Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: gA6GtECvprlY/t8IPEcoERvPXbJ5EJqFrOxK8Xa06lw=
Subject key identifier: 06:3A:D6:BE:EA:53:46:FE:73:66:C2:37:18:7E:AC:5E:10:1E:C2:7B
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 0194BD176B5718E61D51DB6B43F91DC4C306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 0580
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: b4HbgGFNvJE4wYpLf9yqpu8yiNlOvFs/fNfBt6RH1D8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:57:18:e6:1d:51:db:6b:43:f9:1d:c4:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=063ad6beea5346fe7366c237187eac5e101ec27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fe:f2:33:48:92:ba:08:4e:84:23:f6:34:75:
e5:38:99:4c:fa:c1:cd:f8:56:e8:28:d2:3b:ce:8c:
f5:cf:59:7a:b5:13:06:28:c2:bc:82:d2:b5:6c:1d:
cd:fa:3f:cc:a6:b1:cc:a5:0b:8e:1c:6e:f4:8d:90:
b1:c1:c6:03:60:d8:30:2a:6b:7e:2b:3f:a8:12:c5:
62:58:a1:9c:e0:51:1b:6b:1c:da:16:85:ec:60:bf:
65:b4:70:db:06:1d:a0:0d:b4:d9:95:a5:bd:db:47:
0c:88:78:d5:7f:cf:dc:a5:8c:13:82:78:d7:a1:36:
10:14:6a:06:04:40:9f:fc:9c:ce:65:e2:12:31:76:
41:11:ea:23:f4:d5:be:b9:4c:a2:4f:87:af:90:ee:
9b:82:a3:01:8b:89:35:1a:bf:57:7f:d7:ca:47:d6:
01:49:ca:f2:55:44:cd:d2:b3:44:cf:dc:37:05:08:
b9:36:6f:70:9d:bc:b9:c2:32:54:02:1e:0d:76:20:
aa:09:13:f8:6b:e8:24:aa:19:98:5f:43:22:f7:5d:
fa:b2:cf:e1:10:cb:13:54:3f:5a:f8:cf:57:9d:0e:
71:b2:70:2c:33:0b:95:15:7d:a4:29:01:c2:6d:ac:
96:8a:3c:5b:48:2c:4d:90:09:34:d9:76:22:c3:c5:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:D6:BE:EA:53:46:FE:73:66:C2:37:18:7E:AC:5E:10:1E:C2:7B
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1a:82:d5:0c:9d:ff:10:d0:10:9f:5f:0e:b6:4c:18:8e:c6:
82:b3:28:5d:5a:88:05:5d:f6:ec:a2:37:63:5d:45:51:58:e9:
28:ef:a9:1e:bb:ff:df:2e:07:78:92:74:94:fb:69:4a:cc:82:
04:f7:72:e8:e1:7b:db:20:f8:65:2a:df:71:c4:0f:e6:d1:89:
fd:c7:35:0b:cf:57:d1:11:8d:b6:51:74:e2:b0:c9:ab:52:e3:
20:0c:f9:43:2c:2f:73:78:b1:80:00:2f:78:52:ec:a8:9c:e7:
88:b7:57:77:f1:ca:1e:a3:9e:9b:5d:bb:d8:70:13:47:01:06:
72:5e:42:4e:f9:d3:ed:41:aa:09:54:8f:97:bb:2b:b8:6a:2b:
ed:0b:29:cf:76:d0:b1:47:3d:b6:84:3e:cc:87:f7:b3:9b:95:
52:f8:cf:14:56:e2:72:43:f7:5b:84:9e:1b:0a:11:75:c6:5c:
80:80:35:3d:b5:76:b1:ce:1c:91:ea:37:bf:57:a5:9c:14:1a:
21:d9:ff:4d:ad:7a:6f:f1:e2:86:4f:f4:52:26:91:80:bb:7c:
a2:80:db:07:eb:a9:75:38:3a:84:ad:99:ab:4f:c8:d9:8d:3d:
8a:d5:f5:9e:88:dd:a6:c7:27:02:a2:92:9f:6d:3d:95:eb:a1:
36:a4:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:56 2025 by rpki-client