Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/899d7f-a151-4c0c-9541-68abaf6a37c9/1/8lAJfwKglPqph7blLR74YDmov9g.mft
File: 8lAJfwKglPqph7blLR74YDmov9g.mft (raw, json)
Hash identifier: bkcUoaqsoUQDQSDVileNy5xw7ArtzGVjUmzhWHL49ls=
Subject key identifier: 3E:A0:13:BB:B1:D3:CF:32:0F:01:7B:8E:EB:F0:40:CC:3A:CF:4E:A7
Authority key identifier: F2:50:09:7F:02:A0:94:FA:A9:87:B6:E5:2D:1E:F8:60:39:A8:BF:D8
Certificate issuer: /CN=f250097f02a094faa987b6e52d1ef86039a8bfd8
Certificate serial: 013C67B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lAJfwKglPqph7blLR74YDmov9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/899d7f-a151-4c0c-9541-68abaf6a37c9/1/8lAJfwKglPqph7blLR74YDmov9g.mft
Manifest number: 01A0
Signing time: Thu 24 Mar 2022 04:43:22 +0000
Manifest this update: Thu 24 Mar 2022 04:43:22 +0000
Manifest next update: Fri 25 Mar 2022 04:43:22 +0000
Files and hashes: 1: 8lAJfwKglPqph7blLR74YDmov9g.crl (hash: IyMstA59Yh7PNr9Ct14I6OfTvVtHfIbmJ29yjDPs7fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20735920 (0x13c67b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f250097f02a094faa987b6e52d1ef86039a8bfd8
Validity
Not Before: Mar 24 04:43:22 2022 GMT
Not After : Mar 25 04:43:22 2022 GMT
Subject: CN=3ea013bbb1d3cf320f017b8eebf040cc3acf4ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:72:e2:50:bb:d3:a3:2f:a9:4d:2f:e2:cf:
a4:ee:ac:3d:59:ac:11:89:d7:8e:ee:23:83:3b:61:
1c:b8:ca:7c:e3:81:c7:67:6a:88:29:a3:a8:9a:6f:
12:0c:94:b4:08:b4:57:ca:f6:b9:8c:58:e0:67:45:
17:54:b3:be:ad:ae:2e:67:c2:d1:7b:0c:f4:17:52:
a0:ac:56:25:b3:36:33:81:9f:03:db:10:a7:06:74:
ef:ad:9d:aa:cd:1d:e1:ce:95:d3:a8:1f:a9:da:e3:
ba:e2:b9:35:f5:4e:c8:f6:17:77:0f:03:2d:2e:45:
94:87:65:b8:a9:24:9e:b2:9d:91:50:9c:32:f5:05:
af:94:d8:ae:6c:9a:9a:4a:ed:9d:da:99:a1:e5:5a:
b9:d4:5f:25:8c:98:92:48:83:56:1f:f1:14:fb:d8:
6f:fd:ae:0e:76:74:d5:99:06:7f:a6:31:50:0c:c1:
93:23:b3:8d:ca:81:23:d5:c1:b8:39:0e:e8:07:38:
05:ea:20:6f:3c:36:6c:a2:94:20:db:2d:b7:ee:4e:
2e:25:59:56:44:7e:fe:01:8a:a8:89:1f:7d:60:9c:
a1:ba:5e:b3:44:94:c5:d0:9c:be:d7:6f:15:e1:58:
ea:64:2e:95:87:6b:25:09:39:1f:79:b9:a0:7f:ba:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:13:BB:B1:D3:CF:32:0F:01:7B:8E:EB:F0:40:CC:3A:CF:4E:A7
X509v3 Authority Key Identifier:
keyid:F2:50:09:7F:02:A0:94:FA:A9:87:B6:E5:2D:1E:F8:60:39:A8:BF:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lAJfwKglPqph7blLR74YDmov9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/899d7f-a151-4c0c-9541-68abaf6a37c9/1/8lAJfwKglPqph7blLR74YDmov9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/899d7f-a151-4c0c-9541-68abaf6a37c9/1/8lAJfwKglPqph7blLR74YDmov9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:97:71:82:08:5b:73:9b:18:5a:af:83:7d:52:63:45:6b:
c3:00:15:d5:84:e0:09:bb:4a:d5:05:3e:1e:9b:72:4f:13:13:
ea:95:b9:46:1c:d3:47:16:ca:ea:a9:43:36:b6:72:fc:ec:6e:
7d:1d:de:f8:04:e2:c3:21:f2:0f:bb:dd:48:5c:64:3c:e3:3b:
20:8d:f9:13:8c:8d:44:ef:c8:fc:04:9c:5e:16:43:a7:24:c9:
21:0e:b6:0f:9a:47:6f:7f:d8:95:df:55:95:3e:2b:72:54:44:
a5:e0:63:d1:ea:d2:9a:28:12:76:5c:dd:1a:d9:c4:46:ca:91:
f4:39:00:53:94:22:f3:3a:a3:75:c9:ce:86:42:47:b3:23:e2:
e9:08:e4:23:d8:72:c2:7a:4e:f7:42:1b:4b:f4:84:ea:b6:0b:
7b:a0:1a:92:a0:73:4a:5a:2b:e9:16:d1:fb:38:0d:47:9d:a1:
3c:ef:3e:9f:ec:04:d3:4f:5b:62:59:3f:84:68:ca:59:81:73:
92:2b:d4:e2:8d:c8:fa:82:f8:0a:72:de:d4:5c:69:4a:4e:e1:
46:17:a6:63:61:64:d4:50:ca:29:db:28:81:43:1d:3d:31:96:
03:57:16:63:6e:33:dd:7e:10:81:70:2e:b6:64:73:9c:ee:10:
2e:bc:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:00 2025 by rpki-client