Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: qDb+XX7YP9AhVUD6he9LwHPCsrdR1cYa6LNtvp7iVnU=
Subject key identifier: 63:28:0E:91:7E:B5:5C:2D:2B:A6:27:0B:81:40:6C:96:54:EB:06:5F
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 0194BD8591CC6CD416DDAD3EB89949CFF3DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: ot1f/HYjASofEFDbR0jt2CnalThziwiWwPbLIIOeFaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:cc:6c:d4:16:dd:ad:3e:b8:99:49:cf:f3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=63280e917eb55c2d2ba6270b81406c9654eb065f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:03:35:10:69:f1:d9:de:62:07:61:d4:12:
26:f8:56:e0:74:e2:f6:3d:d2:94:87:fe:dc:0b:16:
03:a9:3b:5e:d5:26:93:12:14:1a:3d:4e:c8:3f:a4:
d0:5a:81:7e:e3:81:c2:42:28:e0:9a:aa:9a:96:d2:
67:df:76:f7:60:93:e0:62:4e:b1:68:27:10:57:25:
4c:a2:74:10:54:1e:e2:5a:69:c6:54:1e:48:a5:c6:
dd:f8:2c:43:35:16:7c:00:4c:44:15:a7:c5:06:08:
d8:ee:60:e6:27:65:7f:2e:eb:70:b5:ba:8a:40:ce:
df:a0:fb:24:15:e1:89:d0:bb:6b:9d:95:00:c0:a2:
e6:f9:b3:f3:b8:9b:75:a3:40:45:15:39:fb:08:7d:
1d:dc:5a:58:4e:d7:b4:aa:ed:7f:16:b2:f4:29:2d:
e1:74:3b:96:77:df:00:8e:8b:9b:4b:be:d0:d0:3c:
8e:c7:b8:20:1f:0b:23:0d:54:3f:a1:83:a8:85:05:
fa:e2:52:6f:fd:c6:23:ff:17:5c:32:8f:7a:5e:39:
f3:f7:97:eb:fb:e0:ea:8b:55:58:26:a9:e2:f9:38:
7f:a3:d7:64:7c:d3:f6:7f:8e:3b:e2:f2:3e:e4:3a:
a3:b4:b1:c4:c4:8e:3d:32:f3:80:1e:9c:76:5a:70:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:0E:91:7E:B5:5C:2D:2B:A6:27:0B:81:40:6C:96:54:EB:06:5F
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:86:75:c6:58:90:13:dc:f1:2a:c7:83:28:9d:a0:aa:23:79:
15:db:5f:dd:bb:2c:82:b8:9f:c8:40:dc:75:d8:fa:69:72:8b:
f1:22:63:b6:e7:f0:fc:18:6b:37:1d:52:13:11:3d:ef:7c:94:
4a:2a:3d:c5:40:08:b9:bf:2b:21:65:39:6c:56:1d:de:6d:dd:
0b:8e:23:e1:7d:3d:78:78:fb:19:2a:89:01:6b:bf:ae:7e:b7:
ba:99:7f:74:21:be:c4:a9:65:e2:39:44:c6:22:ad:85:bc:38:
bd:cf:39:3b:c3:78:fa:db:d0:e0:af:90:ee:6e:80:0d:25:16:
2f:91:79:f2:d6:24:f5:90:c6:78:2c:6d:8a:15:65:17:ec:4a:
8f:c2:f0:78:ef:df:b4:7f:5c:d7:9b:44:2b:05:e7:c8:bc:b3:
ad:d6:db:af:e3:d3:b6:7e:d6:35:c9:eb:0e:17:d4:df:56:17:
a7:f2:62:c7:33:fe:89:3e:38:ff:da:07:62:cb:e9:3e:4a:b7:
25:7e:18:d3:eb:24:13:e6:6c:6d:46:e2:bc:7a:a6:7c:8f:d6:
8f:29:e7:40:ab:87:cb:9f:a9:d3:ba:1c:3f:79:ea:e5:aa:2f:
98:64:14:d9:29:13:27:d6:9a:da:9c:72:30:9d:63:a7:86:fa:
f8:4c:5b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:25 2025 by rpki-client