Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File: IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier: f3ti8c80IROso/01cIySahGCo0izcNliObzzjUjVURE=
Subject key identifier: E0:E5:44:39:DA:67:03:A0:98:F0:2F:C8:7B:77:04:22:58:4E:4C:48
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer: /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial: 0194BCAA3F2282792ACC968CE5635574BCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number: 0167
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: 8J4+tVvFSYgTlbwYD+njZ/188gyZoUwwMqC0NsxccIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:22:82:79:2a:cc:96:8c:e5:63:55:74:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=e0e54439da6703a098f02fc87b770422584e4c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:3f:ae:9f:f6:fc:e8:17:8b:f8:df:af:17:
01:1b:ec:a9:59:11:2d:b9:05:70:88:29:2e:22:54:
41:59:4b:dc:dc:86:89:2c:dc:76:8e:f3:93:3b:0e:
90:6d:44:ee:85:69:87:cc:74:0b:02:24:d5:b4:0e:
d6:f4:f3:15:9a:86:fa:c8:a4:b5:04:0c:1d:63:de:
22:52:a5:d1:1c:1d:51:86:3b:e1:06:16:9c:64:b3:
7a:a0:ce:51:8c:0f:cd:98:41:b6:a8:96:45:7d:29:
a9:2a:73:79:5c:3f:c4:80:b3:a5:3b:16:b3:5f:4a:
8f:71:14:4f:07:c7:ae:67:2e:78:02:ac:e3:05:58:
33:f2:18:8c:be:72:b3:62:31:c6:46:e3:f7:e1:da:
d3:f8:2c:8a:d0:5b:9f:44:a9:02:02:4b:bb:20:1e:
8c:b9:f3:97:e8:75:56:6a:be:f3:70:c9:79:2a:1b:
a2:e4:0e:3c:86:b0:ef:3a:91:07:a2:a5:b0:ba:20:
41:99:ff:95:36:43:f7:d8:83:2c:b2:b4:28:aa:a2:
f7:3f:35:65:6c:02:39:92:96:34:8d:95:77:7c:19:
e5:21:4a:45:94:e4:34:3e:8b:3f:be:60:97:b4:1e:
bb:05:09:31:91:22:92:d5:87:f0:f7:38:1c:fd:f9:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E5:44:39:DA:67:03:A0:98:F0:2F:C8:7B:77:04:22:58:4E:4C:48
X509v3 Authority Key Identifier:
keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:99:47:3a:4b:61:ce:f2:37:72:3c:0a:f0:58:13:74:6e:61:
13:6d:4d:67:8b:f7:26:73:c9:62:db:30:bd:c2:87:89:c5:c3:
30:2b:64:ca:2b:76:51:0d:3c:69:3d:ab:f0:8b:e6:b4:f3:4b:
fd:0e:70:81:5a:7f:5e:1e:44:fa:50:80:67:b1:3f:b7:60:35:
2a:62:d2:b9:02:0a:85:54:11:1d:cb:3a:8d:70:62:b7:67:95:
1e:bf:56:e5:8e:88:c8:b1:87:5b:6f:7b:3d:06:c6:0a:9a:39:
53:af:45:16:5f:a8:51:6c:63:97:6a:3e:99:c7:d6:c7:ed:c3:
4e:ee:23:d3:6c:3e:f7:2e:1e:26:32:f8:8f:f5:2f:0f:e8:fd:
e1:09:16:fc:c2:d9:7a:90:25:d8:52:8b:73:b5:dd:21:fe:87:
96:c0:95:df:1c:e7:39:2d:f1:d8:e9:c1:43:07:63:04:05:10:
b6:e3:92:02:d3:2e:67:42:e9:2a:e0:85:ec:ba:13:34:4a:99:
22:38:d3:9f:8e:df:40:59:ef:b7:b6:af:77:9b:c8:24:5f:d8:
7e:cc:33:47:e3:5c:83:eb:98:f9:13:a0:8b:ab:f0:34:b5:65:
e9:81:f5:0b:57:a9:81:b4:35:18:05:9f:df:2d:f0:fc:ce:1e:
af:4f:4c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:47 2025 by rpki-client