A:CA:98
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3d:0f:8f:53:fc:06:83:02:81:03:83:08:3f:fb:b8:2c:b9:
c1:c9:d8:f6:21:f1:b4:24:39:71:03:cb:c3:9d:9f:1b:46:52:
6a:52:c1:0f:df:a5:c9:38:74:9a:91:49:40:26:9b:f3:82:15:
80:3d:12:c8:7f:2a:0f:db:66:aa:1b:58:b2:f1:85:17:1f:aa:
f5:d4:a8:fb:2d:c9:86:6a:cd:3f:7a:42:ff:aa:c7:40:1e:44:
4f:9a:39:f5:94:de:91:a3:16:4f:01:ea:e7:60:a9:07:ee:1d:
fe:60:37:8e:9d:ee:1b:8f:b7:5b:73:21:b9:aa:94:b8:5d:94:
3d:14:ed:1c:05:88:e8:2d:37:04:cb:7e:c3:d1:a8:10:bf:bd:
c7:e1:0d:fe:48:55:a9:d6:c9:c4:de:d1:26:ca:ec:81:64:92:
95:ec:61:fa:6e:4b:a5:f2:fa:4d:75:10:aa:b0:ba:a6:3e:33:
0c:31:e4:c6:5d:ec:17:ae:f1:4a:54:f6:57:34:6f:f5:24:6e:
bb:d7:28:1f:b8:a6:f2:f1:d5:92:1e:94:71:d2:4e:e6:ff:64:
1f:57:56:7d:6f:59:a6:5c:32:9c:cd:21:0c:2d:3d:78:8c:af:
5a:90:dd:6c:48:f7:40:28:4a:54:c4:4d:f5:46:7d:f1:f2:30:
f9:6b:90:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:24 2025 by rpki-client