Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
File: i6gkldaDsIyIGoGM0B-kL_9v9tE.mft (raw, json)
Hash identifier: G0YV7LwmTbJZLO6i4FCsZL0mN34pt8r+VehWvUNTa1s=
Subject key identifier: 96:F1:E9:D9:65:14:F5:42:62:B6:60:D1:BC:5F:82:56:45:C7:52:B6
Authority key identifier: 8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
Certificate issuer: /CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Certificate serial: 0194BD17CEA9DB472B85A5C62A011B1696FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
Manifest number: 20
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: i6gkldaDsIyIGoGM0B-kL_9v9tE.crl (hash: oso70mw/KTB9VVCtb99OhnMEVYg1GT3mD03nK6qnW8c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ce:a9:db:47:2b:85:a5:c6:2a:01:1b:16:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ba82495d683b08c881a818cd01fa42fff6ff6d1
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=96f1e9d96514f54262b660d1bc5f825645c752b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:ca:8d:0e:0d:7b:12:7d:7f:61:c7:f4:c5:
4b:3d:6c:5d:a9:b1:d7:54:3e:a7:84:5c:a7:d3:a2:
52:f2:6d:5b:bb:92:92:c0:fa:59:11:15:d6:9b:2d:
9e:f4:8a:dc:12:84:56:aa:e8:57:d2:c1:ea:a9:f6:
f3:03:55:ff:d4:3f:cd:4f:18:4d:1d:52:f2:bf:00:
1b:91:d2:a0:41:7a:92:d0:5c:71:81:4a:60:08:99:
bd:9f:3c:c3:c8:e7:ba:16:5d:fa:f9:20:ff:f5:3b:
36:4d:84:96:71:11:fd:e4:a9:f3:05:fb:62:1f:73:
a3:55:5c:b2:14:b6:a8:74:ec:01:a1:b4:ca:20:87:
dc:6c:9a:d4:b7:6b:35:32:ec:f3:3b:fc:cf:9e:cc:
b3:ff:c9:00:ff:49:32:68:32:9a:78:4a:78:76:15:
df:af:28:ce:31:d0:a7:41:2c:7d:54:9e:f3:52:ad:
52:d0:86:c3:ec:72:6d:d6:f5:ef:3a:47:4d:63:26:
85:91:e1:bb:3f:02:c8:f1:a2:5b:c5:17:51:ca:3f:
73:7a:95:59:46:13:37:f5:b8:26:d0:97:9a:3a:99:
75:f1:b9:2b:ef:8b:a1:26:53:01:64:f4:2b:87:7a:
53:b7:32:dc:1c:ac:4c:74:5d:9f:a5:31:4e:45:23:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F1:E9:D9:65:14:F5:42:62:B6:60:D1:BC:5F:82:56:45:C7:52:B6
X509v3 Authority Key Identifier:
keyid:8B:A8:24:95:D6:83:B0:8C:88:1A:81:8C:D0:1F:A4:2F:FF:6F:F6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6gkldaDsIyIGoGM0B-kL_9v9tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68ed98-fe3f-4063-91a9-c6250fb6096e/1/i6gkldaDsIyIGoGM0B-kL_9v9tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:d7:fe:fb:65:fd:59:d9:83:af:8f:51:93:c3:4c:fe:ef:
a2:44:43:0c:a1:18:0c:06:0f:ff:5c:1a:34:0b:d4:35:3f:64:
7f:b5:a5:2a:34:6b:c3:e2:27:4d:88:fb:7c:6d:49:e1:46:48:
71:a5:19:74:ec:e9:74:50:9a:79:9c:6b:75:9e:33:7f:e2:e3:
ba:85:59:ff:3c:00:bd:10:a7:90:6f:b1:27:d4:98:0f:32:fa:
d8:c4:a5:6d:bb:ae:e0:d0:f0:55:3f:f7:bb:92:60:23:f7:a9:
24:3f:94:1e:ec:47:99:a7:1f:e2:71:9e:3a:bc:18:c7:c1:5a:
c8:ba:bc:5e:fa:7a:90:af:58:28:73:08:9a:e8:f3:73:35:15:
ca:99:cf:79:aa:0c:8c:a3:53:54:11:63:75:f0:a7:a6:7e:0e:
8e:97:62:2b:e9:0a:45:74:03:21:28:bd:d9:21:2f:8c:5b:cc:
61:a3:1f:d7:8c:a3:8c:7c:48:ab:e3:d0:2b:31:e4:29:79:ac:
f2:08:db:17:64:91:12:41:09:fc:38:9b:1b:6c:66:28:6a:35:
95:b8:0b:ae:45:35:45:9e:fb:5a:9d:b1:27:f6:65:d5:12:cd:
73:d5:56:6a:14:b5:7f:f1:30:b2:b1:31:b8:c4:d3:68:92:bd:
f4:fd:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:53 2025 by rpki-client