Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.mft
File: iRLkGCJdqV1qITAkB5I_-UVJVys.mft (raw, json)
Hash identifier: fmpCdFsQInpo/P2EkZdIAG3C8V/EyGi3V42oI7OPtLQ=
Subject key identifier: B9:6B:AE:FE:36:7D:8A:54:B5:F4:D1:B1:BE:1A:0A:95:6A:FA:78:2F
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 01852D4253D6855B25290C1F5D51604AA4E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.mft
Manifest number: 0C11
Signing time: Tue 20 Dec 2022 01:59:59 +0000
Manifest this update: Tue 20 Dec 2022 01:59:59 +0000
Manifest next update: Wed 21 Dec 2022 01:59:59 +0000
Files and hashes: 1: iRLkGCJdqV1qITAkB5I_-UVJVys.crl (hash: V8hSoRiFSaxrvsvCsnYjzddCZijQiVdQ/FRVO+LS0c8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2d:42:53:d6:85:5b:25:29:0c:1f:5d:51:60:4a:a4:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Dec 20 01:59:59 2022 GMT
Not After : Dec 21 01:59:59 2022 GMT
Subject: CN=b96baefe367d8a54b5f4d1b1be1a0a956afa782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:1b:e5:46:15:8c:26:f3:73:0a:6a:c9:ed:
36:25:1a:15:e6:c5:93:02:14:13:d5:bf:71:1d:ae:
85:81:37:1d:5a:c9:65:06:03:3c:80:d3:6a:31:cc:
2d:e3:77:57:4f:b1:5b:30:00:2a:84:e8:f1:72:3a:
f8:29:58:13:df:ed:a6:f4:5e:4d:65:4d:13:13:f5:
26:d3:8f:32:e6:ce:98:89:eb:d4:da:70:53:7e:84:
88:3e:96:9c:1c:90:e6:6d:98:db:af:86:cf:39:75:
47:b6:54:2d:60:81:7d:f3:6b:0d:83:7d:4a:b2:66:
77:36:6c:ab:64:0f:a6:c4:b3:99:f4:74:62:3d:fd:
b7:c2:1a:28:9c:da:7a:f0:b9:ed:00:43:36:0a:1e:
87:4e:f9:da:31:42:2d:d2:15:a2:b3:15:90:ef:42:
64:1c:33:d7:ca:01:15:d9:b3:93:3e:9d:a2:cb:99:
cf:cb:ab:c2:88:a9:f0:6e:77:1d:ce:d5:46:46:ad:
ab:ab:95:5d:ed:5b:94:0f:66:a1:73:92:c8:dc:b0:
f2:97:37:76:d2:24:b3:fb:bb:41:9f:32:97:97:78:
90:4e:10:37:26:4b:27:78:bc:62:58:ba:8b:bb:dd:
52:ef:03:95:ae:cc:5d:1a:c7:fa:5c:a3:4d:36:82:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6B:AE:FE:36:7D:8A:54:B5:F4:D1:B1:BE:1A:0A:95:6A:FA:78:2F
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:63:26:92:b5:33:e5:88:32:89:71:2f:58:8b:ba:58:0a:ec:
e8:53:68:8f:45:03:f3:c1:bd:d6:c0:30:13:a3:83:fe:2a:0e:
50:b5:2d:4a:ec:e6:01:5a:5f:e8:00:77:6d:aa:42:1a:c8:4b:
b1:aa:14:57:67:df:8c:6e:56:31:24:73:e3:88:13:6d:b0:31:
65:ec:a7:93:37:6f:82:71:85:5e:c6:4a:66:8f:3e:7f:5d:ac:
67:34:d0:bf:c5:a5:f2:a7:d4:a9:e7:26:c5:2e:1e:5c:39:64:
70:76:ee:1d:07:9e:a5:02:e9:ba:ad:b6:c1:d8:26:72:d0:5b:
83:a3:a4:fb:59:22:20:74:d9:80:5d:1e:31:ae:f4:3b:4e:37:
d6:30:01:2a:e0:03:a5:d5:41:c4:21:eb:95:c2:11:88:bb:59:
56:71:87:34:6b:7f:bf:5a:de:16:15:51:3d:0a:ca:b5:e6:01:
22:a0:65:46:50:44:18:c8:02:4e:0d:c8:49:1c:2e:37:f2:53:
ee:55:7c:7b:2b:84:c0:d8:99:b3:d0:fe:dc:45:9d:9a:bd:3b:
9b:16:2d:19:95:d1:4f:f4:1f:8c:7c:5f:58:fe:43:5d:6e:e7:
c1:53:c2:b6:8e:93:20:58:c5:4f:8a:d2:97:0f:c9:2c:08:0a:
2b:73:a9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:48 2025 by rpki-client