Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft
File: iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft (raw, json)
Hash identifier: aXa/E0UyaAvLePACNgFaLWYwWfi12deIX9cpDL7mrPQ=
Subject key identifier: F7:8D:97:D5:47:E0:10:C1:42:71:5C:74:F3:11:19:3A:A3:FD:83:A4
Authority key identifier: 88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44
Certificate issuer: /CN=88e8e1cafa7b604859840c57af48e817c327f644
Certificate serial: 018CD2A6D6CD7D2EF06B60B9B6EEBAB6ACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft
Manifest number: 0966
Signing time: Thu 04 Jan 2024 04:06:38 +0000
Manifest this update: Thu 04 Jan 2024 04:06:38 +0000
Manifest next update: Fri 05 Jan 2024 04:06:38 +0000
Files and hashes: 1: iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl (hash: AtcIfEK5/n1YP2sYwZM6ItEACaD7OmS+eEYz52cXGXg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d2:a6:d6:cd:7d:2e:f0:6b:60:b9:b6:ee:ba:b6:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e8e1cafa7b604859840c57af48e817c327f644
Validity
Not Before: Jan 4 04:06:38 2024 GMT
Not After : Jan 5 04:06:38 2024 GMT
Subject: CN=f78d97d547e010c142715c74f311193aa3fd83a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e9:10:25:dd:86:fe:f1:de:e7:89:dc:ea:71:
7b:40:9e:30:50:62:0b:f0:53:8a:5e:6a:66:62:a6:
4b:1b:13:40:35:51:d4:e5:d6:be:d1:e7:a4:c9:9e:
49:d7:06:c6:96:15:06:f0:eb:b8:ef:7f:64:52:00:
18:1a:c1:d1:a2:f4:6e:b4:a4:f8:91:47:53:07:e9:
c1:7e:6e:89:9a:fe:1d:c2:98:69:5c:f3:f6:c4:e2:
cf:29:b3:49:2a:b6:f3:80:7f:5b:b9:6d:72:d4:e7:
86:65:7a:d3:54:60:87:ec:45:5e:71:66:2c:5f:55:
55:c7:51:fd:ff:2b:c8:6b:04:50:31:74:33:b4:d7:
34:16:1e:a3:12:58:0d:d3:46:3a:7e:28:b5:89:f5:
55:11:2f:8c:00:91:91:5b:29:91:a8:f7:1c:78:21:
3a:ea:b7:19:0e:26:0b:70:c6:3e:27:4e:85:fa:11:
47:92:3c:ed:53:1b:b2:fb:57:a9:94:a5:6c:8a:70:
b5:d5:fa:3a:1e:86:90:fe:6d:b4:c3:26:5b:c6:0e:
a1:0a:8d:b8:d4:0f:05:c5:41:cc:79:53:1c:e1:6b:
d9:4f:e9:03:10:74:d7:ec:8a:14:65:99:97:03:5b:
ed:5a:cc:db:ff:c6:5e:6b:a8:30:fa:02:43:ab:04:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:97:D5:47:E0:10:C1:42:71:5C:74:F3:11:19:3A:A3:FD:83:A4
X509v3 Authority Key Identifier:
keyid:88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:3a:25:1e:36:89:aa:cc:ca:d1:75:db:0f:32:9d:f4:23:
f6:bf:95:3a:f8:e8:06:a9:89:96:bd:ea:b3:96:79:4e:96:71:
67:a6:bf:8b:93:03:e5:a5:90:dd:ab:d6:30:27:00:f8:97:83:
68:cd:0c:c0:79:7b:0e:94:e4:34:00:b9:6d:6c:d9:80:0f:88:
28:cb:bc:90:44:8c:8e:04:49:47:d3:05:a6:c1:63:57:0e:00:
5a:ed:85:f4:5a:e1:d8:49:1e:25:98:a0:27:a4:75:27:e9:bd:
4f:9c:6a:97:38:2f:64:eb:42:3e:dd:d5:64:0a:a2:d2:a9:0c:
77:54:c9:56:8a:11:1f:dc:09:cb:4e:3b:75:11:bf:e3:b6:bc:
03:3f:38:df:37:21:0a:36:46:4c:eb:44:43:49:cb:96:d1:7a:
e1:53:88:6f:0f:7b:48:a1:28:52:2c:f5:61:67:0c:a4:60:79:
77:22:b2:56:c8:17:45:3b:f7:5e:b7:88:43:81:67:6f:eb:a6:
94:3b:5e:8e:6f:2e:b2:47:bc:ea:6f:28:ce:0b:aa:37:85:3b:
f3:4c:78:89:01:2c:49:24:54:53:fa:04:57:d1:14:1c:db:b6:
77:fc:bf:7c:26:48:1c:c7:45:56:6b:90:f9:6e:b8:9e:9d:42:
c6:b4:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:39 2025 by rpki-client