Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
File: I3_mTWhI-AEgq-aV4x-sScpdB_M.mft (raw, json)
Hash identifier: bLeyHBK/yJZAWOJDX39ZasyKAbfpKM4ZAm6Ljf7a12o=
Subject key identifier: 51:56:0F:4B:BE:C2:99:A1:3B:4A:61:4C:AD:41:C8:C2:57:53:BF:AE
Authority key identifier: 23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
Certificate issuer: /CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Certificate serial: 0194BC3BC863AADE1EB7A644A524F38B93E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
Manifest number: 0129
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: FR-DdZ6l_dWRg1pnEEZHKy-TtaU.roa (hash: rix3FP+IdraYXi5amLMY1G7LW1GF5A8pUKN7Wo60tBo=)
2: I3_mTWhI-AEgq-aV4x-sScpdB_M.crl (hash: p2B8kKayJyla/xGb5iIOMetR1sZuvzlc7I/JmZIHgnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:63:aa:de:1e:b7:a6:44:a5:24:f3:8b:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237fe64d6848f80120abe695e31fac49ca5d07f3
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=51560f4bbec299a13b4a614cad41c8c25753bfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:91:92:83:fb:e1:fb:74:6d:2e:a1:d1:ba:23:
e5:63:76:07:12:f2:41:45:a9:a8:db:08:f7:18:7a:
01:fe:c6:5f:3f:36:5b:ca:d1:c6:49:a9:65:19:8c:
9a:2d:8d:2a:b4:8f:d9:30:0d:eb:d1:2e:58:d3:42:
e9:17:58:96:1a:45:4e:83:3c:36:98:68:5d:11:3c:
c6:ea:7b:03:e5:d0:9c:77:fd:63:0b:c5:5f:19:06:
9c:48:db:a8:d7:9a:44:82:ed:54:45:5e:20:b7:17:
45:4d:b1:4a:9f:d7:42:60:65:49:6e:9d:74:53:ba:
83:f8:f3:80:96:5e:e2:ad:ce:01:bb:b5:de:3c:a8:
24:08:71:24:e6:da:2e:0a:0d:7d:82:4b:b4:32:7e:
a6:eb:52:a5:84:c0:23:76:9f:8c:89:0b:15:c4:dc:
ce:b8:82:a6:8d:27:47:8b:a3:35:b6:f8:f8:9d:32:
97:ad:dd:46:76:b5:22:e3:70:46:77:21:28:bc:0c:
05:e0:6b:80:15:26:98:f3:14:40:73:8b:48:48:7c:
f9:1b:a2:ab:ac:37:bd:52:62:61:ca:c5:91:f7:f1:
2c:43:16:be:b6:a9:a3:13:3c:89:15:f1:8b:bd:d2:
d1:9f:32:90:67:21:ce:94:58:5a:b7:c8:73:6e:0b:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:56:0F:4B:BE:C2:99:A1:3B:4A:61:4C:AD:41:C8:C2:57:53:BF:AE
X509v3 Authority Key Identifier:
keyid:23:7F:E6:4D:68:48:F8:01:20:AB:E6:95:E3:1F:AC:49:CA:5D:07:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3_mTWhI-AEgq-aV4x-sScpdB_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/70c39f-5131-4002-b1fc-fd213722bff9/1/I3_mTWhI-AEgq-aV4x-sScpdB_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:66:7c:07:89:5a:42:06:8d:63:ac:60:7f:91:3f:a8:a7:a9:
df:33:b7:93:8c:b5:fc:15:90:db:32:0c:50:84:3a:64:37:7a:
f6:38:c2:78:de:16:c8:1b:af:be:aa:c2:a6:57:5c:e8:64:9b:
c8:31:60:49:33:be:32:df:eb:1d:b5:8e:b1:d3:82:0b:b2:d8:
53:5b:51:3c:89:1e:ea:e9:fd:f8:e0:26:69:a1:86:2f:5a:2a:
88:a5:32:87:d1:2c:2c:17:ad:a5:b5:92:8d:0e:c1:10:d2:3b:
e4:b8:6e:67:ca:2e:fc:39:b1:8c:29:12:d3:1b:d8:8a:11:4e:
13:18:b8:73:38:6c:46:1d:0b:de:08:4c:c1:5a:b8:a0:fc:5c:
1b:61:42:3d:12:d6:84:58:fd:d7:fc:d9:64:79:61:be:cd:d4:
c2:0f:1f:4e:44:16:f9:2c:f8:35:a5:47:e8:56:7b:7a:d6:71:
27:f9:c2:9b:cc:4d:f1:d6:55:1e:16:62:77:73:4e:38:f0:0a:
d7:73:ed:b6:b4:1b:cc:82:49:f0:8b:bb:48:87:26:ad:62:4a:
53:90:79:6c:75:5b:68:79:5a:58:4a:df:f9:5c:37:a9:52:74:
bb:a4:a7:a7:12:80:84:3e:90:f9:71:86:e9:91:4c:d4:67:f6:
3a:bc:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:04 2025 by rpki-client