Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1438e5-ee61-4bd4-a130-ba1c69bad2af/1/Iae94RMKOGv_8uG4izouxEKjzYA.mft
File: Iae94RMKOGv_8uG4izouxEKjzYA.mft (raw, json)
Hash identifier: fMTXVOvu4KnBqZU4f2c1aVg+xW9qqTI3Ne57vlyocPs=
Subject key identifier: 1D:76:28:A7:B7:0E:C1:CC:07:38:A1:2E:66:34:6A:FC:2A:F2:80:9E
Authority key identifier: 21:A7:BD:E1:13:0A:38:6B:FF:F2:E1:B8:8B:3A:2E:C4:42:A3:CD:80
Certificate issuer: /CN=21a7bde1130a386bfff2e1b88b3a2ec442a3cd80
Certificate serial: 0193F1084AE92A844D5B62DC6EB547A0F837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iae94RMKOGv_8uG4izouxEKjzYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1438e5-ee61-4bd4-a130-ba1c69bad2af/1/Iae94RMKOGv_8uG4izouxEKjzYA.mft
Manifest number: 0401
Signing time: Mon 23 Dec 2024 01:01:12 +0000
Manifest this update: Mon 23 Dec 2024 01:01:12 +0000
Manifest next update: Tue 24 Dec 2024 01:01:12 +0000
Files and hashes: 1: Iae94RMKOGv_8uG4izouxEKjzYA.crl (hash: DmxM5714Z+9iq822R8otrswQblAXLBjMyardcpZK2z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:08:4a:e9:2a:84:4d:5b:62:dc:6e:b5:47:a0:f8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a7bde1130a386bfff2e1b88b3a2ec442a3cd80
Validity
Not Before: Dec 23 01:01:12 2024 GMT
Not After : Dec 24 01:01:12 2024 GMT
Subject: CN=1d7628a7b70ec1cc0738a12e66346afc2af2809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:59:7b:f0:4f:c9:5c:ab:b7:fe:2d:1c:0f:
bf:aa:6b:da:97:ad:57:55:d5:7f:9a:5d:cd:24:13:
34:34:96:37:dd:26:50:b4:be:3f:36:95:7c:25:1c:
df:27:97:a0:11:5f:dc:a2:fa:5a:a2:23:4a:6c:a3:
99:03:0a:7c:51:48:b3:d3:99:1c:7e:fd:f8:36:01:
98:6e:2a:ff:31:3e:b8:b1:68:5b:a9:2c:14:e0:82:
54:db:f2:50:95:37:3f:0b:90:11:c6:b8:6f:ec:d6:
c3:cd:38:41:92:c9:5f:da:af:35:b6:b4:4e:d7:25:
68:fc:54:2a:eb:06:5a:b0:00:86:d9:fc:5b:7e:65:
5d:cd:e0:37:43:2e:e0:08:f4:90:36:6f:a6:a4:4c:
4f:21:9c:9f:90:ca:21:95:b5:91:a2:f5:22:57:fc:
91:56:4d:cd:80:ef:75:22:d6:24:7e:c6:27:eb:0d:
97:e8:42:31:66:d5:e0:0e:ca:47:61:1e:a7:3e:51:
bd:48:2e:0f:97:b7:33:df:83:0c:3a:12:75:53:95:
b8:b1:cf:4d:ee:bc:bf:3a:82:47:79:9e:46:cd:9a:
54:91:6a:93:b8:99:8d:56:04:b3:52:c8:19:a7:e2:
88:0a:a2:d4:c4:23:9e:4d:c0:b5:26:15:47:be:55:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:76:28:A7:B7:0E:C1:CC:07:38:A1:2E:66:34:6A:FC:2A:F2:80:9E
X509v3 Authority Key Identifier:
keyid:21:A7:BD:E1:13:0A:38:6B:FF:F2:E1:B8:8B:3A:2E:C4:42:A3:CD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iae94RMKOGv_8uG4izouxEKjzYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1438e5-ee61-4bd4-a130-ba1c69bad2af/1/Iae94RMKOGv_8uG4izouxEKjzYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1438e5-ee61-4bd4-a130-ba1c69bad2af/1/Iae94RMKOGv_8uG4izouxEKjzYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9e:0c:92:5c:cb:04:e7:d9:90:b0:a0:f0:ed:3f:4d:d9:56:
39:61:73:63:42:82:c2:18:fe:2b:83:d7:35:f0:84:cc:e7:c8:
65:08:e9:45:82:c8:dc:4e:36:97:31:e7:39:aa:b3:3f:31:e8:
39:85:c0:db:c3:ac:69:ba:10:57:58:6a:28:8c:75:1b:ce:98:
b6:1c:a5:27:b0:78:ad:1c:64:85:42:08:b8:6b:71:fa:fc:ed:
17:df:aa:eb:64:6d:e1:12:13:f8:2c:37:1f:33:95:49:aa:a7:
9b:61:a6:ba:83:b8:c0:02:89:3d:fc:72:83:31:09:55:2a:b4:
7c:1f:15:88:3c:e1:9d:7c:c5:6b:bd:fc:83:58:f9:ef:11:7b:
1d:9b:27:21:d2:2d:94:95:66:46:e3:a6:6f:66:c5:9f:9b:c2:
3f:47:96:d7:f8:c8:51:7c:1d:2b:70:94:03:5d:dc:ea:70:4b:
33:f3:d4:4c:8f:5e:03:37:ca:0e:0b:c5:e2:cc:c6:a3:67:4f:
9a:8c:10:01:48:42:0f:8f:95:80:7f:1a:22:e8:ba:17:9f:3f:
88:c1:fe:1a:93:02:b5:41:13:97:c5:36:68:73:ba:93:30:ff:
d3:6e:cb:30:c0:4b:16:8d:91:c5:0e:58:14:1a:7b:fa:38:85:
c9:77:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:35 2025 by rpki-client