Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
File: I--d4hUq7xsqYqMfsvNehZCzrYQ.mft (raw, json)
Hash identifier: 5Es9lKtwNKHk/5vnxTHhkBxzO8dXyLnzTDtLhXOlH6U=
Subject key identifier: F4:2F:E9:E7:43:FA:71:73:41:18:D9:CD:AA:F6:3F:0D:A9:55:FF:ED
Authority key identifier: 23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
Certificate issuer: /CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Certificate serial: 0194BCE09772E4944DFAA8733BF0B31C8B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
Manifest number: 047B
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: H78piGDM9XMhN9ttfDQLjflrGw0.roa (hash: A/U1yMrz8Q8LYte4PciQEyU7L3zVOHn5gKWczBZWelo=)
2: I--d4hUq7xsqYqMfsvNehZCzrYQ.crl (hash: BrpEg2I+t3jxSOaXr5CgnBj8KMCsXsAHUByJyheg4fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:97:72:e4:94:4d:fa:a8:73:3b:f0:b3:1c:8b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ef9de2152aef1b2a62a31fb2f35e8590b3ad84
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=f42fe9e743fa71734118d9cdaaf63f0da955ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:db:11:ac:66:61:f4:7d:be:ae:39:55:38:
8d:8d:43:cc:f1:47:40:e0:b0:cb:38:f3:0c:3c:b3:
13:d5:ac:0e:78:63:4d:7b:23:36:f0:2c:ab:52:ec:
95:75:67:70:c0:80:09:45:55:f9:95:5b:cd:69:bf:
a3:e0:9a:4d:f8:33:fc:e9:b8:70:7b:bd:46:11:9b:
80:ab:c7:e7:99:03:ba:dc:a2:90:f0:5a:ff:2b:e8:
cb:33:de:4b:3c:cf:3e:52:b1:fb:1f:37:60:de:16:
9c:6c:1e:a6:fe:c2:c8:13:04:ff:92:46:8e:66:bc:
ac:64:c3:f2:ce:ff:3e:64:c9:ae:a0:b2:37:00:f0:
64:e6:59:f1:0b:4e:70:d8:91:6e:e4:7d:14:cf:a1:
89:71:b6:a0:bf:b4:d3:18:c3:0e:1d:05:2e:0b:53:
11:0e:88:7e:22:16:2a:22:46:7e:00:10:63:d3:e2:
29:55:44:53:f2:db:63:c8:8b:eb:9e:9d:ea:2e:d3:
1b:fc:d2:15:de:87:fc:6d:76:34:f0:87:c3:bb:44:
bd:63:a2:92:7e:d9:57:0b:2c:5a:54:f0:b8:de:a1:
01:ee:e8:24:e2:b7:83:46:26:cf:fb:20:83:46:bb:
42:7b:05:96:d2:64:d2:db:69:25:19:e0:73:32:0c:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2F:E9:E7:43:FA:71:73:41:18:D9:CD:AA:F6:3F:0D:A9:55:FF:ED
X509v3 Authority Key Identifier:
keyid:23:EF:9D:E2:15:2A:EF:1B:2A:62:A3:1F:B2:F3:5E:85:90:B3:AD:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I--d4hUq7xsqYqMfsvNehZCzrYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c3f3cc-c56b-4d35-b77f-3bc6eb0a347f/1/I--d4hUq7xsqYqMfsvNehZCzrYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0d:b7:4f:54:e4:2c:b5:a5:56:7c:41:06:1c:d6:ae:49:a1:
39:ba:cf:d8:ee:bb:b5:43:8c:9f:b9:48:11:df:69:e1:42:cb:
34:c0:dc:f2:26:13:28:9a:f5:42:60:2e:a9:77:fd:bd:c8:c3:
69:80:f6:15:67:2c:20:40:b4:0e:7d:a2:37:11:c8:1d:48:c2:
e3:4e:4f:e7:50:fe:7e:a4:f2:3b:6e:85:00:c6:34:e6:3c:de:
bf:7b:ca:63:c1:10:d7:ac:fd:ac:bf:1b:19:2a:81:5e:cd:e0:
44:01:3e:ce:7f:42:f5:19:77:39:1e:82:28:ea:2a:f7:eb:78:
88:45:3d:97:10:cc:c1:94:23:ee:b8:c1:da:43:2f:c3:e6:9d:
de:a0:9e:c5:44:9c:7e:2c:f6:af:4d:bd:0d:bd:2c:7a:ee:93:
23:56:23:e4:5b:e6:f5:24:25:a3:27:68:b0:91:8b:5a:e3:ad:
71:29:5c:88:30:91:b7:5b:c4:6a:9d:73:fa:3d:ed:6b:25:0a:
28:02:7d:c9:c9:b9:c2:7f:36:7e:de:0e:97:f3:52:2f:a5:bb:
bf:81:a4:f6:3b:63:58:a5:14:4e:b0:56:dd:08:24:4b:08:0b:
ff:82:a4:18:b1:96:ad:f2:04:91:f1:bc:80:35:03:01:c1:ee:
59:86:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:08 2025 by rpki-client