Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
File: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft (raw, json)
Hash identifier: B8JpampLTGLmMFBshu+ioPSGYsoYKOj2rjsQ4Zn7fh0=
Subject key identifier: 25:D1:19:35:94:D3:2A:D9:6A:E5:DB:DF:00:55:4D:78:8A:B3:E5:71
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 0194BBCEBDEEDBE468C2426452C14185DAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
Manifest number: 0EDA
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: 0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl (hash: KhwFIIBXyV/zekzE9gYlhp0pJw9PSRDJyaAEmpgmW2U=)
2: rfxK95wCJYlz8bBxZevQEHg20gE.roa (hash: 8l01FF6TVdT6B24/91ZO6lRY0qxUT4iiEOhJmZiX1rM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:ee:db:e4:68:c2:42:64:52:c1:41:85:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=25d1193594d32ad96ae5dbdf00554d788ab3e571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:8a:7a:6d:c6:01:af:34:09:93:2d:0c:1c:
97:91:41:56:92:82:fe:b8:8a:55:ec:6a:6f:79:de:
f7:25:dd:26:3c:2c:55:b6:83:6f:55:62:84:a0:d0:
53:3f:2d:6b:35:61:68:25:e9:e1:8d:b9:6b:b8:d4:
3a:dc:c8:e0:14:36:a0:7b:06:38:dd:37:97:99:62:
a9:e8:83:23:f8:c7:21:0d:34:a4:90:13:a4:fe:85:
e7:d5:66:24:f1:d7:cc:1b:20:23:16:e4:48:cf:cf:
9b:be:5d:04:79:7a:9d:38:6f:4a:4f:8d:a1:4b:87:
5f:6b:6a:16:96:46:4d:86:87:e9:35:17:07:17:3b:
b2:9e:83:04:dd:68:32:3d:29:c5:72:0c:dc:df:8e:
e6:6d:e6:1e:94:6d:1d:95:c9:bf:66:5d:71:42:9a:
93:7c:eb:f5:9a:56:ef:42:37:36:b3:14:e0:42:b3:
cf:22:e4:72:b1:b9:f9:c7:56:82:98:f1:67:3b:37:
be:c6:8c:dc:3c:2f:32:99:4b:73:6d:91:99:9c:73:
f5:ba:c9:d8:1a:bd:b4:5d:18:fa:bd:f3:07:f9:10:
99:ac:78:55:63:d0:f9:5e:c1:a5:e2:6c:fe:d3:5c:
ea:6e:41:f2:22:39:ed:3b:6c:2a:aa:b2:94:a0:24:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:19:35:94:D3:2A:D9:6A:E5:DB:DF:00:55:4D:78:8A:B3:E5:71
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d6:9a:7b:22:81:bd:78:31:55:3f:e7:e4:67:22:39:e1:93:
df:e4:d9:18:97:de:5a:dd:bd:10:e6:9a:00:aa:c4:b6:95:e0:
61:a7:f1:da:61:54:ff:eb:dc:65:fd:c9:64:cc:7e:02:b5:75:
c6:20:39:f8:34:cd:68:12:47:ce:18:aa:ec:2f:6b:ea:42:16:
b6:fd:1f:b8:55:3d:f6:92:cd:e6:9f:aa:86:81:7f:bc:4d:7f:
d0:27:1b:76:ec:30:44:2d:16:63:61:99:d4:23:77:89:73:ec:
cf:9a:d6:92:fe:77:36:14:10:d7:f9:8e:58:27:10:61:dc:7c:
c8:17:a6:3f:19:8b:0e:01:83:d9:5f:c1:bc:87:f6:fc:d5:3a:
d8:9e:55:ec:0a:60:98:1a:20:59:25:f9:d9:26:00:04:ce:5e:
c1:06:e7:23:54:96:01:1a:fb:ef:1e:3e:6a:3f:16:c6:9d:53:
c6:ba:d4:b3:bc:86:49:81:8f:8a:ce:27:79:ee:d4:17:d1:56:
f1:bd:5b:5c:7a:f1:c2:d7:49:54:27:11:71:b7:90:db:4d:67:
9d:e0:e8:6e:c4:e0:f5:6d:d9:c4:d1:fc:01:d4:63:35:59:aa:
15:0d:66:d7:7c:c0:57:90:0f:e0:5c:72:1f:72:dd:ff:58:af:
a1:94:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:29 2025 by rpki-client