Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: I9DsI9z3wiAcSj0UZ1tOaAmLBLfUDwFd1QmiHPOSDUE=
Subject key identifier: 89:4D:14:3C:89:44:5C:BC:BA:47:F9:D6:63:B0:A2:80:B2:7F:4F:C6
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 0194BD17DC500CFF58AFCC7451FB0A40D4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 110F
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: M30CxyocuJ8Quj/eiElaAAz9UJ38QV7XV3Pmx9ovwOs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:50:0c:ff:58:af:cc:74:51:fb:0a:40:d4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=894d143c89445cbcba47f9d663b0a280b27f4fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b3:fd:96:41:15:85:f4:3e:43:82:c5:34:90:
0b:17:7e:f0:ba:3b:d4:06:1b:2f:23:ae:05:2c:f3:
43:d4:4f:01:93:3d:59:23:2d:14:eb:86:0f:cf:60:
96:70:ca:a6:07:43:b4:f8:5e:85:d1:a2:6b:55:af:
a9:a1:85:d9:74:48:39:1f:76:55:5d:be:a3:bb:9b:
bc:3c:8b:9f:77:06:d3:6a:53:47:ea:db:88:b9:c3:
3e:3e:fc:4e:9e:b4:75:ee:7a:22:6d:06:94:18:24:
5b:1b:10:53:98:de:53:d2:1c:ff:05:9a:33:2e:0d:
d3:76:c3:56:2d:e9:f6:e3:b8:e3:d2:f9:90:c6:35:
a3:3a:62:89:bb:6e:bc:ec:47:9e:b1:fa:6e:aa:19:
dc:44:8f:30:8e:4d:b8:a2:29:01:e9:6d:62:60:a2:
e7:cd:10:90:93:ac:f4:52:46:c5:d3:af:90:7f:8f:
76:1b:23:6b:e5:d0:9c:05:07:15:d3:e8:bb:5b:36:
a3:ef:f1:48:f7:80:01:78:e8:2a:31:60:dc:15:e6:
b2:94:1c:4e:4a:08:60:7e:88:ed:aa:a1:a4:e3:8f:
04:53:de:cd:be:10:c8:ab:3d:01:c1:8c:01:73:29:
31:db:69:80:92:00:2f:18:88:08:7e:52:30:9c:5f:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4D:14:3C:89:44:5C:BC:BA:47:F9:D6:63:B0:A2:80:B2:7F:4F:C6
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:62:ee:90:4c:fc:13:84:61:37:ee:ec:36:9c:5e:af:42:
03:f3:b6:1c:58:0a:03:90:48:16:b6:a3:6e:65:2a:4b:51:37:
ff:3a:21:cc:2f:f3:d5:e9:cc:bc:86:04:0c:65:6d:fd:74:b7:
e5:c9:9e:66:d6:ad:e9:84:9a:98:cf:2c:a4:d5:5a:70:ad:46:
e9:69:7c:8f:90:d0:04:4c:09:ee:58:c7:ad:7c:fc:6d:37:98:
ca:d1:3d:c7:ea:f5:76:c4:63:47:82:5d:04:01:03:7c:b2:62:
c7:ea:ff:4a:e1:dc:de:26:5d:2a:dc:13:8d:17:e5:10:64:3e:
7c:12:25:7b:d6:d2:33:5d:83:9c:38:df:12:6f:ee:36:1f:58:
21:58:3e:7a:17:24:53:25:08:48:80:2a:bc:1c:92:4e:5e:c0:
fa:1b:cd:a5:60:0f:01:d1:a0:1a:30:e0:17:ca:a2:35:b4:8f:
a1:5c:a4:35:e0:e2:53:a8:07:94:a0:47:ce:65:70:e3:b4:b1:
ff:75:71:45:f6:0f:ce:2a:5c:44:06:27:90:9e:e3:b4:08:69:
05:08:b6:51:37:16:67:6d:9d:bb:30:08:8a:48:8e:c8:ed:16:
48:a0:f8:b0:cb:98:19:f8:f5:89:ec:99:25:bc:d4:c7:d2:96:
cb:5e:d6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:11 2025 by rpki-client