Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: SujXDEzMnR5pkXZgOBNuFm9xcC9db42G6qXOJ8Zomz4=
Subject key identifier: 67:D2:6D:A8:A9:F8:7C:97:06:EF:68:0E:C4:44:48:0B:DC:C2:8E:12
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 0194BD4E5EBFFE451CDE1B90A12F3E822FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: utyvlpvpE24IfSinFX2/L4Zq2HMYjt1vu/DJ+wgNLu8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:bf:fe:45:1c:de:1b:90:a1:2f:3e:82:2f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=67d26da8a9f87c9706ef680ec444480bdcc28e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:20:8d:77:ba:27:55:dc:c5:7d:f2:e5:bc:
46:21:92:81:a1:bc:2d:50:bf:e5:67:9c:1f:c4:3e:
a0:c7:12:75:3d:8f:e0:02:01:fa:46:3a:9c:48:cb:
ce:70:8f:8f:c8:06:e7:ef:09:f1:b4:b0:a8:1a:b5:
74:07:42:91:8b:10:a4:ae:9d:6d:d9:b9:64:80:fb:
b9:2a:96:2e:6b:a2:b5:83:b9:f4:9e:b7:03:23:64:
d9:43:df:19:5b:7d:58:61:6c:59:f0:49:7b:5d:97:
db:6d:5b:b6:ec:c3:20:8a:72:d4:f7:0d:0a:e8:eb:
f0:50:a3:a5:d8:ce:87:46:49:50:a9:19:7e:15:9a:
bf:32:64:a6:7e:85:91:da:4f:cd:0f:6e:fa:7f:42:
dd:11:0f:0e:f2:40:75:0c:74:12:59:a9:68:79:e4:
f0:ad:1d:cb:71:04:f5:e7:7c:33:54:b7:55:02:4a:
74:fc:88:fd:20:c5:c9:fa:a6:a8:1f:85:aa:3a:c4:
2e:b4:fa:9b:b8:98:b9:c2:88:2f:3e:38:b7:e2:9c:
11:7b:f9:54:32:aa:71:86:31:db:69:3e:ff:91:2d:
16:b0:56:d6:27:36:5b:73:c5:4b:a9:00:d2:be:3b:
01:a1:a9:85:53:f5:65:f3:3a:d8:96:d7:7e:2f:5d:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D2:6D:A8:A9:F8:7C:97:06:EF:68:0E:C4:44:48:0B:DC:C2:8E:12
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:1a:f5:ec:2d:e9:65:56:18:ef:79:13:da:0d:45:c8:d8:c4:
53:db:ca:0e:57:50:43:11:bb:2a:70:e1:b9:16:29:80:2a:b1:
49:96:4e:13:40:cf:6a:3c:f8:34:6e:71:26:5e:d6:00:15:db:
3a:1d:fe:28:81:74:72:46:38:32:f4:1d:ad:4c:2b:e2:a4:4a:
6c:63:73:3f:ab:bc:72:81:88:b9:98:ca:d5:0b:99:51:50:1c:
9f:87:06:f0:e6:a3:0b:e5:53:39:be:55:ca:e7:09:d8:a0:a0:
35:44:bb:97:ac:65:d4:c8:40:2a:16:0c:16:5a:dc:d1:db:e4:
89:f6:b5:e5:e9:ce:f2:8b:a7:0f:3a:20:63:c1:93:00:91:96:
68:52:07:d8:2e:d3:36:b0:28:7c:c0:0d:2d:e0:02:99:02:76:
32:56:f7:8f:fa:68:18:f3:69:25:cc:a6:a4:c5:92:5a:43:18:
87:c7:cf:57:6f:bc:ae:f1:72:d5:12:f3:d4:ca:04:fc:67:f4:
71:4f:49:cb:34:50:6c:82:6d:6f:81:e4:a3:bf:3a:fd:a9:e5:
ce:79:5c:be:f3:79:37:10:b7:5d:98:d0:10:d2:af:61:a4:ee:
65:95:4d:42:00:0b:48:ae:fb:c3:b2:3e:d6:2d:07:f8:10:57:
9e:1b:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:35 2025 by rpki-client