Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: T0T73ruzsqOoCyqm5r9TpViPjLLIT+q6g7ZeYRAJLQI=
Subject key identifier: B5:E4:64:83:AF:84:40:55:4F:19:C7:E7:27:25:51:D8:74:96:7E:2A
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 0194BD4E6DB8E3CF1298E6A7E73086C6D156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: a5RpokkAwUqaoSa7yHXboiJR2vr8O3tWJ52PubNzFG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:b8:e3:cf:12:98:e6:a7:e7:30:86:c6:d1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=b5e46483af8440554f19c7e7272551d874967e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:cf:e9:55:f6:ee:d7:4e:02:6d:31:68:d3:
b3:71:57:21:c5:c1:3f:80:23:e0:3d:d5:72:2e:53:
a5:e8:27:65:5e:f8:3c:b4:de:cc:31:92:7f:c1:33:
9b:8a:f6:c4:56:d0:13:aa:25:5f:c3:04:1f:38:ce:
f3:8c:37:4e:2e:68:dd:11:b9:f4:0a:c6:91:aa:dd:
a9:f5:ed:3a:2a:5a:3c:81:13:2d:76:88:8d:d3:23:
e3:da:78:fd:89:eb:9d:bd:f8:bd:09:e7:2a:7b:83:
fa:a3:d4:da:96:e0:c9:1b:2e:1f:89:77:42:31:c1:
54:04:60:c1:85:0c:5f:28:ab:48:98:03:b2:9f:dc:
78:2f:9c:38:1d:11:58:16:5b:42:ab:aa:00:89:97:
60:cf:22:cb:18:3c:5b:ae:9a:43:3f:ca:84:4f:ec:
cf:68:b4:46:5f:1a:3b:9a:4c:8a:26:ab:c1:17:a0:
17:02:f0:f8:ba:44:d8:d1:f3:4f:da:f4:31:8b:89:
e1:d8:76:aa:4f:24:10:f7:4a:ee:3d:e1:9d:6e:16:
57:d6:ed:0a:ad:08:b8:1d:38:ed:3d:44:9b:ed:76:
16:3f:0b:9e:40:8b:88:45:dd:b8:1c:7d:d8:0c:20:
48:d7:65:65:86:a6:56:9d:69:ff:f1:a3:ec:18:8c:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:64:83:AF:84:40:55:4F:19:C7:E7:27:25:51:D8:74:96:7E:2A
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:15:0a:60:1c:66:ad:a8:b4:e8:69:c7:41:74:f8:d7:5e:e6:
d6:72:62:b1:02:ed:fe:30:5b:83:8b:17:ea:d6:55:e3:8c:89:
6e:c2:ce:0b:8e:da:81:19:fc:79:ad:c3:b4:2f:a2:71:08:2c:
33:85:7b:28:3e:c3:ae:74:89:a6:69:b9:29:bd:ee:c8:06:62:
49:fc:46:ba:06:77:fe:23:d0:fc:7e:30:10:d5:20:8b:45:e2:
09:39:c5:cf:48:ed:54:5a:84:d1:f3:da:3d:fd:0f:22:ed:dd:
ed:20:dd:04:9b:08:74:8c:4a:c6:0c:e6:75:b9:c6:d0:d0:0a:
7b:a6:15:ca:e6:f0:a1:71:30:1a:ff:79:ef:7f:98:83:80:ea:
b2:4d:ff:bc:13:8d:ef:8a:02:1e:8a:25:e4:58:2b:d3:49:c5:
8c:bb:ea:28:1c:2a:4b:d4:16:97:70:53:18:c4:20:38:b3:03:
a9:18:27:8a:00:24:83:31:1c:5a:8f:72:23:7a:61:f4:d8:af:
fe:6c:25:35:76:cc:ec:4d:c2:58:7e:1e:0d:9e:0e:fe:74:04:
b8:61:76:5b:75:9d:88:b6:87:5d:ad:4f:1b:23:9d:c2:b7:96:
e3:00:dc:5c:72:55:ae:3f:08:4d:e0:62:2e:03:88:a3:53:ec:
c0:2b:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:54 2025 by rpki-client