Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.mft
File: IyXnYY75Y3lc0_-7R6Ea3mQBOQU.mft (raw, json)
Hash identifier: 8auA9C9cFFBnCkeF1TGXpZhVPFk/jFFKFzk+YELjLEE=
Subject key identifier: DD:FF:23:D1:F3:89:60:7D:F8:C1:41:8A:7F:A1:87:93:AA:80:F3:AE
Authority key identifier: 23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05
Certificate issuer: /CN=2325e7618ef963795cd3ffbb47a11ade64013905
Certificate serial: 018C58F7331CD7E20BC17BBFF5A2850F29B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.mft
Manifest number: 093B
Signing time: Mon 11 Dec 2023 13:00:44 +0000
Manifest this update: Mon 11 Dec 2023 13:00:44 +0000
Manifest next update: Tue 12 Dec 2023 13:00:44 +0000
Files and hashes: 1: IyXnYY75Y3lc0_-7R6Ea3mQBOQU.crl (hash: 7yvlV716bOc97+ybri61RGwutv/TdT2G9L1StCwk9j0=)
2: P45vv-An9E8ay0PC_1SpH0mfjaI.roa (hash: KLvtXIpKQT2HhqVW0hiUzbH0J31v6Y+k3ZFs1WeqwgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:f7:33:1c:d7:e2:0b:c1:7b:bf:f5:a2:85:0f:29:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2325e7618ef963795cd3ffbb47a11ade64013905
Validity
Not Before: Dec 11 13:00:44 2023 GMT
Not After : Dec 12 13:00:44 2023 GMT
Subject: CN=ddff23d1f389607df8c1418a7fa18793aa80f3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:c3:2a:9d:95:99:53:a3:78:c3:8f:36:84:14:
b0:2a:8f:6f:fc:b4:1a:10:73:c1:9e:cf:7e:13:57:
ca:79:20:eb:09:5b:f9:75:ef:4f:b5:b2:09:d4:ed:
34:f6:76:ad:1f:ba:8c:33:f2:94:7b:8a:fb:98:5a:
4b:6e:20:fe:f6:fb:a2:d1:48:a3:02:22:95:a9:4b:
69:6a:3e:a6:b0:50:10:67:2d:0e:31:c6:05:b3:d9:
17:57:bf:56:1e:e6:d7:82:2d:8d:14:ee:8a:54:5f:
6b:b8:9a:17:2e:a5:22:3f:8d:0f:5f:7e:63:c7:04:
cd:56:56:54:9a:32:41:de:7a:37:46:cc:32:c2:fa:
4c:eb:21:81:54:7f:9b:e4:17:52:bd:34:04:76:96:
61:1f:6a:c7:6b:8c:ed:08:1f:0f:7e:90:47:a4:ae:
da:2c:fe:13:1f:20:a4:ff:1b:b5:81:a4:10:e6:89:
78:1c:78:5d:42:e8:60:e2:9a:bf:f7:b3:2a:db:03:
96:05:6a:09:36:15:9c:7a:c8:2d:f5:b5:72:b5:f2:
bb:87:91:26:d2:03:99:53:55:cd:da:97:4c:5b:50:
38:91:e5:34:21:d5:47:30:3b:3b:b2:d8:90:fb:8d:
31:08:68:42:04:07:fe:f9:0d:1f:e5:8c:47:a4:46:
e1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:23:D1:F3:89:60:7D:F8:C1:41:8A:7F:A1:87:93:AA:80:F3:AE
X509v3 Authority Key Identifier:
keyid:23:25:E7:61:8E:F9:63:79:5C:D3:FF:BB:47:A1:1A:DE:64:01:39:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79a8d1-7b75-4a0b-8fd9-366427a07bea/1/IyXnYY75Y3lc0_-7R6Ea3mQBOQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dc:02:51:10:8b:fa:a4:fe:e0:02:7f:78:86:2d:b0:cb:a4:
4b:1d:a7:ba:09:9c:2e:a7:88:7c:7a:97:51:95:a6:6c:1a:d9:
f7:1b:18:30:2f:fe:d9:ed:e7:c0:eb:4f:4b:83:9d:c9:86:1f:
bb:8c:ca:ee:1e:d9:23:3f:0f:67:03:54:ab:f3:30:01:8f:da:
d8:c0:78:6e:28:7f:50:3d:7f:7c:17:a8:c1:ba:e2:59:f0:3c:
30:ac:9e:24:5d:f9:8d:59:1b:6f:ef:11:84:4b:74:c3:85:45:
81:25:df:2c:2d:f9:23:60:33:62:df:00:44:a4:ab:a9:12:ec:
70:6f:56:26:2b:a3:55:03:b8:15:54:ae:f9:64:db:55:f6:c7:
14:5e:fb:6f:4d:78:ba:27:1e:43:f3:42:20:14:59:15:e8:a2:
cb:5a:de:b0:33:4d:33:98:76:78:70:aa:ba:c9:3f:51:7f:92:
9e:bb:3f:5f:81:3b:7e:87:6d:3e:8e:ca:bb:6f:2f:da:0d:26:
f1:b5:eb:5f:0d:4d:31:d0:d8:06:85:8d:d0:3d:f2:ec:08:68:
e6:3f:d5:5e:f0:70:ff:a9:f8:4f:bb:2e:af:f4:4f:07:ed:75:
b5:ce:21:f3:f1:54:07:eb:da:c5:87:e7:f1:74:73:24:64:7c:
b8:b2:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:12 2025 by rpki-client