Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: LsmxgasEDosacJaH1e+csX0lvOOAvO7w7DeWz9u4vf8=
Subject key identifier: BD:85:72:2F:9F:3C:C4:C6:89:22:B6:01:D4:AC:F9:AF:6D:8E:85:0C
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 0194BCAA385F4A980A271980A9797DBD3B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 1141
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: OZPizhHQnVEo2Tpze/XxF9wLyzGa3SIuiLrvZ0NyMK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:5f:4a:98:0a:27:19:80:a9:79:7d:bd:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=bd85722f9f3cc4c68922b601d4acf9af6d8e850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:b0:50:9d:70:02:e8:59:e7:fd:85:8c:87:
3e:21:21:be:a5:4b:c0:77:f9:31:85:ec:2b:58:d1:
06:fb:33:b6:d7:24:46:7a:ee:b9:3a:73:10:e1:d0:
0b:da:93:a9:a0:07:98:1b:ff:b9:cc:93:7c:7a:8e:
db:aa:76:83:a2:b1:6d:c4:46:e0:94:1a:6e:9a:ed:
a8:0f:c0:64:60:2e:74:a0:f8:3f:a4:b2:dc:86:2d:
44:70:cc:1b:5a:c5:e0:86:45:f5:a2:a3:78:5b:9f:
68:22:2a:c3:1e:e0:81:99:bf:0e:67:f3:c0:c0:f3:
5b:8d:c1:15:40:3d:b9:14:57:c7:82:94:40:ae:3f:
e9:59:24:d9:a3:0f:95:74:77:b6:e5:05:1c:53:fe:
37:19:c3:5e:31:d7:5e:4d:90:8c:f5:f6:bd:49:0b:
32:5e:90:6e:25:02:7f:a4:56:01:e0:85:d5:54:ef:
17:a0:0c:39:6f:f7:f3:b7:07:5c:9e:79:c1:ce:fe:
99:1e:99:37:58:27:b3:63:ef:88:16:5e:66:ae:e1:
fe:e2:11:9b:af:a5:3a:19:f6:8c:f9:7b:c1:3c:09:
fa:a4:fa:d7:36:cd:46:e5:66:ee:6a:86:7f:3b:25:
5d:a5:5d:a0:18:23:d7:2e:07:1e:9a:4f:e2:d0:bc:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:85:72:2F:9F:3C:C4:C6:89:22:B6:01:D4:AC:F9:AF:6D:8E:85:0C
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:db:d9:35:ac:f3:1a:d5:be:39:4a:a6:7e:52:ec:0b:05:75:
ab:db:0f:26:0e:2e:03:2c:30:97:9e:25:9f:be:eb:b9:92:d1:
d5:b1:5b:0f:15:a1:21:99:7c:65:4e:b1:82:5f:11:36:2f:d0:
05:db:7e:33:02:ae:e7:e6:f3:ae:b0:36:07:44:7a:15:1e:8a:
47:d5:0c:c1:da:79:c0:18:ba:b2:49:1e:45:0f:f0:e1:5f:5f:
ae:d6:d9:69:0b:c3:c7:4c:4b:11:1b:67:d9:ae:02:6e:7b:3a:
13:e3:92:07:28:06:51:db:1e:a9:71:6b:9b:1b:1c:fa:f4:ae:
c2:14:a2:d8:61:9b:8b:cd:7e:a7:e1:ff:b6:1f:34:be:65:2d:
66:02:1c:a0:38:f4:f3:e0:ff:a2:0a:55:22:59:1c:de:2b:d0:
02:40:9c:66:66:02:a2:9a:d8:d7:66:00:f5:a5:ef:57:61:b7:
8a:a2:8d:ac:75:3a:bd:57:c3:08:44:eb:72:04:a9:e1:70:e2:
0c:47:bf:be:69:98:36:3c:f3:bd:64:76:f4:89:43:6d:0a:d1:
ab:49:2e:8f:ee:4a:3f:f3:fa:af:ed:5d:f6:c8:05:dd:89:91:
2a:d2:ce:fb:f9:20:0d:9c:95:8f:7b:6d:08:1c:db:1f:90:37:
d2:cc:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:17 2025 by rpki-client