Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: bSf93n5LOu2acGy2Y16r3uKpqZYoYmYum3HIBq/TxYA=
Subject key identifier: D6:09:1B:21:7F:71:00:9F:85:2F:E6:CF:C2:F6:10:1B:8B:39:6B:03
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 0194BCE09E51D734F3C2B47B712A34B35946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: XoFRg/IIEywFyr8mAW6R/HPHFyBSmvchRolatmnl7uk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9e:51:d7:34:f3:c2:b4:7b:71:2a:34:b3:59:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=d6091b217f71009f852fe6cfc2f6101b8b396b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:24:43:8d:48:44:e6:51:0a:6e:40:e3:b6:
2e:ca:4a:d2:a1:3b:27:20:7a:9b:f5:9f:45:c4:56:
bd:90:80:9d:b4:13:0f:35:d5:5f:3b:94:11:b4:a2:
cb:a4:96:91:15:1b:0e:e7:57:b2:4a:c4:50:d1:3a:
e0:20:57:0c:69:64:2d:f2:d2:17:40:fb:b4:df:3b:
41:66:78:a2:98:d8:78:c6:5a:8c:54:b5:7d:9b:ba:
d0:b8:51:1c:d0:f6:70:3a:bd:28:cb:31:d4:6c:59:
06:9d:ea:51:84:70:a0:0f:f9:61:f3:cc:42:86:9d:
ef:00:da:4a:22:41:16:5b:96:cc:c8:d2:6c:92:99:
2e:b4:e4:69:dd:f5:83:0b:a4:55:d7:2b:56:a0:a8:
6e:ec:43:1f:ad:de:5e:7e:b1:ce:f5:56:65:25:b2:
37:05:71:20:98:ef:a1:d1:36:db:85:87:12:c5:5d:
2f:97:4d:40:49:08:0e:1c:64:96:ad:f1:27:5b:32:
22:8f:d3:ec:29:f3:33:1e:8c:86:86:70:4c:a1:09:
75:85:df:da:4a:de:70:a6:ed:e3:b5:28:ea:5f:03:
0b:f2:a9:7f:58:69:bd:42:e7:c8:5e:ce:21:aa:29:
f6:70:21:6f:ba:c2:5c:52:9c:b8:18:2a:96:bc:a6:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:09:1B:21:7F:71:00:9F:85:2F:E6:CF:C2:F6:10:1B:8B:39:6B:03
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:94:6a:ec:a4:ba:63:33:47:ea:41:09:a9:08:30:b2:a1:8d:
70:49:dd:45:f4:9c:a9:1b:b2:f4:83:2b:26:5a:1c:2e:e7:52:
2d:17:e1:3b:9f:58:89:28:d3:11:ad:eb:1f:c7:9e:f4:d7:90:
e0:03:ed:b1:d4:30:83:50:ce:8e:11:5d:86:9e:0a:5e:22:37:
33:3a:cf:47:42:45:07:66:a6:ab:59:a6:f4:27:67:35:80:33:
6f:38:31:12:a4:2c:f7:2e:6a:cb:ab:a5:70:e5:e5:12:4e:15:
2e:66:3d:00:35:ca:27:f3:9e:72:ed:71:72:c9:9c:15:03:03:
fb:35:f3:43:0f:5c:b1:e5:4f:e4:df:17:38:7d:c2:47:57:ff:
89:31:21:d6:fb:94:31:d2:16:ff:b5:eb:6d:ae:b1:80:13:ef:
cb:99:86:db:66:a6:96:90:1c:e7:fc:63:94:d1:83:cb:c2:13:
b9:f5:52:3b:53:10:a6:38:63:fd:86:4c:d1:d7:c2:63:78:d7:
16:fb:94:90:b0:83:28:e2:4e:55:73:8a:db:ee:13:bf:7f:50:
cb:ec:29:15:eb:a8:b0:fa:d0:7f:bd:48:f9:7b:ac:f7:7a:a5:
24:eb:cb:ed:0b:fa:e0:29:9c:6c:e8:6e:f6:ba:d4:ad:f4:df:
57:99:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:31 2025 by rpki-client