Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
File: itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft (raw, json)
Hash identifier: mk2jKS0NBtMpQQfvODACtvMxBwReatuO3X9gaJj7vvI=
Subject key identifier: 5B:A3:FD:C6:9B:77:B8:34:DC:D4:F7:D9:E8:4E:24:8C:7E:E0:76:F1
Authority key identifier: 8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94
Certificate issuer: /CN=8ad7629c11b68020d73d9b65c54e5043c3414194
Certificate serial: 01939A203061881480D27C21179EB9530B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
Manifest number: 101C
Signing time: Fri 06 Dec 2024 04:00:21 +0000
Manifest this update: Fri 06 Dec 2024 04:00:21 +0000
Manifest next update: Sat 07 Dec 2024 04:00:21 +0000
Files and hashes: 1: itdinBG2gCDXPZtlxU5QQ8NBQZQ.crl (hash: 91zmMO2V6zk3C5dPM3aaf4Y+ZvTrGvGO2RAEHF0xrEk=)
2: oQkgBCVI3nvmcx_z_p5c9q49d8o.roa (hash: sAYDpXQFXIz/8pVpumXAQRNgVPgEz3yhzv0UPHtjZUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9a:20:30:61:88:14:80:d2:7c:21:17:9e:b9:53:0b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad7629c11b68020d73d9b65c54e5043c3414194
Validity
Not Before: Dec 6 04:00:21 2024 GMT
Not After : Dec 7 04:00:21 2024 GMT
Subject: CN=5ba3fdc69b77b834dcd4f7d9e84e248c7ee076f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:1c:88:2a:83:17:10:32:6e:0a:15:c2:22:
e0:f3:ce:d3:1c:55:33:e1:c0:08:d1:23:d9:46:27:
d2:d1:9f:fe:a4:35:50:25:9f:7a:5f:3f:7a:40:2e:
69:49:1d:94:81:39:3f:7b:b9:86:4c:cf:54:db:94:
cc:db:10:e2:b5:28:4b:28:79:8a:1b:3d:fc:51:a0:
f2:f7:28:00:92:1c:3a:ba:63:c6:e3:61:23:7b:47:
04:1c:61:da:23:4b:80:4f:73:b0:a3:40:bf:f2:5b:
cc:68:0c:85:22:83:fe:18:6c:23:a0:24:84:75:81:
8f:d6:e6:d0:99:ed:b0:c0:bd:b7:b8:43:24:90:93:
f1:89:5f:1e:59:42:c2:6a:3d:86:e1:d3:1d:b9:4e:
a7:a9:00:22:e1:2f:64:a9:1e:b7:0e:eb:a9:07:4b:
54:a5:8e:13:56:29:8c:5c:4d:1b:4a:af:aa:16:f5:
6d:3c:00:db:f6:df:7e:33:bc:07:d1:ad:74:00:2c:
35:0b:5e:30:2c:a5:ed:35:82:78:30:54:31:0b:83:
e5:06:78:78:41:b0:e0:3a:8e:19:2e:cb:0d:86:ca:
19:4b:eb:d8:9f:95:04:11:5d:32:8d:0a:11:bb:c5:
31:4c:b0:e3:9b:e4:dd:43:5a:44:7e:8f:68:74:67:
2d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A3:FD:C6:9B:77:B8:34:DC:D4:F7:D9:E8:4E:24:8C:7E:E0:76:F1
X509v3 Authority Key Identifier:
keyid:8A:D7:62:9C:11:B6:80:20:D7:3D:9B:65:C5:4E:50:43:C3:41:41:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itdinBG2gCDXPZtlxU5QQ8NBQZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ee97b4-feca-4d3d-82d3-1538e2a3ad22/1/itdinBG2gCDXPZtlxU5QQ8NBQZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:02:dc:24:ef:42:af:d7:14:d4:76:94:09:98:03:57:a3:d8:
09:42:06:75:61:c7:f7:34:04:64:09:42:63:23:4c:84:76:cd:
ff:cd:7a:58:bc:d9:62:43:69:bb:73:01:fa:86:f4:31:6d:2a:
b0:df:dd:0c:37:31:10:28:b2:18:4c:9d:3d:5d:27:71:92:7e:
71:9a:da:15:3c:f9:c2:0a:e3:e5:a6:3c:b9:70:ba:e2:c6:08:
c1:74:7a:2e:f6:f9:14:31:c5:2b:ab:8a:23:89:ab:ea:45:89:
d7:b1:bb:89:7f:fe:3c:8d:c8:54:b1:4d:33:17:67:2b:52:0d:
06:69:e6:64:be:d3:23:68:51:0b:2f:ca:ad:4b:e4:f8:83:f0:
cb:75:41:68:2a:cc:a7:a1:0f:6a:e2:c3:19:a4:fd:64:f8:f7:
ab:a4:ea:22:db:2d:2b:7b:6e:ff:1b:68:ad:54:61:2e:5b:55:
6c:0c:00:9b:43:47:d5:32:f1:93:41:ef:c4:c4:6c:f1:4d:5a:
d8:e4:25:90:e7:07:a6:91:d7:42:4c:2c:4b:a8:14:7d:4b:fd:
44:2b:f0:03:11:d9:ca:3c:14:5b:c6:1b:a1:ad:05:63:de:9e:
a1:14:4a:e7:d9:99:06:25:d0:a1:d3:84:15:79:e0:b8:91:d6:
5b:99:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:48 2025 by rpki-client