Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
File: ixKTXKQem95_LaybfEaTYxPVUUQ.mft (raw, json)
Hash identifier: mziWvtwnTcAmfGet18TzJvGzr+QMMVfmVUJXOZyGCIM=
Subject key identifier: 78:29:CB:1B:17:19:CB:F5:63:C1:AB:44:66:65:A9:69:D6:A3:6D:24
Authority key identifier: 8B:12:93:5C:A4:1E:9B:DE:7F:2D:AC:9B:7C:46:93:63:13:D5:51:44
Certificate issuer: /CN=8b12935ca41e9bde7f2dac9b7c46936313d55144
Certificate serial: 0193971F9A45C27E657B325ECF04A3C0A22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixKTXKQem95_LaybfEaTYxPVUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
Manifest number: 086C
Signing time: Thu 05 Dec 2024 14:00:50 +0000
Manifest this update: Thu 05 Dec 2024 14:00:50 +0000
Manifest next update: Fri 06 Dec 2024 14:00:50 +0000
Files and hashes: 1: ixKTXKQem95_LaybfEaTYxPVUUQ.crl (hash: noxcOCx49noslpE5yhbRQYX3KmusUePhezEnd04R8Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:1f:9a:45:c2:7e:65:7b:32:5e:cf:04:a3:c0:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b12935ca41e9bde7f2dac9b7c46936313d55144
Validity
Not Before: Dec 5 14:00:50 2024 GMT
Not After : Dec 6 14:00:50 2024 GMT
Subject: CN=7829cb1b1719cbf563c1ab446665a969d6a36d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:24:94:2a:98:59:c7:e4:01:f9:4f:e9:a9:
33:74:76:ac:39:8c:f1:8a:61:a0:c4:ff:ce:84:69:
8a:06:ab:db:5a:5a:7e:94:e0:a6:6e:87:d4:a6:1f:
aa:b6:ce:7e:0f:e5:ae:a2:1e:0c:4e:1f:d0:80:b6:
2f:36:7f:0a:1f:df:3b:a6:80:54:48:bd:d2:b7:c1:
da:81:5d:41:af:e0:4e:db:23:f4:4b:7a:18:da:a3:
2c:11:92:4b:89:30:99:5d:6a:f1:27:fa:6d:7b:ef:
d6:07:00:2f:de:29:2a:f4:08:3d:c9:15:87:e9:e0:
15:94:d8:26:1f:cd:70:13:65:64:fd:d7:93:28:7f:
ad:9e:e2:70:3d:8f:16:02:14:05:92:c8:16:18:76:
a8:20:56:60:ff:19:05:97:26:8b:83:2b:e2:2c:80:
82:2a:17:cc:3e:a4:0a:1b:2a:36:4e:24:82:89:39:
80:7e:e9:12:49:d3:5b:cb:f9:d9:c0:0c:14:ee:5d:
6f:17:7f:43:b9:77:88:f1:13:05:91:6e:66:71:1b:
9b:d6:56:dd:ba:e2:6b:1f:59:e7:fe:35:61:2e:dd:
35:dd:14:2a:ce:7a:db:f2:7a:3b:e3:0d:ab:3e:91:
a0:5e:62:7c:8d:eb:41:42:53:00:fd:5d:1b:8d:64:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:29:CB:1B:17:19:CB:F5:63:C1:AB:44:66:65:A9:69:D6:A3:6D:24
X509v3 Authority Key Identifier:
keyid:8B:12:93:5C:A4:1E:9B:DE:7F:2D:AC:9B:7C:46:93:63:13:D5:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixKTXKQem95_LaybfEaTYxPVUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c03c56-412c-4942-82e1-5e360d1d31f8/1/ixKTXKQem95_LaybfEaTYxPVUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2d:83:f6:7e:3a:cd:84:e7:5e:f5:ac:dd:62:78:80:bf:6e:
2a:39:dd:1e:23:b4:7b:72:39:8d:e7:2c:10:6b:42:5b:10:7f:
95:a6:35:0c:a8:cd:ea:1e:5d:5f:9d:9c:a5:ff:95:d5:b0:c8:
9c:20:9d:c4:8c:59:7d:c8:5a:93:64:c5:6b:60:91:1d:61:62:
59:8f:7e:cb:d2:4b:66:fd:cb:86:0e:a2:97:e8:9b:83:2d:b5:
52:bb:0a:c1:bd:10:54:9a:34:59:b5:1c:8b:6d:86:60:2c:ea:
e2:ce:e4:ee:0b:96:85:25:c9:c5:8b:99:0f:a4:9f:24:ae:f8:
40:a0:68:72:51:d1:ec:97:88:29:ca:72:a2:e1:d5:8e:c3:b1:
2f:aa:1e:45:a7:b5:6d:d2:f3:74:97:47:1f:15:49:d2:e2:bb:
43:06:bb:7d:8f:c3:1f:d9:a0:d3:3b:83:d0:83:4a:88:d3:08:
59:79:64:5b:26:2a:52:8d:b3:86:da:85:36:a4:a5:79:e0:e5:
d8:0d:33:01:20:d2:5d:54:ca:3a:52:d0:ed:16:f8:a1:4c:6a:
74:66:59:c7:d1:4c:d3:97:fd:aa:af:cb:10:65:d2:94:a5:9c:
75:f7:b8:40:64:f5:2f:2b:6f:3b:eb:14:73:95:3a:d1:0a:8a:
c7:cb:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:51 2025 by rpki-client