Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0fa8ca-0c78-444e-a78b-6dd37f810384/1/iEaBNSYWlY58FSq_yiKPKepmUIk.mft
File: iEaBNSYWlY58FSq_yiKPKepmUIk.mft (raw, json)
Hash identifier: ERsNLMeY+pNEuJsGCUX00c9hVqxORUm6cI6d4DieXaA=
Subject key identifier: 89:49:7B:BE:BB:C0:9E:8D:41:C6:4A:99:A8:1D:4B:92:0B:0F:C5:39
Authority key identifier: 88:46:81:35:26:16:95:8E:7C:15:2A:BF:CA:22:8F:29:EA:66:50:89
Certificate issuer: /CN=884681352616958e7c152abfca228f29ea665089
Certificate serial: 018CA93857C6C1B675184BD5B4BAADE6EEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEaBNSYWlY58FSq_yiKPKepmUIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0fa8ca-0c78-444e-a78b-6dd37f810384/1/iEaBNSYWlY58FSq_yiKPKepmUIk.mft
Manifest number: 0948
Signing time: Wed 27 Dec 2023 03:01:31 +0000
Manifest this update: Wed 27 Dec 2023 03:01:31 +0000
Manifest next update: Thu 28 Dec 2023 03:01:31 +0000
Files and hashes: 1: iEaBNSYWlY58FSq_yiKPKepmUIk.crl (hash: Sx4JipokPdvHd/hJYtQrkE3Wa+HHYL2as5HXob7V+tM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:38:57:c6:c1:b6:75:18:4b:d5:b4:ba:ad:e6:ee:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884681352616958e7c152abfca228f29ea665089
Validity
Not Before: Dec 27 03:01:31 2023 GMT
Not After : Dec 28 03:01:31 2023 GMT
Subject: CN=89497bbebbc09e8d41c64a99a81d4b920b0fc539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:e8:38:8d:4e:fd:93:29:39:32:27:bb:06:
b5:7d:4c:df:e8:7c:b2:3c:8e:ef:cd:10:d6:d8:6c:
ee:b5:9b:d8:76:ef:b1:ac:71:d3:1a:ce:b7:53:25:
3b:41:ff:7f:b5:2c:79:97:7f:6c:07:99:fb:ed:1f:
9b:3a:70:f8:61:b6:5d:e6:2b:9e:fa:6e:42:35:b3:
b5:0e:e3:1a:d5:01:e2:49:d0:ad:6f:0e:fc:f8:9b:
8a:a7:6f:59:06:35:34:0e:ed:de:15:ad:64:0c:1c:
13:4d:48:df:50:22:db:9e:35:5c:55:44:8d:25:56:
97:bb:3d:78:41:ef:bb:11:a1:37:00:a2:af:ae:c3:
9d:e6:8c:83:2b:ca:1a:0e:f7:08:91:d6:9a:7b:17:
f7:24:ad:46:0b:c4:11:27:dc:33:a8:3f:46:56:18:
9a:ee:e1:0c:74:24:85:b5:b7:34:3f:8f:6b:7c:b3:
9f:86:6f:81:61:ff:36:c5:65:ab:c9:cd:c9:0e:b6:
49:3a:a5:45:87:94:7d:64:18:87:33:ee:0e:91:7d:
5f:a8:2e:d3:a1:67:2a:ee:96:cf:59:8a:0f:61:17:
4e:46:2e:d2:9d:43:4a:6f:63:ee:b7:ed:2f:d1:c5:
48:78:9f:cb:50:31:15:12:66:04:02:7f:1d:31:64:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:49:7B:BE:BB:C0:9E:8D:41:C6:4A:99:A8:1D:4B:92:0B:0F:C5:39
X509v3 Authority Key Identifier:
keyid:88:46:81:35:26:16:95:8E:7C:15:2A:BF:CA:22:8F:29:EA:66:50:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEaBNSYWlY58FSq_yiKPKepmUIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0fa8ca-0c78-444e-a78b-6dd37f810384/1/iEaBNSYWlY58FSq_yiKPKepmUIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0fa8ca-0c78-444e-a78b-6dd37f810384/1/iEaBNSYWlY58FSq_yiKPKepmUIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c0:ee:cb:6d:bb:9b:34:67:b9:31:8d:89:07:aa:b2:ce:83:
f5:eb:56:0e:dc:90:7e:3f:ee:a2:a4:01:40:0e:76:0b:1f:e2:
7d:37:cd:6c:74:7a:da:90:ac:f2:8c:98:d5:97:09:c2:a9:69:
8d:51:5e:e2:e7:13:91:9f:fb:d3:9d:ca:dd:13:16:c2:43:de:
9e:4f:94:b0:4f:e1:13:69:39:38:d4:ea:ba:1c:e3:9a:02:01:
2a:ee:ee:55:38:ac:72:a7:70:88:37:ef:fe:91:2e:d2:fe:5d:
3d:08:cb:43:5b:fb:92:aa:7f:9b:88:6b:6f:41:33:45:ca:5c:
10:17:27:c6:83:86:66:2d:9f:03:2d:05:f9:43:8d:5a:08:d4:
e1:86:10:f5:99:42:aa:df:03:02:2a:b0:ac:5b:25:3a:d1:ef:
ed:3d:07:fe:e5:7c:76:6b:4c:98:19:71:e9:d9:d7:86:8f:a2:
dd:ca:05:3f:99:0f:a6:b0:4c:66:d0:c6:e8:5d:09:12:59:a2:
15:32:01:45:6f:d4:76:d5:ef:dc:2a:ce:8a:9d:f4:34:9d:ac:
2b:97:79:ca:3e:d4:cb:50:a4:04:09:2e:b8:b1:bf:fd:f8:4c:
a0:a2:d3:52:ba:0c:f0:0e:1a:aa:43:3c:de:8f:63:c8:90:a1:
28:93:f0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:18 2025 by rpki-client