Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
File: IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft (raw, json)
Hash identifier: jWaCzNum3Pu/faawh+6RBlSohOH8IvIzfFMQjbBvtUg=
Subject key identifier: 3D:59:F0:9F:81:F3:CB:78:46:6B:34:FE:5E:90:04:CA:66:5C:95:08
Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0
Certificate serial: 0194BD8527304F27CF14AFEABF811F3A9B12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
Manifest number: 0144
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl (hash: 6cLJiXol0kW7Sohvc+twzFBVwMheXlSnzXvfSipXt70=)
2: UhAz9MFvMvHhcsanrMhKMnsnk8g.roa (hash: r9jUBDvsXmF/Cp2cTaPW5/auM8Oojq92LndCKcjtAzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:27:30:4f:27:cf:14:af:ea:bf:81:1f:3a:9b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=3d59f09f81f3cb78466b34fe5e9004ca665c9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:29:f4:fe:da:66:df:7d:90:e2:8e:28:b0:
73:fe:a4:b5:07:16:aa:e0:4b:7f:39:06:08:9f:fc:
af:08:db:f8:c8:70:e6:2f:a4:4a:b8:d2:6c:b9:3f:
9f:86:d3:6f:4a:20:a7:ac:1c:7e:ab:45:f2:12:fa:
59:07:35:ed:61:b9:0a:8e:16:bd:14:cd:a2:a3:ab:
05:49:1d:84:c1:64:03:06:fa:bf:f2:bf:2e:95:e9:
e4:9f:a6:1f:da:84:e0:28:d6:88:5b:d1:a6:31:8b:
e6:7a:59:a6:eb:2d:73:eb:55:c1:81:8b:ad:93:ef:
a3:01:0f:94:a9:7b:48:f9:b2:93:34:dd:df:ee:72:
7f:d5:65:ce:97:d2:53:88:ed:52:76:00:52:16:60:
a1:b7:59:01:30:be:38:45:75:5b:04:b5:66:22:93:
54:90:da:36:65:6e:6d:05:ec:a4:97:c9:81:0a:ca:
ae:fe:90:e2:1e:c2:4f:de:53:c7:65:b5:cb:92:d5:
c6:29:c3:b4:29:7b:a3:3d:79:74:c8:da:c4:7b:ea:
de:f9:c7:03:ea:51:ba:b3:c4:1b:72:7e:cc:fe:33:
6c:8b:70:8b:df:7a:94:5c:17:b0:5b:03:10:67:94:
ea:9c:de:3f:93:4f:1a:6d:5f:45:43:72:e2:c3:01:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:F0:9F:81:F3:CB:78:46:6B:34:FE:5E:90:04:CA:66:5C:95:08
X509v3 Authority Key Identifier:
keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:11:45:6e:6e:a6:bf:c4:98:c5:f3:73:94:59:ec:2c:da:4b:
93:dc:1e:22:de:bc:0e:6e:54:b7:4b:dd:2c:5c:3e:03:2c:19:
21:15:8c:b6:17:91:7e:50:61:be:b2:c7:1d:04:81:c6:db:f4:
68:a3:8e:c7:5d:2a:84:ae:68:a7:cd:3d:25:07:48:ea:9b:0e:
c6:f8:20:4f:23:c5:4b:fa:b2:74:40:cc:c8:1c:fc:61:f2:c9:
12:8a:52:6f:c2:79:e8:f0:a5:3d:d5:f8:1d:7d:e2:12:1d:9d:
47:ed:e7:b0:f9:47:3d:26:ec:72:3e:d0:a7:ee:59:16:28:0a:
14:80:ae:2b:f2:83:2a:e6:d0:c3:d0:65:2b:e5:af:75:4f:64:
28:6f:40:e6:27:87:ef:d1:22:a7:84:e1:4e:36:47:d8:60:9c:
0b:e8:85:0a:f7:d7:94:c1:1d:5c:d9:93:92:3e:84:1a:75:8b:
af:de:49:e0:69:fd:9f:eb:3d:1a:df:14:3d:40:24:4c:14:59:
23:20:19:af:16:0f:ae:45:6a:81:af:12:b4:67:f8:22:e5:5e:
f0:22:3e:d3:74:ec:7d:17:96:15:0b:1f:e5:6f:dc:92:39:88:
b9:8a:f2:eb:e3:2f:29:8d:05:8a:f3:36:75:0d:c3:aa:85:fe:
aa:6a:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:44 2025 by rpki-client