Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
File: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft (raw, json)
Hash identifier: wEpaZkL08dvyOuV+YwJNlOojZ4XdHFTVUXZTBbEKHmA=
Subject key identifier: B7:8E:5E:EA:AD:06:08:31:22:34:22:6F:B4:4D:B5:A2:52:87:B9:72
Authority key identifier: 21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
Certificate issuer: /CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Certificate serial: 0195D7B121F227A39229174F5BC9092EAF63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
Manifest number: 14B9
Signing time: Thu 27 Mar 2025 13:01:04 +0000
Manifest this update: Thu 27 Mar 2025 13:01:04 +0000
Manifest next update: Fri 28 Mar 2025 13:01:04 +0000
Files and hashes: 1: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl (hash: rJBSwMBJeTaPlFejjrmLso/MKmEa5Jx22dXcvkeVS7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:b1:21:f2:27:a3:92:29:17:4f:5b:c9:09:2e:af:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Validity
Not Before: Mar 27 13:01:04 2025 GMT
Not After : Mar 28 13:01:04 2025 GMT
Subject: CN=b78e5eeaad0608312234226fb44db5a25287b972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c9:37:8d:69:13:0d:bd:8b:f0:a1:39:5b:82:
70:d5:2c:b6:f7:ba:fd:09:47:0c:d3:29:a9:35:77:
39:bd:db:85:37:7f:65:51:a9:e0:8c:3f:ea:8b:43:
3f:ee:60:18:c4:bd:43:2c:6d:3c:4f:f2:ba:ab:51:
8b:21:f5:20:bd:e3:83:6d:79:24:f8:85:f0:dd:01:
9a:08:b5:ea:0d:ec:40:c5:35:33:a6:76:a3:4d:d4:
e5:a9:e9:0d:d0:59:d3:61:e5:da:05:a2:c6:52:c8:
ee:13:67:19:bc:cf:0b:03:cb:65:da:0d:cf:d2:60:
bd:5c:f2:22:2f:bf:a6:44:eb:bf:ac:24:c0:2f:01:
c6:c5:35:b3:6b:ca:be:49:c5:d8:b8:3e:3b:9e:bd:
80:bf:8b:6b:5c:13:56:fb:ff:7f:d3:a2:09:ae:d7:
7b:a1:db:b0:57:cb:c4:1e:26:8c:c6:5c:2d:ab:39:
28:2a:ca:c9:87:5f:cd:f6:9c:ce:17:f7:80:d5:61:
28:d3:c3:6c:81:94:bf:49:bd:53:ba:6d:95:0a:72:
d1:42:83:2d:02:de:1f:e0:9f:cb:af:39:31:c1:42:
3c:54:98:1c:05:b8:a7:30:1e:31:fe:70:8d:55:d4:
58:d6:4f:a9:63:03:a8:f3:f6:86:ef:98:43:09:eb:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8E:5E:EA:AD:06:08:31:22:34:22:6F:B4:4D:B5:A2:52:87:B9:72
X509v3 Authority Key Identifier:
keyid:21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e6:a9:cb:90:47:42:00:fa:94:14:94:46:54:fe:24:cb:99:
81:c9:a6:4f:68:5e:81:d2:a2:3f:f6:e1:1d:4e:0e:ee:1c:d9:
74:1b:0d:73:5b:82:80:bf:5b:88:1a:42:1c:57:c2:bf:76:0b:
14:17:7e:d4:08:d8:1e:47:a6:c3:f8:1d:04:e7:5d:fd:4d:80:
c8:de:02:2b:bd:de:07:21:64:0e:83:d3:f3:13:9c:92:b9:3b:
d4:c7:2b:67:91:1b:b4:0c:61:9e:ea:b2:b7:ed:2b:35:2e:66:
65:c4:83:57:7a:4e:67:95:f1:eb:d4:3e:5a:30:99:28:10:6a:
61:58:44:bf:ff:7c:70:c1:db:0d:ec:0b:02:0c:98:85:53:db:
3a:ab:52:7b:52:4a:30:fa:00:28:eb:59:24:99:d4:67:83:7b:
db:2c:62:79:a5:4e:70:fe:5b:5a:81:ac:f1:dc:d7:e2:5d:ba:
44:5b:6b:cd:64:b3:6e:97:5d:f8:ec:53:e4:43:de:35:13:1e:
06:91:ce:b7:f3:54:81:87:e6:46:7b:12:0c:92:41:c4:55:03:
1e:6a:69:9d:72:00:9e:36:d3:38:3d:4c:22:f7:83:4c:7d:89:
67:18:57:70:99:98:8a:ca:98:38:53:56:7e:ad:ca:bf:55:ae:
6e:f0:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:56:51 2025 by rpki-client