Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.mft
File: iaBBZwABZgo3ILd9dk2DaFIZATg.mft (raw, json)
Hash identifier: VCO8mdp7GN0vO6Ph3yUa77nar0qK5ldvWlLUYx2ssqM=
Subject key identifier: 7A:8D:D0:CE:22:E6:6D:06:9A:3B:BA:89:72:0E:10:71:E3:60:48:12
Authority key identifier: 89:A0:41:67:00:01:66:0A:37:20:B7:7D:76:4D:83:68:52:19:01:38
Certificate issuer: /CN=89a041670001660a3720b77d764d836852190138
Certificate serial: 0194BD85A4F5B4B4C469AC01CB62071BC4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaBBZwABZgo3ILd9dk2DaFIZATg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.mft
Manifest number: 0230
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: ZFhZ1BqFreky-hMCFILR09_VVoM.roa (hash: qamEtLvOwpZ40vLyeg6d8oLlWWQ1GcUWvt7i4vqtvFc=)
2: iaBBZwABZgo3ILd9dk2DaFIZATg.crl (hash: ieXacjvdgzjfy/US+ZeoAoAuEz6h5wzvhRK3OC3AaWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a4:f5:b4:b4:c4:69:ac:01:cb:62:07:1b:c4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a041670001660a3720b77d764d836852190138
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=7a8dd0ce22e66d069a3bba89720e1071e3604812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:89:b9:85:f5:57:4a:60:f2:55:8f:39:f3:
fc:7c:5f:06:20:4d:a6:f7:d8:17:ad:06:4e:47:97:
ce:8a:2e:ad:50:1b:cb:ba:cb:63:55:14:7b:44:df:
0b:95:38:c0:a9:47:db:da:bb:97:9b:a5:ff:7d:2d:
fb:03:64:a0:b1:15:57:b7:e8:ab:9b:e9:10:ff:e0:
3f:aa:35:da:f5:b3:2f:79:5a:4f:93:7b:35:7e:25:
35:09:ab:19:31:db:47:a5:5f:05:a8:3b:56:1e:bc:
6d:a7:84:e1:c9:47:4b:06:e8:38:9f:03:f1:b7:39:
60:70:8e:c1:8c:69:43:3f:c3:db:81:67:e2:8a:e9:
ed:19:80:b2:44:28:ef:61:c9:ea:38:cd:32:a0:a4:
f3:46:f8:4f:41:39:ed:f1:a2:ce:6c:a8:6b:97:24:
34:48:88:e0:3d:18:2a:2b:35:fd:9a:dd:4a:56:3c:
05:4a:5f:58:00:61:fd:28:e1:9e:b6:05:18:d0:08:
3d:04:ea:24:c1:e3:6c:df:bc:ca:4b:f5:90:6a:01:
03:c9:d8:f8:0d:a8:6c:1b:3c:00:36:da:f5:74:a6:
cf:25:5a:98:d0:03:ae:6c:a7:37:19:23:ee:f9:1a:
89:0f:4d:eb:7a:73:7d:f6:3f:85:67:5d:2c:15:a2:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:D0:CE:22:E6:6D:06:9A:3B:BA:89:72:0E:10:71:E3:60:48:12
X509v3 Authority Key Identifier:
keyid:89:A0:41:67:00:01:66:0A:37:20:B7:7D:76:4D:83:68:52:19:01:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaBBZwABZgo3ILd9dk2DaFIZATg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d4469a-13a8-472c-b46f-4bb414623a14/1/iaBBZwABZgo3ILd9dk2DaFIZATg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:47:a4:ed:1b:40:f1:90:b9:83:bc:a7:d2:50:cd:87:f6:40:
c7:40:05:e6:49:9b:5e:6e:93:c3:0a:08:36:b2:ab:93:0a:18:
a3:da:0d:13:a3:88:3f:95:49:c3:69:f0:71:2c:5e:56:7c:da:
5a:dd:ad:ce:a4:42:54:3c:f1:38:0f:7e:91:70:87:eb:31:0a:
4f:0f:d2:5c:09:62:1b:42:61:24:47:38:33:65:b0:41:32:f4:
ef:c6:8b:87:a7:93:ed:28:50:04:d1:f8:0f:44:f2:75:6a:04:
3a:73:19:86:70:bf:18:f5:83:80:2a:cb:a2:7d:43:82:f1:7e:
9a:26:3e:41:c2:1f:f3:3e:8d:1b:2b:e0:26:e7:32:13:bf:7d:
52:ed:d9:d8:4d:63:a3:fd:15:ab:fd:c5:e4:d6:f2:65:f3:3f:
6c:05:4a:f2:90:ae:f4:34:52:d8:90:fc:43:79:52:1f:54:ac:
46:7a:20:71:45:9b:78:6a:20:a8:6d:23:29:55:ad:26:6b:3a:
34:13:43:7d:bb:c5:01:c7:59:78:21:8a:53:ca:74:9d:78:9c:
f3:1c:6b:cb:2b:b0:4c:10:7b:10:69:6f:73:cd:26:f2:f5:37:
8e:2b:0b:72:ea:07:5c:3f:88:0e:52:73:80:db:e0:d5:cc:e7:
32:fa:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:06 2025 by rpki-client