Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.mft
File: ii91G9Xax7fn30PoCabgNpuHi8U.mft (raw, json)
Hash identifier: eox4N/LwW5iPfgvNSuvP2WNwm3m/cF/hA57P4Eis/J0=
Subject key identifier: 21:A7:A9:C5:E7:70:E2:6F:3C:CA:34:02:D8:A6:69:73:C5:4B:B7:AE
Authority key identifier: 8A:2F:75:1B:D5:DA:C7:B7:E7:DF:43:E8:09:A6:E0:36:9B:87:8B:C5
Certificate issuer: /CN=8a2f751bd5dac7b7e7df43e809a6e0369b878bc5
Certificate serial: 018EC6CF1B8D0D3347E10BE55F2A3EEE86D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii91G9Xax7fn30PoCabgNpuHi8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.mft
Manifest number: 0297
Signing time: Wed 10 Apr 2024 07:00:45 +0000
Manifest this update: Wed 10 Apr 2024 07:00:45 +0000
Manifest next update: Thu 11 Apr 2024 07:00:45 +0000
Files and hashes: 1: ii91G9Xax7fn30PoCabgNpuHi8U.crl (hash: 7xdoPpER33brj1HVegyjvRrpuhgoCoCYL0n67/LpLeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c6:cf:1b:8d:0d:33:47:e1:0b:e5:5f:2a:3e:ee:86:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2f751bd5dac7b7e7df43e809a6e0369b878bc5
Validity
Not Before: Apr 10 07:00:45 2024 GMT
Not After : Apr 11 07:00:45 2024 GMT
Subject: CN=21a7a9c5e770e26f3cca3402d8a66973c54bb7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:7b:d9:b5:4d:45:86:e8:b9:55:d5:7c:fd:
97:fe:f9:39:7c:cc:83:b8:66:09:b8:9a:9c:0e:64:
4b:48:2f:ca:36:6a:c6:e3:61:b4:5c:18:7a:96:a2:
d4:eb:67:3e:87:1d:74:ef:53:a4:a1:98:57:98:af:
dc:25:62:9d:67:73:00:72:3d:6b:fe:7c:49:66:2c:
dd:f6:58:11:0e:5c:87:bf:ba:e5:22:76:09:57:f8:
f8:1f:63:e1:83:c4:e6:3d:a7:95:d8:5b:54:27:d6:
87:0e:cf:da:63:07:3a:e8:71:48:09:9d:82:df:cd:
ee:35:96:87:d8:d0:61:cf:e5:6c:b3:1c:70:8b:6b:
6e:77:95:90:fe:4d:4a:17:6a:90:61:38:df:51:71:
b1:b3:14:78:78:d2:2f:90:c0:58:82:1b:21:9e:fa:
99:74:3f:ab:5e:5c:8a:13:3e:60:6f:d3:89:92:b8:
8f:2d:66:54:8f:a8:22:90:44:58:02:3b:d5:60:89:
0f:2c:0b:c2:eb:e6:28:d8:81:db:5f:ea:0f:d9:9c:
18:1e:7b:5a:84:67:ac:7e:50:df:63:26:ea:1f:ca:
bd:bb:44:bf:b0:c2:b4:32:51:98:83:49:69:e5:94:
0c:cf:f4:73:1e:49:9f:b9:f6:50:3c:95:13:69:a0:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:A9:C5:E7:70:E2:6F:3C:CA:34:02:D8:A6:69:73:C5:4B:B7:AE
X509v3 Authority Key Identifier:
keyid:8A:2F:75:1B:D5:DA:C7:B7:E7:DF:43:E8:09:A6:E0:36:9B:87:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii91G9Xax7fn30PoCabgNpuHi8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c9c01b-16d1-4685-bd72-70e12727a445/1/ii91G9Xax7fn30PoCabgNpuHi8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ea:48:a0:2e:f7:a3:ae:24:cc:fc:de:4e:58:a6:91:49:91:
a4:ba:35:1a:21:1c:fb:5a:61:1c:fa:b7:a0:56:45:67:39:2d:
91:e1:3c:1e:77:fe:2f:59:41:2c:4e:8e:9b:13:81:19:33:29:
e2:34:6e:33:c0:ce:4a:0b:de:ac:55:87:b3:08:c2:1b:ec:ce:
78:47:7b:c4:c9:c0:94:bc:70:d9:46:3e:98:84:c0:e7:9e:8d:
47:68:ed:6f:76:fb:5d:14:57:91:59:69:ad:22:45:64:b7:85:
39:54:ed:7a:cb:3f:83:58:92:3a:a6:03:64:6f:f4:53:60:c8:
47:05:e8:de:c6:d5:7d:27:6e:f6:22:59:f8:ff:6b:ef:45:6c:
36:12:9e:cc:d1:5a:ad:11:e2:ff:b9:dc:3f:c4:67:0c:68:95:
7e:17:31:66:4f:15:e3:15:e2:a2:35:3b:f1:9e:df:d9:c0:68:
55:98:65:81:b4:48:c3:9f:c3:ef:6c:bf:75:81:02:25:59:e2:
08:4e:8c:23:f6:da:47:97:c4:76:f4:c3:13:f5:ca:3f:34:cc:
ea:cc:a8:61:0a:1a:96:91:e1:3e:40:91:35:ed:a9:90:fc:21:
97:c0:79:44:9d:a8:c0:e1:3a:63:f5:0a:88:2e:b7:9d:9f:c8:
26:97:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:51 2025 by rpki-client