Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: wmz9julFkHzidjDmZXpTPhB5JIoSkpBN8Me62rYEdkE=
Subject key identifier: 99:0D:44:7C:B7:45:E1:86:AF:62:AF:A9:C5:FF:EE:0B:1E:BB:0F:B0
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 0194BC3C090108D559000E494ABD48D0110A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 0123
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: abNGvNV2ZuJ0rqzhRE3p83ZZSwwufuxVPtuwNyQFaqc=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:01:08:d5:59:00:0e:49:4a:bd:48:d0:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=990d447cb745e186af62afa9c5ffee0b1ebb0fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:45:37:fd:13:87:04:50:d3:54:84:fa:58:81:
18:bf:d5:9d:c2:e2:70:53:c1:ee:f9:7f:be:f8:41:
fd:dd:3b:f4:0a:e9:33:f1:1c:e8:14:4b:6b:e1:85:
aa:bb:b6:f4:81:d2:24:6e:93:78:4f:ae:4c:9f:a1:
d5:c6:7e:df:4d:4f:8d:0b:24:e8:ec:aa:55:d1:20:
33:f6:bb:c0:04:27:47:36:9b:68:3a:62:2e:b8:f0:
6c:fe:1b:f5:96:69:32:db:40:e3:3a:eb:40:01:64:
73:3f:37:4a:b5:ed:d5:2e:03:7b:c7:dd:f3:4b:ae:
d4:f6:44:b9:06:27:a9:1c:08:f0:c5:ef:d4:22:63:
e2:a8:05:df:55:fb:dc:24:2f:7c:e4:14:84:86:e2:
4d:97:80:f0:28:25:5a:17:a6:40:a5:ec:2a:91:34:
91:c6:a3:61:6a:e1:c8:8e:5f:55:e5:94:f6:e1:db:
ff:36:85:d3:ba:ed:8b:ee:02:c4:f1:b4:e8:43:fa:
c5:46:f2:5f:e3:3f:55:42:73:e8:05:48:ea:d5:2f:
50:4f:3d:98:e3:db:76:46:b3:e8:5d:cd:9d:98:dd:
4b:20:83:d4:0d:b6:57:5a:b1:ee:42:43:c5:7f:84:
33:8d:dd:98:78:90:f5:a0:51:84:43:e2:b4:97:e9:
f8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:44:7C:B7:45:E1:86:AF:62:AF:A9:C5:FF:EE:0B:1E:BB:0F:B0
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:8c:23:69:67:00:ab:d9:8f:99:ad:cc:1f:d3:3b:a3:a6:
9a:2a:92:94:55:da:b5:1f:42:01:74:50:f1:83:ec:14:6c:c3:
b9:26:2f:38:c7:97:bd:95:a0:ec:b4:22:cc:17:17:70:c5:74:
c4:cf:f3:3f:8a:3a:9d:b4:af:bf:1d:f6:62:64:1c:d3:d1:3e:
59:b7:d1:d4:45:d6:44:34:8d:d5:3d:d4:8c:73:e2:a1:a6:08:
0a:25:99:59:5f:c6:6e:ce:ec:79:61:a3:19:09:cc:f1:2a:ab:
af:b8:5c:95:fa:3a:07:44:c9:6f:c9:94:9d:81:08:7d:52:42:
c1:5a:5e:cc:88:30:2d:97:43:76:6f:47:d4:83:a9:ec:d4:0f:
4a:94:17:a2:21:c3:70:88:39:a1:6d:ea:f9:ab:23:73:ab:3d:
fe:a0:b6:a3:df:c0:86:58:83:c8:f0:ce:54:ec:4e:0c:96:0a:
62:96:3d:c4:6e:a1:43:70:6f:55:af:28:6a:c5:1c:7a:32:c4:
7f:40:73:d1:63:d3:41:51:cc:ec:32:a5:71:db:89:38:a7:83:
4e:28:e7:ae:e1:9a:4f:d8:69:71:80:bc:13:c7:7e:98:59:af:
09:da:9e:ad:17:7b:3c:ea:23:3e:85:de:eb:7e:0e:31:d7:9b:
04:c0:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:24 2025 by rpki-client