Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: SdD+yk/HVjUcR+DDi5JNFwtwC0+yANTc707oYnBEAks=
Subject key identifier: BD:45:19:F8:2A:4E:47:A6:25:D1:A3:A7:05:56:52:F6:D8:A0:99:3B
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 0194BCA98139E07EFEA7813F690BD0F7410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 03F9
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: wCSgaAxsDdByrIGjuh304wfIPzN23HxMJznvTvDphpI=)
2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:39:e0:7e:fe:a7:81:3f:69:0b:d0:f7:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=bd4519f82a4e47a625d1a3a7055652f6d8a0993b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:13:0f:d7:f7:e4:0e:32:c7:99:33:e5:44:
28:e1:41:b6:f2:85:6f:77:d1:36:17:92:d9:3a:6f:
71:3e:24:22:c4:1d:b2:fc:d8:f8:f0:52:14:e1:cf:
56:76:03:9c:34:90:5f:cb:3a:a7:1a:e2:1e:e9:dd:
d7:9a:8c:ad:f2:e3:61:f3:73:3b:c3:00:db:70:c3:
1b:29:75:1b:5c:ab:aa:20:0d:f7:f6:15:32:46:6a:
16:7e:1d:b5:ca:39:e2:43:85:ae:00:ef:7a:7c:f2:
0f:ca:7b:2f:0a:61:68:6e:09:4c:61:e1:60:66:d2:
ff:6e:a6:a7:b1:6a:80:1f:ea:aa:04:ba:b6:59:ff:
db:34:c3:0c:67:01:43:f4:72:4b:84:83:5a:c5:c7:
80:7b:cb:78:aa:c7:79:d1:49:44:7e:90:c6:14:9e:
d5:ac:d3:fb:90:2e:44:94:f4:de:ff:66:70:e5:36:
09:2c:7d:b8:37:71:f5:1c:2c:2c:fa:c9:31:e3:79:
1e:2c:da:10:37:26:77:9f:5e:f9:9e:aa:36:0d:96:
9e:be:14:9b:e0:6b:cb:ef:42:02:2d:53:31:47:48:
14:f6:43:ca:f6:1a:98:f5:77:a9:41:28:2d:0c:12:
05:2d:5b:d0:45:98:1c:0b:1f:f4:45:72:3d:d0:25:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:19:F8:2A:4E:47:A6:25:D1:A3:A7:05:56:52:F6:D8:A0:99:3B
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:24:d9:8c:45:04:11:10:51:6c:00:f4:8e:d7:c8:02:b0:c3:
b3:be:df:c4:a7:b0:99:c1:42:0c:a3:18:f4:84:77:3a:c5:e4:
ca:af:46:2d:ec:9d:8f:d1:ae:30:fb:09:80:42:96:d6:95:5d:
2a:63:ec:db:b2:7c:de:4f:21:9a:fa:0d:1b:ac:7d:59:9d:f0:
70:92:b8:fb:eb:0a:2d:dc:7c:7c:17:9f:50:d2:00:bd:23:9b:
53:c5:15:78:59:7b:e2:d7:85:95:1d:52:30:af:cb:a1:6b:69:
9e:9e:18:2c:77:82:fd:11:17:00:75:a3:e5:86:e2:38:0d:2d:
e5:98:c3:bb:53:43:41:49:f6:2b:e8:6c:57:27:8f:43:01:ae:
9e:b3:73:70:fb:c2:01:73:65:35:3f:36:4e:ee:5c:65:a4:72:
92:1d:f7:3e:13:31:b4:bd:13:75:bf:9c:a8:8f:be:bc:c0:21:
4a:53:ff:63:3a:b7:84:17:9e:bf:d0:6f:ce:e2:7d:0e:70:fe:
44:81:26:f4:3d:60:db:f3:12:ec:5d:22:b3:51:e0:cf:3d:0e:
af:f8:14:c5:c7:30:43:8a:5b:e8:43:e9:bd:45:a5:83:a5:a1:
e2:19:31:f3:8f:86:a9:eb:86:9d:a1:5c:87:4e:0e:fb:3a:61:
85:d7:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:24 2025 by rpki-client