Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
File: iqR9CPyFIT30_aLPlWG45ovCc9w.mft (raw, json)
Hash identifier: NaLZ4Z57ak8nYsm/40IuJAA14ehJTpx3bQgzzqrVG3Q=
Subject key identifier: 7B:26:AC:30:31:B2:1E:23:27:72:17:65:D2:21:C7:FB:53:B8:6D:BB
Authority key identifier: 8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
Certificate issuer: /CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Certificate serial: 0194BD85A65928E2B1FCD836A5CD0839151E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
Manifest number: 08BA
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: etKj8JxSADxAtwhWdtAcvp8APJo.roa (hash: hbDx1XXs3wCIknS0MzRqrwmZihS636bz/OW9FAqx/a8=)
2: iqR9CPyFIT30_aLPlWG45ovCc9w.crl (hash: hlok3ZdZd4vnjXyLNcqfLb81cNDZ0SGVdaYCKmRxEys=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a6:59:28:e2:b1:fc:d8:36:a5:cd:08:39:15:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa47d08fc85213df4fda2cf9561b8e68bc273dc
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=7b26ac3031b21e2327721765d221c7fb53b86dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:36:e1:70:d9:70:f6:ac:85:98:4c:50:56:
03:d4:9b:4c:98:62:b1:79:44:d7:68:3a:07:eb:f5:
80:7b:b7:df:9a:dd:f1:dc:4e:6b:8b:36:54:60:94:
1d:94:fc:1b:63:a9:11:a0:2f:0f:13:25:69:4c:f9:
c4:02:f8:f2:fe:5f:ab:84:62:11:ef:ef:5b:23:0b:
58:2f:be:bd:f2:99:f0:d7:ff:31:5b:88:e2:7c:50:
61:b1:20:0c:ed:dc:f5:02:85:a9:3b:24:19:00:2c:
52:64:90:a4:3b:2f:73:8c:6a:6f:d6:6d:ae:9b:13:
b4:3a:84:ef:ff:76:63:4b:3b:72:8c:65:6f:c2:28:
9c:04:6c:0b:e4:38:c8:8e:a5:29:a2:58:a1:78:0d:
c9:51:b4:b1:73:29:34:5f:d6:37:68:4e:39:9a:5c:
98:c2:15:b1:0d:bf:4e:0e:1b:dc:4c:9a:15:52:3a:
d9:f8:6e:b8:84:7a:ae:05:fe:da:3c:e5:5a:da:a5:
9b:d4:b8:04:e8:33:55:4b:43:d6:bc:a5:2c:3b:4c:
aa:67:96:ba:f4:0e:3b:b6:ef:19:0a:80:34:ea:89:
d6:bd:37:c7:c6:ea:2d:0a:3b:ae:42:9b:16:2a:87:
af:9b:42:0b:0c:47:d8:6e:5e:db:ff:f3:90:e9:91:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:AC:30:31:B2:1E:23:27:72:17:65:D2:21:C7:FB:53:B8:6D:BB
X509v3 Authority Key Identifier:
keyid:8A:A4:7D:08:FC:85:21:3D:F4:FD:A2:CF:95:61:B8:E6:8B:C2:73:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqR9CPyFIT30_aLPlWG45ovCc9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a1f0a0-439d-4266-a3db-e6b1e986f95f/1/iqR9CPyFIT30_aLPlWG45ovCc9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:50:7f:f6:90:b7:8c:10:1c:23:9a:7f:bd:aa:f2:a2:62:b9:
ae:36:d8:6c:1d:14:b2:5d:d8:87:60:56:03:82:49:2e:f0:fe:
c8:ef:59:35:2c:3b:e0:e8:55:da:10:03:b1:c5:93:0f:98:6f:
e0:7b:95:f0:e8:75:e8:1e:0f:a6:d7:59:bb:36:62:27:24:f8:
fb:8b:b0:10:ea:b7:ef:4c:62:c5:9d:de:ca:94:1d:fc:b2:a8:
a8:27:09:2f:f4:16:97:5a:cb:68:17:c6:1f:72:05:05:91:96:
2d:73:a5:2c:3c:d3:05:f9:3f:ec:b9:1a:1c:7c:32:c2:00:22:
5e:9d:8e:49:d0:f5:3e:a3:f1:ee:b4:10:e0:3d:4c:dd:e6:10:
b0:89:0e:5e:1b:f6:3e:9d:d5:ed:8d:73:e8:f5:8f:ea:8f:e2:
9a:f1:e3:51:b1:fa:99:f0:21:fe:8f:29:42:f5:5c:0e:9a:fb:
63:c7:c1:99:0d:5b:55:df:17:2b:d9:70:de:ab:d0:44:88:f4:
53:30:13:bb:5c:44:fd:71:b4:13:83:b3:3f:1d:e9:f5:7f:3d:
3c:95:c4:a6:fc:2d:18:e9:c4:94:03:40:c8:c2:81:a1:23:8a:
4d:60:bd:20:39:91:0a:9c:6c:53:e0:e3:1c:91:1e:c3:ff:27:
af:75:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:33 2025 by rpki-client