
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/19296d-febd-418f-892a-28d2558a7ee9/1/IB66AJ8RAx6BMoTAJvHbTKnfZaY.mft
File: IB66AJ8RAx6BMoTAJvHbTKnfZaY.mft (raw, json)
Hash identifier: 5VFUSFymVgdBb5KLmYpjr3110QQeNzUb5rr63lLWv4k=
Subject key identifier: DA:8F:BC:F7:A9:64:0A:02:6B:47:06:69:58:C7:35:94:B6:BF:DD:DB
Authority key identifier: 20:1E:BA:00:9F:11:03:1E:81:32:84:C0:26:F1:DB:4C:A9:DF:65:A6
Certificate issuer: /CN=201eba009f11031e813284c026f1db4ca9df65a6
Certificate serial: 0193BD889278E499A4D2CF9B1C197D8AF367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB66AJ8RAx6BMoTAJvHbTKnfZaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/19296d-febd-418f-892a-28d2558a7ee9/1/IB66AJ8RAx6BMoTAJvHbTKnfZaY.mft
Manifest number: 0180
Signing time: Fri 13 Dec 2024 01:01:04 +0000
Manifest this update: Fri 13 Dec 2024 01:01:04 +0000
Manifest next update: Sat 14 Dec 2024 01:01:04 +0000
Files and hashes: 1: IB66AJ8RAx6BMoTAJvHbTKnfZaY.crl (hash: veURmr2stLEbky8YAAbAsvrmlhdA4lWw741rHhcIKY8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bd:88:92:78:e4:99:a4:d2:cf:9b:1c:19:7d:8a:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201eba009f11031e813284c026f1db4ca9df65a6
Validity
Not Before: Dec 13 01:01:04 2024 GMT
Not After : Dec 14 01:01:04 2024 GMT
Subject: CN=da8fbcf7a9640a026b47066958c73594b6bfdddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:4f:14:4d:dd:04:81:cf:a2:cb:41:3a:ba:
af:2d:81:6c:a4:c8:1e:d1:89:bb:33:40:c4:ed:3f:
2e:cf:06:7a:7a:d2:4e:76:0c:a3:f6:67:e1:d9:5f:
9c:4f:96:ed:58:a9:a5:b7:d3:8a:52:3c:66:45:28:
31:56:dc:1c:58:5f:8c:3f:7d:70:d1:ca:1d:b3:10:
34:ca:15:e2:70:03:6d:8a:a4:7b:30:21:46:30:f5:
5c:a5:40:ee:77:49:23:ce:7c:fc:a7:29:76:eb:06:
05:df:d9:ae:8e:97:4e:88:06:c0:dd:d5:bf:8e:c8:
44:d7:3c:53:06:c3:00:b5:81:c0:7c:45:07:7b:6f:
46:16:8a:c7:08:fe:e6:63:08:b8:30:ce:0a:88:48:
26:93:07:3a:b6:c6:f6:59:3b:79:93:27:60:8d:8b:
d5:7c:09:cf:1b:22:69:7f:86:10:0c:ad:35:cc:af:
42:a3:f2:8a:fc:3f:a0:ed:69:97:a6:7f:c3:cc:50:
c3:88:39:a9:f1:af:a2:e9:26:86:71:13:73:a2:32:
e9:54:6a:8d:00:7e:fc:49:56:fd:a8:fc:bb:00:19:
fc:d5:50:a9:2d:8c:6f:3b:0f:48:63:f2:1d:98:1d:
0f:7c:3c:d0:ad:11:76:a1:55:b9:41:70:17:b0:7a:
be:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8F:BC:F7:A9:64:0A:02:6B:47:06:69:58:C7:35:94:B6:BF:DD:DB
X509v3 Authority Key Identifier:
keyid:20:1E:BA:00:9F:11:03:1E:81:32:84:C0:26:F1:DB:4C:A9:DF:65:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB66AJ8RAx6BMoTAJvHbTKnfZaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19296d-febd-418f-892a-28d2558a7ee9/1/IB66AJ8RAx6BMoTAJvHbTKnfZaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19296d-febd-418f-892a-28d2558a7ee9/1/IB66AJ8RAx6BMoTAJvHbTKnfZaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:b5:b1:6d:6f:90:1b:38:50:b6:95:5c:2c:15:79:cd:21:
cd:c5:5f:a1:1f:69:31:d5:e7:f4:b6:ab:4d:c7:c1:59:e9:5b:
5f:9d:3a:9f:13:a1:bb:7f:22:a5:6c:77:81:2c:5c:8c:46:da:
f8:03:4b:0a:24:68:1f:af:22:e4:5d:f6:e9:46:0b:f8:3a:10:
ab:f1:53:d1:ae:bc:bd:28:53:f1:b5:0b:b7:b0:7a:aa:6d:c1:
95:4d:48:78:a0:3f:33:0c:be:35:e4:bd:8c:98:59:6c:67:ec:
98:cf:14:dc:4b:85:a0:19:1d:51:b9:39:67:d8:20:41:c9:d4:
a3:3e:b4:95:f6:ca:36:6b:3e:ca:4e:e3:77:8e:99:76:1f:95:
a1:03:9e:82:58:7a:5d:70:d8:31:59:43:9b:22:75:1c:88:51:
01:ed:de:ef:98:59:cf:af:d9:5e:80:72:ae:e2:d2:a5:d4:ff:
e7:ae:4b:8a:bf:3c:06:6e:b1:4f:d9:e2:fe:f1:2d:f1:df:8c:
57:27:1c:42:21:b8:70:10:bb:7a:f9:22:22:74:70:d5:07:b5:
94:f0:7d:42:b6:67:09:28:68:99:a0:16:d5:de:ed:2f:44:2d:
fc:10:6b:bf:99:94:0b:e9:d0:b8:4d:f4:04:c2:04:d8:6c:56:
4f:42:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:51:11 2025 by rpki-client