Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: S92iWEvN1/BmP4WTh6LXcxLSMXWeGkfialNql2VrPKE=
Subject key identifier: CA:4C:22:5F:C7:B0:1C:46:89:20:81:32:1A:BA:0F:C1:49:12:37:EB
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 0194BD176286D1C6B3142099994D24564412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: LFWSmapirJasO2XAD0ZGbahpnm5LTDWNFoE+DL20qAc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:86:d1:c6:b3:14:20:99:99:4d:24:56:44:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=ca4c225fc7b01c46892081321aba0fc1491237eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:53:c6:45:33:d8:8f:22:71:e4:5b:17:ea:
fa:70:62:48:5b:5c:4f:f6:c9:cc:74:68:d0:ac:c6:
0b:73:3c:cb:41:3d:c5:84:44:21:cf:7e:cd:25:dc:
8f:ba:58:9d:e7:81:5e:59:ce:8d:cb:29:95:c0:b7:
6b:82:1a:26:ac:c4:5b:8e:35:0a:23:04:8a:cc:66:
6a:24:a9:3c:a0:04:27:1a:1c:ff:4a:66:b5:f3:5d:
53:88:64:34:fe:81:a1:a8:18:78:92:4d:d2:51:09:
6b:62:c6:b9:87:e0:10:a9:df:fd:59:1c:27:a0:4b:
cb:db:1e:0a:c7:dd:14:e3:d4:33:e9:a4:5d:52:ad:
0f:0e:fa:f7:da:7b:83:35:81:bf:28:1a:2d:11:ef:
10:b3:f4:d5:d5:9f:c1:d7:6f:29:23:96:6b:4e:86:
89:36:e1:d6:f8:91:65:89:ad:51:16:c2:e5:88:ca:
81:a8:db:7d:e8:2f:6c:a3:b5:ce:36:c9:06:40:5b:
d8:d4:ef:8a:05:e8:12:1a:38:f5:0c:ca:55:61:63:
d4:cf:d4:bf:3e:56:fa:6d:3e:3a:ea:94:17:f4:7d:
f0:d5:a9:13:5f:80:3f:d1:32:a2:1b:6b:e3:79:32:
be:9f:ff:70:e2:e4:5f:3c:65:00:e7:93:6e:b8:76:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:22:5F:C7:B0:1C:46:89:20:81:32:1A:BA:0F:C1:49:12:37:EB
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5f:09:f1:fa:e2:eb:d0:be:08:a0:44:7d:93:a2:d5:af:0c:
89:06:b1:0c:50:5d:3c:09:59:cf:75:9b:91:7e:a9:d3:63:be:
bf:db:63:2d:6f:87:c3:13:2f:3d:9c:c2:ea:8e:7e:94:55:20:
af:e7:a4:80:ec:99:4c:0d:bc:91:55:19:70:91:59:58:44:d2:
0f:fc:7a:b0:04:47:81:ad:e2:ef:d4:28:11:7d:7d:59:8d:e9:
27:60:18:65:2f:23:17:5d:19:2d:aa:84:b6:e3:7d:52:72:d7:
ec:50:85:36:29:a6:25:dd:ef:4c:bd:2d:17:16:1f:f9:6b:e4:
e5:92:88:17:7f:1d:d0:34:59:ae:80:0e:7f:72:e6:c9:2e:fd:
31:02:76:26:d6:56:a9:5f:6c:24:35:46:07:12:d7:4f:68:d1:
36:a5:55:87:9f:a1:0c:01:46:18:61:5f:11:fa:f7:8d:2b:d8:
cb:80:db:40:c7:a7:9f:5c:5c:b3:d3:68:35:2b:cc:60:2b:ec:
d1:92:bd:d1:b5:95:2e:bc:6e:ef:30:6b:ad:75:b8:3c:35:ce:
b4:3c:98:91:db:74:3b:70:a5:eb:de:9f:50:47:ff:32:fe:94:
74:25:92:eb:ab:22:49:c2:b3:67:7f:47:f7:43:ba:6e:72:e6:
ad:cb:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:10 2025 by rpki-client