Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: DY0gXRRrLYZ3VxlSf0NxyGzSkXRzfYq9ENrxMe+GVP8=
Subject key identifier: A6:A2:CC:1C:B8:DD:91:70:04:7A:28:84:D2:31:23:ED:78:37:29:42
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 0194BC72E4C019779590D8D809463EFD56AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 018A
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: 48SAL-XLUksWWK1voy4rKInz7oY.roa (hash: gFJO835mNcJuKRXk34iwBhwCN0pZ40KaHdrECvT9LmA=)
2: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: G1F/CJV15ukltYoF4F0mu3kTWAoL+QwSmXZmGO7P4LE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e4:c0:19:77:95:90:d8:d8:09:46:3e:fd:56:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=a6a2cc1cb8dd9170047a2884d23123ed78372942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:93:f0:fe:81:80:c7:ab:73:67:09:2b:dd:
03:4c:0d:e4:36:a3:dd:20:bd:f0:4c:fa:cd:fa:e7:
08:f8:f7:da:c7:6c:49:01:d9:23:05:f2:24:fb:fc:
e8:69:08:17:fb:4b:d8:b6:30:92:ad:14:c1:44:25:
eb:45:3c:ec:65:3a:ae:97:08:3a:fc:7c:58:c1:86:
fd:f4:0d:07:8c:fa:59:a0:47:80:ab:b3:3b:19:ac:
47:4b:e6:5b:31:99:10:37:93:a4:71:d6:90:e3:22:
be:c6:63:a1:ae:6a:e7:90:93:18:2e:27:ae:ce:10:
82:31:41:fd:71:2f:bf:d3:16:70:76:b2:e7:49:e2:
01:3f:f7:8c:39:09:a9:00:1f:3d:9b:e7:41:fa:bd:
34:9f:7e:77:96:45:40:91:79:aa:5c:be:13:bc:b3:
f3:45:9c:77:56:73:68:b6:57:08:ca:f9:2c:bc:fb:
ee:b7:18:00:be:15:ad:f4:41:8a:64:77:f1:78:30:
fb:08:52:a3:fd:25:2f:8f:23:67:c6:9d:8f:7c:84:
a4:d7:b6:d8:91:0c:b6:bd:da:87:27:c1:c4:55:6c:
b0:11:68:a8:ba:97:93:21:14:4c:c4:21:c6:91:1c:
3a:9d:48:71:cd:99:32:2e:2a:1e:c4:37:c3:c8:56:
f5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:CC:1C:B8:DD:91:70:04:7A:28:84:D2:31:23:ED:78:37:29:42
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:60:99:45:1c:88:0a:3f:e6:0d:ad:f7:84:6c:68:17:8d:97:
fb:89:07:86:37:d8:d8:d4:5f:94:d4:91:4b:86:5b:93:18:4e:
bd:99:0d:78:86:25:55:c1:d4:97:67:73:a2:cc:b9:a4:61:88:
a4:11:c9:90:df:25:8f:90:e3:df:52:4b:84:d8:2d:94:49:21:
41:5b:c9:21:f7:c4:92:22:32:84:6a:6b:53:b3:0e:85:5d:11:
0f:1b:16:7d:6a:58:ab:c4:77:bc:aa:e7:33:cb:cf:72:6e:18:
c3:a8:a8:7f:dc:82:74:ce:84:ca:b9:d2:19:2f:76:81:2d:b3:
a7:26:b6:51:6f:2b:b8:c7:13:18:4a:17:7e:60:ac:70:88:ab:
d1:7b:f7:68:c1:86:c5:3b:80:1c:22:e7:0b:62:b2:67:e1:69:
01:5e:c3:2b:fc:de:1d:5f:f9:48:7f:96:2e:26:0b:fd:e1:dc:
64:bf:77:16:f0:d4:39:30:b8:7a:4a:6e:d8:44:aa:0e:f8:62:
e3:10:41:2a:eb:0d:48:06:66:46:ad:bc:80:68:a2:80:1a:d5:
69:15:d1:2a:01:b3:56:ba:6f:6f:36:b6:81:1c:52:45:26:39:
b8:5e:0b:8d:68:73:58:c6:3c:33:78:6b:57:8a:1f:80:ed:fa:
2f:f3:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:06 2025 by rpki-client