Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
File: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft (raw, json)
Hash identifier: 5a+Ekr2bp9eWydOQ2DdZqkgQ6XHnVVuE8GT1gV1PCpA=
Subject key identifier: 62:DF:FD:9D:68:58:E3:45:65:63:C5:D2:44:04:48:DD:02:C8:33:B0
Authority key identifier: 22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
Certificate issuer: /CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Certificate serial: 0194BC3BEDFB153C28014F3546AC349108AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
Manifest number: 0B14
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 5h9N95WR6G3ZttKnfAaRL_2XfKs.roa (hash: Wu3zPxSXCsayNSHW7YvNoHAYtN3gQjTl9ho9qfJB69k=)
2: Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl (hash: vhBTKEkvdbzZafVkpqxNPFHarhZg3942ko5aynS7lsU=)
3: mWDbGVVpCQ84rC7Zv5fGnlAS0IM.roa (hash: p+WC5acLc9Vp8ZBrdZrqWpaCEJthWpQv4NHUQY+p8+s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ed:fb:15:3c:28:01:4f:35:46:ac:34:91:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fd1b59d5caaf7506bc0d5c34f30c2159b04398
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=62dffd9d6858e3456563c5d2440448dd02c833b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:1a:bb:e9:e7:8f:02:dd:e0:2e:41:03:05:
d5:a3:08:5b:6a:de:99:de:f5:5a:fc:da:4f:9d:f6:
99:f9:b1:43:d4:22:b2:e0:cc:82:f4:fd:3f:ed:92:
55:e5:49:37:fe:c6:ee:4b:10:e2:91:cd:89:76:d8:
88:c5:81:72:b7:aa:75:fa:ce:b8:6a:f9:07:5f:ae:
e6:e3:89:06:66:56:f2:49:d4:aa:c0:91:00:05:39:
35:2e:90:58:6a:29:e8:c7:28:b6:6d:fb:57:38:a0:
d8:73:d4:e1:f9:78:e2:d3:55:4d:74:a2:a6:b2:44:
31:39:22:e4:ed:8d:75:c9:9c:00:0e:20:1f:b3:6f:
99:9e:95:98:9f:c2:af:fc:56:a0:56:5a:b5:f9:6a:
4f:fe:a6:18:f5:c9:b8:99:08:3d:08:ef:6e:ba:8e:
e8:93:f4:df:6f:ff:3a:f4:b6:1a:f3:a1:56:ca:7f:
6c:fc:2d:93:9a:e6:51:90:14:51:70:0d:25:73:99:
8d:ea:d2:7f:63:f1:fb:c6:98:2c:65:ae:93:a5:3d:
11:ee:32:dc:bb:26:03:5b:25:d7:9f:c0:29:f4:47:
05:c8:62:9d:35:d4:be:87:34:51:8a:f4:4b:01:ac:
e4:4f:f0:37:7f:bb:c4:93:cd:fe:df:7d:ab:3a:e3:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DF:FD:9D:68:58:E3:45:65:63:C5:D2:44:04:48:DD:02:C8:33:B0
X509v3 Authority Key Identifier:
keyid:22:FD:1B:59:D5:CA:AF:75:06:BC:0D:5C:34:F3:0C:21:59:B0:43:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/850e96-191f-4dcb-9edb-cd58fa2014dd/1/Iv0bWdXKr3UGvA1cNPMMIVmwQ5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:56:d1:c4:be:d4:88:49:b0:dd:33:23:9b:86:be:bd:50:38:
7c:d4:d9:4e:15:80:0d:86:42:d3:ba:55:ba:18:af:34:cf:47:
fb:80:df:ac:4e:99:b9:e4:a7:2c:d1:df:be:23:ac:4e:d3:71:
19:37:5c:ee:d8:10:37:ec:47:8a:58:88:a9:d4:9a:cf:b5:6a:
af:bc:b4:78:10:57:fc:d2:6a:6e:8b:5e:46:6d:d9:73:ff:4e:
fe:36:88:d8:ec:bb:2a:b4:00:aa:46:38:02:b4:5b:bb:d2:05:
82:52:fc:dd:b6:ba:0b:3a:d3:83:1c:e6:3e:8b:1c:b7:b0:7a:
b3:d9:92:98:de:8a:13:5b:75:a3:79:50:29:72:f2:9a:cf:d8:
31:86:24:2d:ce:d0:5d:f1:72:e8:d4:73:fa:13:f1:c5:c2:4b:
d0:b9:b8:7a:99:c9:93:51:6f:1d:da:0d:cd:80:63:eb:df:ad:
a3:bb:53:e0:4c:d8:23:99:d2:42:c5:3a:a7:4c:a8:e2:6a:ea:
59:b1:1e:c9:f6:2b:d8:b3:89:c3:76:bf:85:5f:21:7c:6b:70:
48:e5:cb:b2:f0:71:ea:b0:1c:c9:88:12:6d:2e:ad:1b:f1:9b:
18:8a:ef:5b:5e:d0:9d:b0:db:ca:ea:5f:b4:49:5f:47:cd:5e:
f7:f8:b4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:22 2025 by rpki-client