Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
File: icPJKk4dT-iFcr-mjJhcMeM2jII.mft (raw, json)
Hash identifier: /eEoCV05L8N7MAgC6j9MTCeU6tIwXIjiZjC3KrxFBh4=
Subject key identifier: 3A:D9:BE:17:5E:35:8A:F7:B0:3D:B7:25:C1:36:18:8A:7D:61:04:51
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 0194BD8551297AF4D351DB5C83E45FD4888C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: icPJKk4dT-iFcr-mjJhcMeM2jII.crl (hash: MOZNmDAQ4y2MccgVHgJ38/n8m5OpA4/nKUYbCAdf+BE=)
2: uG0bbd5tt3NgwikuFSWmmBSnkPk.roa (hash: 9GLNcRS0cRuCxpIlkyWxe5Eq6HIQuySGMWDkllrpjZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:29:7a:f4:d3:51:db:5c:83:e4:5f:d4:88:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=3ad9be175e358af7b03db725c136188a7d610451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:a3:86:21:df:91:88:dd:95:13:30:83:96:
c6:02:88:6b:f5:58:57:08:7b:f7:07:86:72:b0:ef:
d8:f6:bb:3c:c5:30:3d:b4:52:b4:c6:9a:49:25:84:
e1:66:61:e2:70:7b:1c:63:9a:e7:71:54:99:ce:e0:
1d:8b:b4:d3:49:02:84:0d:8c:b8:7a:a7:f1:cb:07:
f5:46:70:2b:05:83:34:4f:32:7e:2b:4c:04:3d:22:
f4:46:91:6a:04:82:8a:ce:5d:2b:41:ad:ff:10:a7:
cb:73:3c:36:9b:73:de:ad:88:36:e1:d2:62:ad:25:
e6:bf:6d:36:af:38:0e:37:7d:71:6e:d3:bc:8e:7b:
33:6d:24:40:78:46:f8:93:25:b2:39:c1:05:2a:c9:
48:71:aa:88:58:f6:ff:d2:dc:1e:f4:ad:f4:c0:f2:
18:30:9e:ee:52:68:0c:0d:c8:39:bf:15:a4:a1:39:
fc:61:c1:a3:6e:76:fa:50:04:b0:fc:bf:8f:51:c8:
17:ed:61:ed:12:0b:8a:e0:ae:f7:03:4e:49:f3:00:
a3:a2:1b:77:2e:73:9a:75:5e:73:e8:a1:f8:c7:7a:
1c:39:a9:e8:36:c7:ba:3c:91:be:35:22:f8:f5:64:
53:6b:2c:dd:ce:a3:07:f8:78:26:fc:70:f9:18:ef:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D9:BE:17:5E:35:8A:F7:B0:3D:B7:25:C1:36:18:8A:7D:61:04:51
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:09:c8:ca:65:4f:cd:91:ff:b7:17:4a:f3:e4:64:d0:54:04:
5b:22:85:f6:17:07:d7:8a:a8:14:0a:9c:7b:49:77:33:bc:aa:
0b:62:9b:69:75:29:92:94:bf:72:0b:ae:01:88:69:a0:59:13:
c9:ca:e9:ad:da:55:75:01:b1:e9:1a:60:5c:9b:d1:c6:a7:cb:
3e:8a:fa:06:7e:2e:6f:97:18:91:85:75:43:64:3e:9e:71:69:
c6:96:c1:6f:3d:8d:97:f0:44:6a:7e:16:7b:e3:c8:2a:a5:b9:
7c:ab:7b:b1:89:69:3b:c6:73:d7:8f:74:e6:1a:76:4d:7d:e6:
d6:43:cb:7b:3c:62:5a:e9:6a:33:b6:e0:c6:bf:86:fc:ce:2d:
59:0d:32:85:fb:f9:01:7f:11:32:a8:25:af:d0:cc:22:84:30:
1b:60:f2:72:4e:74:87:44:f5:a7:a6:5d:38:3e:3f:0c:24:23:
41:7d:d6:43:6a:d7:24:81:4c:22:db:75:c8:1e:ed:21:5f:02:
28:4e:01:35:78:0f:6c:b5:97:22:6d:9a:e8:50:04:83:c0:a9:
94:3d:f2:9b:d1:5d:54:fb:1e:f9:15:ad:56:6c:82:5b:06:48:
03:0c:dc:7c:a6:c1:b3:15:1e:b2:4d:26:8e:5c:97:56:1b:1d:
b5:7b:92:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:34 2025 by rpki-client