Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: M7Gp9jw4zUaBTIFL+LHOjJ1SkcZxgl8B5plSaeOGu9M=
Subject key identifier: 58:AE:2C:F6:8F:94:04:28:3C:2C:78:9D:EA:C3:DB:93:B4:7E:15:21
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 0194BC3C61F5DD3881069721D89BFEDB3CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 0328
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: wzWRpFajK4rhrxe/fQBOiKdDo6LGQ0N6a2fbZRewy38=)
2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:61:f5:dd:38:81:06:97:21:d8:9b:fe:db:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=58ae2cf68f9404283c2c789deac3db93b47e1521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:1b:c4:45:d5:2f:55:ac:7f:43:0d:42:33:
ea:a1:cd:d3:ae:db:29:8f:2c:b7:ed:47:c1:8b:f6:
48:c0:b8:c7:0c:3b:4e:a2:57:36:b4:90:7a:25:d3:
cf:b7:d1:8c:0c:11:0b:37:45:99:ad:83:0b:47:d3:
85:8f:ea:77:75:34:17:12:ff:42:a9:9b:99:75:19:
10:45:75:49:57:39:4c:fe:ba:63:2f:54:84:8a:48:
f7:86:4d:6c:13:34:1e:d3:2e:2a:7d:93:6e:a8:6b:
b2:82:5a:fb:54:c6:d9:a4:92:16:8b:df:3c:40:44:
eb:d1:4b:fa:90:4c:28:7c:a9:68:b4:36:be:c9:16:
1a:5e:ea:16:66:4a:86:2a:9b:93:0c:3a:8d:6d:aa:
2a:77:0f:69:f8:b1:43:02:0e:a7:d8:b3:4a:97:f8:
ae:38:34:16:5a:9b:5d:d3:fd:a1:05:02:c4:b3:7a:
66:60:64:54:60:1b:c7:ba:cc:df:f9:54:db:fb:97:
ff:c3:79:6e:94:3c:22:9c:3d:2a:f2:6b:91:16:db:
e3:35:75:2c:0e:b3:f3:58:07:1a:8f:ea:ef:fd:18:
e9:3f:2b:5f:c5:84:95:98:a1:63:84:17:58:ee:20:
28:8c:33:6c:18:57:61:50:4b:3d:28:2c:e6:51:51:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AE:2C:F6:8F:94:04:28:3C:2C:78:9D:EA:C3:DB:93:B4:7E:15:21
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b5:cb:ce:13:2e:c9:44:1e:1f:d8:d7:5b:ba:f0:32:7c:d2:
4a:f8:85:d4:32:19:ee:69:d4:fc:45:0c:3b:e3:15:6e:0e:39:
9a:70:2e:24:7d:95:33:60:89:b8:48:89:ef:5d:f1:a9:7a:54:
7e:41:65:bf:5b:f4:bb:69:4f:ee:bb:13:42:40:78:81:42:6d:
43:ee:47:69:81:7d:72:3a:f5:b9:de:3a:0b:fe:99:69:ee:e4:
75:16:43:9d:61:95:07:c0:e8:05:eb:27:42:43:7f:81:eb:1b:
52:61:bd:de:65:cb:de:0a:4e:f3:72:6e:1d:b0:5e:12:e8:ad:
6a:99:4d:b3:30:1f:bc:19:1d:6a:39:b3:dd:2d:b3:e8:c4:1b:
39:6b:19:96:75:3b:fe:b8:3f:8e:5e:c0:7b:d5:71:65:20:3c:
d1:b4:a5:2b:bc:ec:77:36:ae:c1:aa:05:f4:6a:1c:79:10:51:
7d:7d:f6:c4:f0:ce:2b:6e:3e:37:34:16:f5:16:24:ac:40:31:
db:1c:f1:fc:83:f2:a4:37:a6:1b:ef:5e:6a:64:cb:ce:81:1a:
60:6a:3e:6f:65:a7:6b:5f:3f:a7:71:ac:c3:5b:10:0e:d3:5f:
ea:1f:9e:69:0c:ef:4f:74:44:b3:3e:3a:79:ce:14:07:9d:99:
97:7e:2c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:55:48 2025 by rpki-client