
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
File: I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft (raw, json)
Hash identifier: IV48Kfkox/r/KVgAY/kCsBErtR44PU7AnvNbskz1If8=
Subject key identifier: D1:CF:B5:99:CD:7A:F4:4C:3A:F3:F3:15:DF:0C:4A:5A:D5:88:6E:E1
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0195EE398869D5C005130DAF690F48189BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
Manifest number: 1254
Signing time: Mon 31 Mar 2025 22:01:42 +0000
Manifest this update: Mon 31 Mar 2025 22:01:42 +0000
Manifest next update: Tue 01 Apr 2025 22:01:42 +0000
Files and hashes: 1: I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl (hash: i32inrL7E0X9DF3wfPOQ7fyUq3S+lwokjGWwePG9Ibc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ee:39:88:69:d5:c0:05:13:0d:af:69:0f:48:18:9b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Mar 31 22:01:42 2025 GMT
Not After : Apr 1 22:01:42 2025 GMT
Subject: CN=d1cfb599cd7af44c3af3f315df0c4a5ad5886ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ae:24:8a:cd:bd:b8:93:b6:59:24:4d:0c:f4:
33:89:d9:b8:ae:09:56:68:56:f3:7f:a0:a9:0d:5d:
65:a5:57:ec:19:6b:17:26:99:ba:17:4d:de:70:f8:
3a:c8:51:08:20:b5:82:59:11:04:7e:fd:5a:61:fd:
90:e7:99:fe:c5:12:64:e2:b7:3a:ce:1d:14:8f:a8:
d5:94:34:e6:0f:6f:27:ba:5f:b3:40:13:b4:0b:a5:
d0:d9:2c:d0:b1:ec:90:63:15:1c:3d:a0:c6:ac:f4:
c3:f4:8c:b5:b4:c0:68:d1:ef:0e:06:99:93:d3:9c:
87:3b:58:68:71:bd:5d:06:f2:aa:ef:6a:9f:5f:8b:
bc:1e:ef:4a:b2:a3:08:39:7f:58:1a:98:cb:83:79:
81:c7:39:16:d2:e2:c9:1d:e3:d4:98:49:cc:0e:82:
85:b0:f9:84:de:c8:a5:0e:4c:76:65:55:f6:db:8b:
40:a3:42:80:a4:16:6d:e6:01:81:49:d9:5b:85:d1:
56:53:ac:44:c7:9c:8a:a1:f4:9b:8b:d2:1c:dd:66:
9a:1c:ee:46:ed:6d:ca:9e:57:6a:58:07:77:57:f5:
85:b2:c3:f3:50:18:e4:71:f4:83:30:07:16:03:ee:
49:ea:e0:e3:03:9f:c9:59:5b:18:29:b0:9c:56:7e:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:B5:99:CD:7A:F4:4C:3A:F3:F3:15:DF:0C:4A:5A:D5:88:6E:E1
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:58:06:be:c1:27:f4:b2:be:1f:2f:3c:89:47:42:66:d3:
89:08:09:72:20:38:3d:ff:5f:f3:d4:9f:63:08:91:0e:e2:30:
17:ed:5d:50:75:8a:e5:f7:be:79:c5:38:21:37:0c:a4:fb:ab:
da:52:ac:0f:f9:7f:80:79:0d:61:f0:a2:2a:08:c7:ef:66:cb:
97:ad:8e:65:7e:ba:2d:c5:51:dc:03:24:81:26:d7:4c:cc:c5:
62:97:73:76:cf:f0:eb:7c:16:d3:40:14:ca:d2:b1:20:f9:2e:
bf:39:92:14:f8:8c:d7:38:f4:77:7f:83:e2:90:ef:17:e6:56:
ce:cf:f2:ec:34:8e:b5:f1:81:4d:41:c0:ea:37:3e:1c:d5:1e:
2b:2b:9c:c4:f2:77:e9:7f:71:e7:1c:83:89:00:e7:5f:84:19:
e3:1b:3c:d7:46:21:07:9e:fa:fe:27:b5:2c:7c:86:b6:3a:f5:
fb:8a:00:ac:4f:19:7a:29:ec:eb:2a:b6:dc:37:0b:28:60:85:
cf:ec:c7:9e:c2:e8:ac:4a:5c:2e:a7:4c:4a:b2:dc:96:88:44:
8f:3d:c8:67:d1:d3:df:4a:c1:b7:12:14:91:84:ee:fe:a2:45:
9c:91:8f:f9:15:2c:54:68:77:85:24:92:d4:25:40:9a:86:a6:
26:2b:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 2 00:25:01 2025 by rpki-client on console.sobornost.net