Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: F6neU6TUPEKsh6bWcZ94Xqk1T+CuOkgz7Gd94JRTQa4=
Subject key identifier: E7:4C:90:64:DA:C9:F7:A8:4B:93:6E:76:35:28:23:C7:9C:93:F9:25
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 0194BC3BCBA48866124E1DD9E590B544BE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1130
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: MwulI3onDLTQUiJcmcWW3IcH8aH2qtWvLHylnMPgeOs=)
2: tkVUmSkrCX9pgB0nTub9z-6HSW0.roa (hash: banQmPuunujxRP2q//Sr4c8dRRsQixk/p5/GaYPeJq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:a4:88:66:12:4e:1d:d9:e5:90:b5:44:be:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=e74c9064dac9f7a84b936e76352823c79c93f925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:6e:5d:a2:44:7d:f1:2a:29:6e:86:c6:09:
80:cc:fb:7d:ea:59:c9:82:96:44:22:f8:29:4c:d9:
ea:78:d7:13:2c:7f:7a:5f:fc:fe:ef:53:4f:45:1f:
f4:00:6b:17:9f:9d:a7:b3:24:ce:0c:15:c0:dc:4e:
e9:b7:c0:58:ca:b4:06:5f:c5:04:31:d7:83:e8:25:
d0:6d:f1:e0:44:7e:99:d5:13:cd:1f:a0:05:59:dc:
89:fb:c2:8e:41:ef:fb:b5:c4:de:f7:de:d2:fa:cc:
ab:a9:0e:68:ab:3f:43:d4:f5:a9:7e:03:23:c2:49:
89:5e:4c:d6:ea:5a:c4:6f:5c:68:dc:cf:83:35:8e:
d1:1c:dc:c1:01:8e:df:0e:26:72:4e:ad:53:83:ab:
d3:ad:f5:80:16:5b:d6:75:00:4a:29:5d:2a:ca:fb:
26:80:0a:ab:e5:95:43:34:81:3f:f6:a4:25:e0:b5:
3a:86:e6:37:be:c0:8b:c8:38:9b:f6:d5:2d:d7:c7:
89:f0:93:bb:fc:b5:ce:b0:21:cd:5a:b5:0d:db:a3:
87:a6:88:65:32:63:46:5f:0b:37:55:da:3a:93:3a:
a0:f6:14:c5:9b:64:67:8e:e1:ee:fc:cd:15:41:1c:
cc:e8:49:4d:ce:c7:81:52:18:cf:9b:65:1b:da:9c:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:90:64:DA:C9:F7:A8:4B:93:6E:76:35:28:23:C7:9C:93:F9:25
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:42:a4:ae:6a:86:e0:77:2a:fb:8e:bf:fa:69:1d:eb:ed:72:
67:57:f2:d4:53:19:a1:31:67:e8:be:4b:24:42:56:3e:08:50:
88:7d:3a:df:bc:c5:ee:a5:b1:ae:fc:2f:40:5e:84:25:b4:77:
fa:a2:e7:d9:d4:b2:81:6b:cd:32:af:3d:52:f5:24:1c:06:6e:
03:2e:81:2c:50:e6:37:0d:65:b0:b6:39:57:62:d4:3c:55:94:
10:9b:f4:cf:75:7c:1f:81:b2:c0:a1:dd:f4:6a:58:3d:fa:d3:
32:4f:58:e6:2f:29:9c:8b:15:b8:49:6a:3a:08:03:d9:7d:c3:
8b:ab:7a:4e:29:a3:ac:95:8a:b7:e1:c2:f9:b4:e3:ac:aa:6f:
3c:be:24:19:87:d9:b0:8b:af:ec:ef:e3:79:d8:c6:9a:6f:b6:
fc:e4:1f:a3:ff:a5:4c:1e:23:78:98:26:7c:9d:96:0a:a0:60:
4a:6f:b9:05:bf:3a:d7:d2:3b:f0:ce:43:1e:ef:82:e8:7b:01:
e0:6d:16:3e:5b:ea:f9:09:76:48:e5:ba:a8:40:1f:cc:cd:56:
3d:22:07:52:35:4c:93:64:e8:14:c3:a1:e7:c2:db:be:ea:49:
73:c3:ee:a1:40:c4:d5:e9:31:37:65:0a:9a:74:95:69:96:28:
81:db:cf:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:37:32 2025 by rpki-client