Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
File: IBesiOMgcueKq9vmrSWiYLHZOU0.mft (raw, json)
Hash identifier: OoixLvsFqvY80Dh5KvG5buSU0y/yTdHk8A8Uib5a32s=
Subject key identifier: C3:A1:EB:89:EA:65:73:A9:A6:17:6A:CE:49:15:1D:0A:D4:DB:CD:7D
Authority key identifier: 20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
Certificate issuer: /CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
Certificate serial: 0193D85AA2BCD29CD0A53B46CFDB72686BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
Manifest number: 052A
Signing time: Wed 18 Dec 2024 06:00:38 +0000
Manifest this update: Wed 18 Dec 2024 06:00:38 +0000
Manifest next update: Thu 19 Dec 2024 06:00:38 +0000
Files and hashes: 1: IBesiOMgcueKq9vmrSWiYLHZOU0.crl (hash: oNpGNMMcXDrKPsB3EoGe3UoiPpIsCZN23Wv1Z2xKaBQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d8:5a:a2:bc:d2:9c:d0:a5:3b:46:cf:db:72:68:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2017ac88e32072e78aabdbe6ad25a260b1d9394d
Validity
Not Before: Dec 18 06:00:38 2024 GMT
Not After : Dec 19 06:00:38 2024 GMT
Subject: CN=c3a1eb89ea6573a9a6176ace49151d0ad4dbcd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:fb:d8:24:26:42:a7:18:2c:42:bd:81:58:
bb:7c:a7:19:b9:95:e0:0a:b8:7e:13:72:fe:bc:b6:
79:ab:8a:67:e9:85:7f:11:0f:7a:f9:69:e4:42:04:
f8:96:c5:e9:19:de:d5:f5:e8:78:25:4f:a8:e7:ec:
ec:3a:66:7a:9f:45:5b:d8:54:fe:89:7c:6c:04:34:
92:ec:6f:5a:a0:da:a9:18:53:8a:65:db:b2:79:30:
68:8c:68:f9:ed:d1:23:0f:0c:5d:b9:90:63:0b:0c:
1a:36:df:b4:1b:d1:c1:42:49:50:16:1c:64:75:2f:
9b:f6:75:9e:43:40:6e:39:0b:8a:f6:3c:f1:16:e8:
5d:bc:3d:ec:b9:e3:95:13:b3:55:4f:68:b3:ff:7e:
c4:a4:44:85:3a:34:e3:08:2f:76:e3:d7:36:9c:15:
d1:7b:91:95:f6:88:ec:88:29:9c:80:74:5a:43:29:
8b:24:a9:95:0f:93:fa:2b:c0:00:11:df:61:05:90:
53:ed:92:f3:65:81:f7:74:3c:ee:f5:03:3c:f7:53:
1b:80:2b:5b:dc:15:d0:db:e0:30:11:f3:b6:18:98:
42:dd:f1:de:17:c6:f4:c4:0d:92:ad:9a:14:bb:e3:
47:a4:76:37:b9:2b:70:e6:38:2f:69:b0:41:4e:44:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:EB:89:EA:65:73:A9:A6:17:6A:CE:49:15:1D:0A:D4:DB:CD:7D
X509v3 Authority Key Identifier:
keyid:20:17:AC:88:E3:20:72:E7:8A:AB:DB:E6:AD:25:A2:60:B1:D9:39:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBesiOMgcueKq9vmrSWiYLHZOU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/158ab0-1897-4d22-8ac3-41b50b1d7344/1/IBesiOMgcueKq9vmrSWiYLHZOU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:a5:66:17:b5:ca:e0:02:4e:5b:eb:24:bc:6a:27:2c:90:
ac:4a:6d:8a:77:a1:5a:57:77:f3:0b:8c:6a:d2:e5:5d:ea:94:
4b:44:0e:8e:00:68:04:e4:29:ad:03:48:f7:d7:12:f0:59:fa:
b3:59:7e:e8:1c:00:27:bc:2f:09:3a:ef:03:b4:f6:20:a6:45:
26:be:76:27:51:4f:e1:f1:9e:50:a4:1c:aa:99:13:c8:b7:a4:
42:13:3a:ef:3e:17:64:d3:4a:c4:b7:9a:fc:fc:2f:bc:95:24:
80:2c:0d:64:67:62:81:62:11:3f:6d:b9:34:00:f2:19:0f:b0:
d8:e4:d3:81:b5:5a:8e:f9:c8:71:60:24:89:92:2d:d3:52:04:
33:b2:8e:4a:26:01:58:44:9c:63:34:a6:40:8e:f5:3f:9f:5d:
f9:3d:0a:61:c3:75:c6:f8:3d:21:b0:20:75:16:5a:23:dc:7f:
cf:33:20:79:88:b1:6c:c6:0b:b7:85:bd:3f:a5:de:9b:c3:4d:
88:07:74:ab:c6:2f:df:97:e8:14:12:d8:02:28:fe:a4:29:4f:
38:ea:06:40:8f:6e:ab:4d:cf:24:0d:43:ba:50:0a:29:8d:67:
e6:41:e9:52:90:02:1c:13:72:32:58:9e:49:8d:88:5a:bc:a1:
b9:a6:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:06 2025 by rpki-client