Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File: iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier: o4V6Iq47bOv5TTogm9/7PFDVf0eYVq1s6d6kbARBCFw=
Subject key identifier: 62:BE:18:73:6B:59:CA:5E:33:39:AE:2C:5A:94:14:4E:E5:CD:A8:B0
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 0194BCA9E100D3C74A936C9F5404BB06DD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number: 114B
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: OIDmEPbDXYESb6L8W110fitW4aA.roa (hash: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=)
2: OuQJP3rTcu0if4kJ5A5ZWqxKYpo.roa (hash: UN46ctiu4ND9IXGCd4EhP/dQ+ESw5QeLedCQ9yxaLnU=)
3: WV7QPmFglb32ubsYCfgK2rSXhGk.roa (hash: 7jclXGuRVqisqCezIaon+r4NXFS6nrK/O3nscYXGo0k=)
4: WYkwsfl1LrYxcZc4hOn_dwqrnKU.roa (hash: OFI3Jc8HI7chg6jym9Pd2h5sq7FHfkNT1WJbvujMSAY=)
5: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: SNBsFooONQ+MD29sSpN6y0XaFc5RO/kyXov3YKVUlgs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e1:00:d3:c7:4a:93:6c:9f:54:04:bb:06:dd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=62be18736b59ca5e3339ae2c5a94144ee5cda8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:97:42:5b:a3:8d:a3:c8:71:c8:ad:b0:24:
37:e8:40:4a:17:8f:38:12:59:15:40:a4:c3:f6:a0:
4b:47:3a:3c:1e:05:95:54:76:2b:a9:34:a0:63:d2:
69:e7:7b:f4:30:02:08:45:ec:7f:6f:83:d3:c6:3e:
0c:90:42:7d:a8:5e:88:f8:13:08:a1:63:4a:8d:39:
58:8b:cc:11:34:47:58:4b:43:37:ca:b4:19:62:f1:
73:10:8f:d5:7a:47:75:eb:4d:c5:cc:ff:d4:77:ad:
3a:6f:83:5c:d0:6b:c6:8e:6c:6d:5b:e4:2b:71:aa:
ad:64:80:03:74:4f:b5:bd:b7:26:95:82:e8:6f:a2:
3c:c0:0b:a8:d2:1f:a3:89:37:5b:28:88:6e:d1:cc:
45:00:db:3e:1a:46:4a:48:e9:bf:31:09:34:e8:d5:
7e:a1:36:33:13:08:2a:ec:d9:64:c0:a2:3b:4a:04:
1a:e5:14:a6:b3:32:70:b9:d1:08:c8:3a:ec:65:8e:
ae:b1:ab:4a:91:7d:5b:09:a5:28:67:5a:50:36:6c:
2f:a8:e0:db:53:67:2b:47:62:95:d3:6e:1b:37:a4:
21:89:b2:72:95:52:e2:cc:e8:8b:b0:40:b3:e8:0c:
d9:90:e9:e6:97:8b:c7:66:d9:30:39:28:df:28:61:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:BE:18:73:6B:59:CA:5E:33:39:AE:2C:5A:94:14:4E:E5:CD:A8:B0
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:04:20:7f:a3:b0:d3:54:fc:89:43:be:26:43:7c:9f:dc:
39:78:6d:26:75:fb:7e:32:6a:d0:97:3d:84:5a:e9:86:67:7f:
af:33:27:43:5f:65:d4:69:df:09:a3:36:63:e3:5f:fd:db:e5:
47:27:fb:b2:7b:17:4e:a1:75:c2:aa:37:4e:a7:6e:04:fc:1f:
44:92:0c:77:37:4c:48:55:0c:39:d2:77:14:8d:73:00:de:d6:
6f:9c:93:9f:c4:1b:65:4f:09:d7:e7:ee:0a:79:33:d4:70:c4:
3d:13:d2:8b:ee:72:e9:41:11:c6:b0:96:bd:7e:c9:60:4a:de:
94:43:15:df:fe:34:1b:7f:bb:aa:1d:9e:74:a2:1e:74:3b:38:
b0:2f:08:29:f0:1c:12:63:d4:a0:c1:fc:c2:c0:ba:36:3c:11:
ab:86:95:a5:c2:7b:04:4d:53:9b:88:d1:41:01:ec:4f:bf:61:
55:24:3c:78:46:2b:17:74:00:57:1a:6a:c5:e6:5c:17:dd:84:
3f:ff:4c:ff:db:10:1f:40:cc:f1:f1:5a:6c:a7:ee:0d:f1:64:
6c:be:38:ad:cb:b0:24:e3:b4:59:7e:31:81:d1:ea:53:2b:b4:
1a:eb:22:45:83:f9:db:c2:a3:c3:73:a9:0f:29:c8:39:fb:7f:
27:46:d3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client