Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
File: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft (raw, json)
Hash identifier: 0vxQbzhbxcidpXIRBK2oPRBr3afl4f/QJVz9rshUWnM=
Subject key identifier: 53:20:D0:FE:51:67:4D:7A:4B:EE:06:AB:B7:26:0F:02:1C:A8:B5:E5
Authority key identifier: 8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
Certificate issuer: /CN=8afbc64d593fc073c693143566310295de0a8337
Certificate serial: 0194BBCDFC530EB0130FADC3976841BE82A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: Y03ProWHEsDG5Xc_61RtvezV_Rs.roa (hash: djwNKzcxSebIjfU1ZCNUBa++U1kgw29utzVFxTel7p8=)
2: ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl (hash: 3NQlnRZI1K8cKrzv2h6UskFhqmarnNRudMsp1/PBeUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:53:0e:b0:13:0f:ad:c3:97:68:41:be:82:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afbc64d593fc073c693143566310295de0a8337
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=5320d0fe51674d7a4bee06abb7260f021ca8b5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:b4:55:67:e2:66:96:07:62:e7:d2:a0:1d:
c2:4e:29:c8:f6:88:0a:04:ae:06:b0:de:07:17:68:
a3:8a:37:83:29:0a:34:64:b0:b1:ab:ad:51:d9:e5:
f5:f7:6e:f0:f8:0a:25:7a:24:17:29:ec:47:0e:a8:
61:71:85:4e:9e:0c:90:22:e8:2b:5f:a5:30:67:00:
21:c6:da:0f:3c:db:5f:d9:af:67:79:c3:93:a6:1f:
f8:14:6d:ed:2a:f5:bf:a2:79:ce:cd:bf:7b:6f:15:
fc:33:90:be:e8:7e:08:e5:64:7a:9f:93:5e:de:60:
71:39:08:61:9c:38:9e:66:48:5a:56:81:44:1d:02:
6f:0d:23:e5:76:6e:92:b1:ad:ea:d4:54:95:fd:7b:
b1:1f:68:d1:26:0d:93:b5:40:bd:41:f6:65:4a:57:
f4:f8:fa:9c:94:f4:ea:42:46:3c:06:35:2e:90:ac:
36:a5:b6:26:ca:8e:62:b4:06:fc:1e:5d:8e:14:e5:
2e:da:6b:e2:35:f3:76:de:fa:c3:02:de:2b:97:5f:
9d:aa:ab:b7:62:ba:22:cb:cc:a9:7a:aa:2f:7a:31:
47:f6:32:7a:6c:e6:36:e6:7a:24:fb:52:f3:be:5a:
e8:f9:4b:19:81:d7:51:8e:10:ed:f7:b9:d7:35:4e:
a6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:D0:FE:51:67:4D:7A:4B:EE:06:AB:B7:26:0F:02:1C:A8:B5:E5
X509v3 Authority Key Identifier:
keyid:8A:FB:C6:4D:59:3F:C0:73:C6:93:14:35:66:31:02:95:DE:0A:83:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/46bece-502f-4f0d-b724-1097da9ddf27/1/ivvGTVk_wHPGkxQ1ZjECld4Kgzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:33:3b:c9:5e:eb:f1:10:80:00:93:13:1b:2c:f7:d5:7a:31:
1a:b4:20:9d:13:50:c9:62:89:5a:98:81:5b:5a:62:69:2a:9e:
62:de:ba:fc:26:6a:2f:dd:f8:f5:02:a0:90:97:62:e5:c1:e6:
0a:81:02:b5:94:5f:76:4b:b0:16:bd:29:2f:1b:37:3c:93:7e:
09:dd:f0:a4:4e:05:fe:e8:41:f0:9a:99:53:3b:32:55:68:2f:
72:38:18:4e:14:87:9c:d5:ae:4a:ae:56:08:de:3f:27:90:b8:
94:18:08:a5:20:a5:d4:91:36:ca:22:6e:c7:f5:44:7e:34:8d:
88:81:60:b1:1e:34:26:f9:a3:ef:6e:20:e7:63:47:bd:5b:5f:
47:a0:68:d5:f1:ff:a4:8c:1b:58:06:a6:db:0c:c7:d0:fa:fe:
76:15:66:dd:2f:4f:6e:66:17:cf:da:b1:07:9c:3c:f5:e0:7f:
bc:5a:74:24:ed:78:37:c0:54:46:87:cc:e9:8e:cb:31:70:39:
01:07:56:da:1f:58:6e:72:5d:1f:ce:29:f0:40:9b:4b:ef:18:
53:a0:6f:e5:b2:45:71:e6:97:a5:f3:e6:8a:82:47:13:e6:28:
fd:03:2f:61:a1:f2:4c:c5:9a:51:48:1d:4b:c1:59:a9:9f:8a:
06:ec:3c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:20 2025 by rpki-client