Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: 0h9Oi9InwcPryUfl1Wk9gcNkFlYEofpZXnBBRHcQ+uM=
Subject key identifier: 3E:1E:BA:55:1F:83:CE:E5:BD:B4:79:9D:2F:09:16:79:D6:99:5A:30
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 0194BD8560A49F458AC4E04B820AB3F3DA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0BB7
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: n2caDzPx4hCwPUWoJk/sWcoyEI2etMUJjn9eknqFKww=)
2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:60:a4:9f:45:8a:c4:e0:4b:82:0a:b3:f3:da:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=3e1eba551f83cee5bdb4799d2f091679d6995a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:ff:bd:b2:7d:f3:d5:04:8d:77:32:de:68:
d9:5d:e9:a7:4d:7b:1a:11:c4:24:02:20:0d:d0:36:
ae:47:d2:af:3b:be:4c:2c:e2:ae:b4:09:06:fc:9b:
95:f1:cf:48:ac:c5:6c:47:e7:f1:0b:2d:3c:5c:2e:
7d:76:5d:23:a1:59:09:36:4f:e5:36:be:42:0a:c2:
ef:a3:6a:18:28:50:72:b3:53:37:25:65:8a:1a:da:
d3:2b:ea:eb:f4:1e:1d:48:ef:52:61:9c:88:23:77:
0e:6a:44:b0:c7:bd:1f:dd:a6:b3:84:27:34:2a:43:
df:cb:06:00:eb:2b:29:53:77:81:4e:bb:3e:70:cd:
0a:ed:04:62:bd:d4:6c:b8:e5:62:11:08:88:76:39:
3e:b0:9e:0d:f9:cb:9c:57:76:b4:80:e3:e4:84:7f:
84:12:f6:d9:6d:ca:50:62:85:5d:4b:e3:1b:c0:48:
49:1b:a4:99:95:0a:5e:2c:b3:fa:37:7d:ba:46:1b:
57:0f:fc:55:26:70:6d:b2:ff:22:b9:90:5b:4e:b4:
e1:aa:2f:ef:6d:51:14:f3:6a:d7:4a:09:40:51:0b:
f0:c2:dd:49:51:16:3a:89:e0:49:e6:3b:69:c8:83:
5a:8f:9e:70:42:51:db:01:b1:13:3b:20:6a:90:a6:
0a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1E:BA:55:1F:83:CE:E5:BD:B4:79:9D:2F:09:16:79:D6:99:5A:30
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b8:3d:fc:38:41:73:ab:b6:4b:42:f5:26:7e:79:d3:79:fb:
4a:50:db:c1:59:d5:75:d9:40:7d:91:12:f5:bf:df:44:d0:26:
bf:08:85:86:24:1b:15:1d:54:b9:c3:c8:bf:a3:b1:b8:7f:34:
13:98:6a:f2:5e:90:4d:d3:42:2f:3a:fe:3d:7e:36:df:71:94:
4f:f8:dd:c3:69:70:12:c9:31:b9:de:9e:56:10:f9:05:2f:54:
2c:de:0a:e9:10:d1:8d:7c:bf:78:23:18:80:b8:ea:69:29:d8:
0a:c0:10:26:9f:a9:76:d9:f5:3c:d7:de:58:01:52:ba:5d:6d:
b1:f2:d6:57:c8:d7:f1:c2:4e:40:2a:68:61:4d:e6:94:cb:4d:
2c:e5:29:67:7a:89:86:75:45:74:b0:89:a3:50:03:21:64:a0:
59:b1:8a:31:27:92:2c:05:72:82:6b:39:71:12:8d:a6:f4:f5:
c1:5c:33:a8:96:37:d6:80:20:dc:20:19:4c:91:af:d6:a2:c3:
f2:16:48:7f:07:9c:2d:76:6c:23:30:dd:ce:c8:89:a1:80:92:
f3:45:da:ed:61:8f:5c:b9:c3:cd:c9:92:52:ce:1d:d2:68:ef:
c6:cc:81:89:5c:e5:fd:57:d1:82:27:af:a4:01:44:f2:43:07:
72:57:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:36 2025 by rpki-client