Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: jKBDVcVuhS+S3Ji8cad9nhA0eo8LquKtxsgzOX6c/jo=
Subject key identifier: C8:11:E7:73:FC:75:6A:B3:A2:EC:A1:66:3D:38:C3:A5:84:15:F9:58
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0194BC051D39D13DF8F3A6B688D44E9A5CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: Rc+l/sa6olTEA0dWokquMc/MDWM5PL8hqUjm8VmXHT4=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:39:d1:3d:f8:f3:a6:b6:88:d4:4e:9a:5c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=c811e773fc756ab3a2eca1663d38c3a58415f958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:b0:a3:fb:11:7e:24:e7:5f:d1:54:7a:fc:
99:c2:5e:a3:dd:ba:18:94:3a:44:58:6f:e2:db:24:
3e:f5:9f:15:99:6c:9a:f5:1c:4f:94:3a:36:db:29:
c7:f6:98:74:81:de:f9:43:8d:30:e6:0a:3c:53:ae:
a6:fd:f4:eb:a6:94:fa:48:b0:9d:fe:fa:6f:ee:eb:
5b:da:e5:a4:d5:72:a9:01:1b:b4:99:f3:15:38:7e:
bd:de:40:e3:3c:3d:5c:dd:77:b3:7e:5f:c8:85:02:
79:72:bc:16:ea:48:5f:72:28:25:03:1e:4e:a3:42:
04:b3:5a:4a:c3:33:08:9d:6e:91:e8:16:0d:d3:4e:
55:78:ad:57:0f:f1:3b:5c:5f:64:a8:e3:e7:46:62:
2a:4f:59:d2:c8:80:87:78:ae:e2:6c:dd:e5:e5:53:
07:5a:87:5d:30:19:a7:d0:1d:aa:21:50:31:d4:49:
00:d5:6d:5f:a0:3e:bd:44:03:6d:b8:6c:d2:70:fe:
26:91:1d:1f:c2:82:1e:06:ec:3e:af:6e:41:a9:42:
ff:a4:d4:a1:b0:9a:98:30:3f:f5:98:75:5c:24:c0:
7b:5e:5d:84:ea:66:42:a6:26:5a:11:26:c9:e6:25:
46:c8:1b:9b:95:ba:77:98:82:c2:72:59:64:70:44:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:E7:73:FC:75:6A:B3:A2:EC:A1:66:3D:38:C3:A5:84:15:F9:58
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:ae:1f:ba:80:2d:95:74:4e:f3:95:b9:9c:4d:46:0c:12:
80:69:88:b0:dc:b2:57:23:15:48:41:a3:60:cb:18:73:fe:5c:
0c:48:a6:82:5b:55:5d:fb:75:e0:84:84:e8:53:26:57:6a:9d:
82:41:d0:8b:c3:ba:63:70:d3:64:4a:d5:57:27:e1:5d:38:8c:
30:3d:0d:0f:f9:92:c8:bd:4e:64:e7:8a:8a:93:d0:04:f9:fd:
92:aa:bc:95:fb:7c:af:87:ac:77:75:13:80:04:a8:16:cf:9b:
1c:4e:87:2f:18:85:a6:53:ce:d7:25:5b:a7:f4:1e:df:fe:02:
d8:ba:19:de:c2:72:5c:fb:ea:d8:0b:f3:cf:1b:ac:08:89:e7:
23:b3:b9:c2:6c:5e:5c:97:a7:08:bf:2e:0e:17:24:aa:89:e7:
6e:99:be:91:68:c4:8c:2a:ae:e4:57:d0:1c:b7:e2:44:df:18:
13:77:0c:e8:3f:99:c4:d8:9b:e3:1a:85:52:cb:e5:32:bb:42:
1c:77:95:2f:72:54:44:1e:40:04:0a:22:9e:64:77:b7:7f:61:
54:b4:4d:eb:75:10:d7:8a:41:e2:2b:80:18:e7:75:89:da:b1:
6a:4d:80:dd:51:1b:11:07:d9:ce:46:a9:7b:83:aa:9f:36:31:
33:26:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:32:42 2025 by rpki-client