Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
File: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft (raw, json)
Hash identifier: 2A4zlxP/iDOZJU4yJLN8mCBLWFwZEvdcGm1X6W4LJKY=
Subject key identifier: 23:87:28:6A:97:92:E8:E9:18:F0:35:78:DB:CF:E1:2D:EA:AA:9E:C3
Authority key identifier: 20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
Certificate issuer: /CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Certificate serial: 0195E159FA3F9BCDD73C60D48BAFAB8CF347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
Manifest number: 0892
Signing time: Sat 29 Mar 2025 10:02:05 +0000
Manifest this update: Sat 29 Mar 2025 10:02:05 +0000
Manifest next update: Sun 30 Mar 2025 10:02:05 +0000
Files and hashes: 1: IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl (hash: fMVCtgvgGJAmCrkk0iYX250Rqa0Lqw69uAaW+qp488Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:fa:3f:9b:cd:d7:3c:60:d4:8b:af:ab:8c:f3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209f93d4b5c2976fbfc36ccce523e1e53b019d8d
Validity
Not Before: Mar 29 10:02:05 2025 GMT
Not After : Mar 30 10:02:05 2025 GMT
Subject: CN=2387286a9792e8e918f03578dbcfe12deaaa9ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:46:99:85:44:59:a8:b5:75:b9:d0:78:27:53:
80:e4:85:ea:8c:f7:80:7c:6e:44:5c:e1:3d:2f:df:
8e:a1:25:56:94:7e:46:80:ce:0b:ac:0c:ce:15:61:
0d:53:b4:2c:89:77:9e:56:98:80:07:0d:a1:d9:63:
2e:fb:17:e6:15:89:23:ee:80:41:a4:23:d7:db:6d:
13:33:ca:ee:47:c5:c8:66:76:4d:1a:2e:05:42:c4:
23:90:49:4a:02:bc:12:7b:31:f9:d7:b2:60:ef:79:
6a:1d:0f:cd:d3:1f:7a:10:d6:4f:11:49:78:07:bd:
a3:5a:38:a7:f0:7b:44:b8:22:df:4e:69:43:65:fc:
c7:e5:0f:ea:cc:c9:04:0f:2c:3c:eb:b2:c9:71:4a:
21:5d:d5:98:b2:c2:83:d5:f0:a4:2f:46:8e:d9:ba:
59:f8:4e:86:3f:e7:ba:44:e6:53:7a:3a:6b:6b:d9:
8b:6a:46:c8:01:67:0e:17:0f:55:61:b1:08:51:a3:
6f:33:bd:0d:ba:c6:a4:6f:47:6e:bf:8a:b8:01:db:
44:57:77:58:5d:03:82:29:3f:06:45:05:aa:89:ca:
44:b6:f1:88:d9:da:63:33:1d:12:78:be:26:e6:9d:
41:3b:43:fb:9f:cc:34:68:4d:69:ac:51:3a:94:4c:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:87:28:6A:97:92:E8:E9:18:F0:35:78:DB:CF:E1:2D:EA:AA:9E:C3
X509v3 Authority Key Identifier:
keyid:20:9F:93:D4:B5:C2:97:6F:BF:C3:6C:CC:E5:23:E1:E5:3B:01:9D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/753036-a138-44ad-856c-199fd7362517/1/IJ-T1LXCl2-_w2zM5SPh5TsBnY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7f:83:c5:91:d7:cd:de:a0:33:4d:3f:d5:99:ed:9d:2b:d8:
09:ec:11:11:79:a9:b5:13:5d:7d:48:95:e6:46:89:08:40:ef:
af:1d:69:c5:55:c5:7c:33:1b:f1:73:97:05:df:02:86:2d:ed:
3c:60:1f:f2:05:5a:9f:1d:79:9a:e3:79:9a:3f:8c:fa:06:63:
9e:cc:80:0c:21:b3:a4:65:26:88:80:ec:fc:28:d3:03:3b:ba:
90:ce:ee:8d:d3:8b:40:6f:0a:8d:4d:0a:30:b7:33:09:47:b8:
a4:1b:48:32:cf:c0:56:2e:16:ff:ee:5b:f9:9f:19:5b:97:b7:
29:8f:61:ab:b5:e6:fd:c5:13:c3:ae:a7:9c:74:e6:48:9d:e9:
15:e0:24:d5:a0:b7:4b:99:57:97:8c:13:5a:ae:5d:d3:75:63:
32:6e:88:74:a6:08:20:68:bd:92:7e:cd:ef:e9:a1:87:52:5e:
7f:46:e3:99:8d:97:13:4b:2d:b7:5a:ed:04:4d:d0:4b:e6:b7:
9f:19:b7:c7:69:59:33:bb:b1:f0:49:4d:00:f8:4d:7a:e3:cd:
fa:b8:4e:4b:4c:29:70:f6:00:40:b2:f4:25:ff:92:58:c3:f4:
aa:8f:d9:47:6f:3e:97:9a:a1:4a:6c:cd:69:f3:38:08:96:46:
7a:a0:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:21:54 2025 by rpki-client