Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
File: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft (raw, json)
Hash identifier: 6CgsX7fcqhyiQov9aReE1MdXz2F4yfSoykuVU6+SwCQ=
Subject key identifier: CF:08:AD:E0:1E:A9:1C:41:3D:C4:58:83:6F:3E:85:A9:08:E9:4E:10
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Certificate issuer: /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial: 0194BCA9824072EF2BF97E97A3DF4EBB653A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
Manifest number: 0EB7
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: GWI9kIBnfoOZnDj32hv9bUtOynA.roa (hash: c2UfLQdx04a/beHhDQErapqY073fDoBPTLRr0TnaQS4=)
2: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl (hash: AUhn/cwQPWbty9YldLqCR3yPfKLyAonFTeIn9ffHxEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:82:40:72:ef:2b:f9:7e:97:a3:df:4e:bb:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=cf08ade01ea91c413dc458836f3e85a908e94e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:39:99:20:28:f9:b0:59:ed:e1:11:d2:b9:
a0:9e:9a:4e:b8:6a:19:c4:ce:ee:10:f9:23:98:81:
94:9c:f2:44:31:37:c8:13:7b:ff:94:26:c3:4b:48:
67:d9:15:19:51:25:96:41:34:e0:83:5a:d1:3f:21:
34:0a:c2:71:56:ac:dc:9f:0f:92:0a:36:48:5a:b8:
f9:9d:39:69:f1:51:25:10:ac:b6:2b:f3:d3:a3:d7:
d7:16:ad:b1:be:9b:93:01:42:15:b1:3d:fb:59:c4:
4b:9e:23:f6:80:57:fe:b2:e9:aa:91:6a:a5:b9:16:
bd:4e:23:41:53:21:e2:9c:69:30:ed:86:f1:b5:1b:
96:fe:e4:94:e9:b9:6a:8f:1a:07:63:36:98:ae:b7:
99:93:d6:d7:02:8b:d9:6a:3f:1c:d0:41:4a:be:46:
d5:ef:f9:98:43:d3:e5:aa:0a:fa:88:0d:22:e3:25:
13:18:d9:54:0e:07:ce:af:ef:06:c0:b3:d8:ea:9c:
51:f8:47:b2:83:d3:19:86:fa:ec:2f:da:9d:0b:3c:
b2:df:ff:d7:0d:e5:f6:45:0d:c8:ce:6a:b0:84:dc:
f5:9a:46:cd:61:6f:df:e0:7e:54:e9:2d:79:ad:45:
bd:d4:13:d6:4c:91:20:f9:ea:f2:9b:82:cc:b3:8b:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:AD:E0:1E:A9:1C:41:3D:C4:58:83:6F:3E:85:A9:08:E9:4E:10
X509v3 Authority Key Identifier:
keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:e2:cc:2d:32:3a:28:4e:f6:cf:a9:41:c5:f4:a0:c5:92:
ac:88:77:56:21:e1:3c:8b:e1:1d:d8:8d:d8:f0:94:c1:15:a3:
6a:56:f1:f5:41:70:1d:75:b1:c2:57:b4:65:73:b3:37:cf:69:
12:17:a6:9c:89:a3:bc:ff:05:23:e3:57:a6:26:ac:8b:23:3e:
08:ea:e1:39:8b:1f:af:d4:ff:74:a7:6e:3a:8a:07:3f:a5:5e:
3f:8b:f6:ba:fe:f5:2b:e7:3f:3b:6c:77:52:b9:71:38:94:fc:
1f:d4:36:5b:0b:8b:8b:f5:09:39:49:9d:e7:34:10:21:54:4c:
4e:79:dd:cd:45:78:ad:59:8d:f0:60:5d:98:9d:18:39:0f:4b:
49:52:51:54:f5:0b:8c:ad:d3:1c:68:4d:3a:06:1b:33:75:8b:
77:c3:a4:3f:76:f3:3f:bb:d6:d3:7e:3b:9a:d2:63:0d:c8:8d:
06:aa:7c:2c:97:f5:4e:6a:03:c0:1e:8b:bc:5b:6a:8c:56:f1:
e7:70:48:35:eb:37:5a:0d:e2:7c:49:32:3d:b2:6b:70:58:8b:
f1:d3:1b:85:7e:6a:72:d1:84:4a:5b:c0:60:41:a1:ff:9a:1e:
55:9f:fa:11:e9:66:da:38:42:e7:62:9f:0d:16:d1:f8:c5:3a:
68:c0:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:58 2025 by rpki-client