Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
File: IeeliPB1m6j2WLPz1o5VvP6cW74.mft (raw, json)
Hash identifier: n0f+9wwMvFueNNUIAvDe0V3oK51ZNxUjJHd1EN3yR00=
Subject key identifier: 3C:87:42:7C:07:78:08:86:E7:FC:0E:F3:60:5C:EF:EA:40:5A:88:88
Authority key identifier: 21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE
Certificate issuer: /CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
Certificate serial: 01936220BD2BD3424B8D8BD07545D80D5DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
Manifest number: 134C
Signing time: Mon 25 Nov 2024 07:02:12 +0000
Manifest this update: Mon 25 Nov 2024 07:02:12 +0000
Manifest next update: Tue 26 Nov 2024 07:02:12 +0000
Files and hashes: 1: IeeliPB1m6j2WLPz1o5VvP6cW74.crl (hash: koPdkdPvmCjAGDf8X7oMBsmat1+YbtH0Fw99dBYv/bY=)
2: iWtSv40w_08b2FJsgbh6iQGqAyY.roa (hash: pCvIXTliTljxFktkIXBCxZkuQXViaRS8Xh63iuSpHwM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:20:bd:2b:d3:42:4b:8d:8b:d0:75:45:d8:0d:5d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e7a588f0759ba8f658b3f3d68e55bcfe9c5bbe
Validity
Not Before: Nov 25 07:02:12 2024 GMT
Not After : Nov 26 07:02:12 2024 GMT
Subject: CN=3c87427c07780886e7fc0ef3605cefea405a8888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:32:6b:56:33:f2:da:78:3e:5e:c5:db:9a:23:
08:26:01:be:02:d3:bf:05:1f:6f:90:09:68:a4:c9:
b9:a7:05:56:b3:6b:8d:ca:2b:ff:9f:c0:f9:e2:d6:
72:b0:c3:8d:93:5f:85:88:2d:65:f3:b1:09:d0:f1:
53:8f:13:0f:e0:48:dc:78:1c:f3:52:bb:02:53:d0:
aa:fd:5a:cc:67:57:bf:1e:59:55:5e:3f:88:05:8a:
c1:36:9e:22:0c:5a:4f:b0:38:f7:a0:23:f3:43:3e:
5f:1f:0f:91:d8:1e:ca:1c:47:f9:ca:61:f0:da:ac:
a4:17:85:31:33:16:b5:6c:f9:f4:f1:78:ae:e3:ae:
6a:af:9e:a5:02:17:f1:ef:65:2e:4a:4a:e0:64:63:
5e:17:03:d7:00:2d:94:d8:2a:e4:e0:30:1e:8a:b3:
7a:b9:bc:0d:7f:a3:1d:56:22:c1:70:29:0a:d8:c4:
17:df:40:d2:7e:13:f8:a5:03:d8:6d:20:0e:2f:4e:
e3:af:88:f0:73:e8:0e:28:a3:03:e1:75:2f:36:05:
59:ae:89:97:1c:88:e5:72:47:45:76:d8:d1:60:8c:
e6:9c:f2:5d:75:6a:b1:da:25:af:03:8f:90:76:d5:
2e:e0:ea:3e:4b:bf:f1:fe:1a:cf:c0:06:9b:c9:28:
97:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:87:42:7C:07:78:08:86:E7:FC:0E:F3:60:5C:EF:EA:40:5A:88:88
X509v3 Authority Key Identifier:
keyid:21:E7:A5:88:F0:75:9B:A8:F6:58:B3:F3:D6:8E:55:BC:FE:9C:5B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeeliPB1m6j2WLPz1o5VvP6cW74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/521235-ff7e-4bc7-a29e-38d73a23e7ac/1/IeeliPB1m6j2WLPz1o5VvP6cW74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:40:b4:2a:e8:65:4b:8c:d8:9d:55:c8:2d:26:ae:e3:f1:8f:
4d:77:fd:f6:d3:6a:25:0c:0a:2b:8c:8f:f8:9a:20:43:e8:7c:
69:a7:a6:c5:9c:29:d8:c1:ec:c9:f5:a1:37:64:f4:06:22:7a:
75:59:0f:6a:3b:02:65:41:95:b9:eb:22:06:a1:2d:60:71:8f:
1e:db:66:bb:af:d6:c0:e0:05:12:02:9b:68:88:4b:63:b2:04:
a5:40:0c:6c:93:16:3c:a8:a4:aa:69:7d:6d:57:6a:c7:e2:c3:
c9:34:ae:c0:22:bb:b8:a9:aa:b2:9e:ed:db:6d:2c:76:38:62:
1c:c2:47:a1:d6:1f:b4:c9:85:4a:19:fa:95:7c:95:83:20:fb:
c7:a1:62:23:9a:0a:27:88:8a:6b:7f:fd:7f:2e:05:a0:16:86:
5b:4e:66:3e:c2:b0:7e:37:45:99:85:9f:e2:4e:d9:9d:07:a8:
50:bb:bd:93:43:0a:ac:6f:de:e8:ed:12:40:c7:02:df:08:67:
79:f3:27:d6:09:88:97:4b:af:13:75:80:4f:c6:ff:76:c7:2f:
f1:63:24:2c:38:99:e0:cf:f9:17:ca:03:ff:c9:34:ff:36:e7:
46:09:63:95:9d:2b:cc:ff:ba:0c:c1:3c:be:a4:63:e9:b8:01:
43:a1:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:33 2025 by rpki-client