Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: PL1vH44TWgwWAEkk3qUl9t35fr3Sr2GToMt0bv4C994=
Subject key identifier: 4D:63:08:28:F9:71:04:98:9C:2C:BB:86:8F:77:E8:64:81:02:8F:D4
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 0194BC3C871B9D1B3D375C19FAB4B8DF1953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: kSLQ8Cki3dmzx9iVYWIr5hQHt+kdZANWyHWyLCfwgs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:1b:9d:1b:3d:37:5c:19:fa:b4:b8:df:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=4d630828f97104989c2cbb868f77e86481028fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:01:42:44:1b:27:cc:80:9c:39:87:93:96:
81:7f:68:9b:9a:0a:37:34:a2:f2:71:08:2d:51:67:
11:a7:45:11:f2:a5:11:c0:f5:8c:62:96:38:8c:9f:
3a:60:df:9e:74:e7:5a:67:91:a4:19:7a:c4:c9:1a:
e8:74:26:e7:83:79:83:25:55:88:db:f7:bf:c8:c6:
90:d4:3e:f2:dc:d8:91:57:68:2b:76:f6:8c:ea:8e:
58:03:c5:36:f3:74:11:3e:c3:65:4d:43:21:e0:c5:
a3:17:25:40:07:7a:57:84:92:29:f2:db:e0:51:14:
a9:7e:a6:58:6c:cd:55:d7:5a:7a:b2:5a:96:15:44:
cd:a2:c6:e3:6e:6c:35:b2:d3:7d:91:5e:c1:84:29:
64:64:02:9b:40:29:ce:65:f5:7a:e7:e3:ab:47:73:
3a:1c:be:9d:52:52:09:dd:3c:3a:32:01:6d:ac:57:
06:67:91:9a:de:5f:ec:ff:d8:ee:e9:54:70:dd:cd:
01:72:9b:52:6d:36:e7:4b:f3:0c:2a:68:b1:b8:d2:
b5:a0:bf:e9:3c:9e:53:45:79:e1:87:11:09:07:79:
10:c5:5b:17:17:3b:57:d7:7c:83:e3:e6:5b:5c:f2:
20:47:02:97:ed:80:82:04:54:da:d0:e7:94:35:84:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:63:08:28:F9:71:04:98:9C:2C:BB:86:8F:77:E8:64:81:02:8F:D4
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:68:cb:e1:be:ac:32:99:c8:49:cc:e5:ef:94:27:42:0a:a8:
ca:8a:a7:03:00:58:71:be:13:58:da:ce:04:24:ca:83:60:f7:
40:34:30:e2:86:49:3f:94:58:08:0f:5a:86:37:a1:e4:28:3e:
4e:78:19:0a:b3:fe:7f:3f:b2:9f:5c:50:78:7e:d1:30:aa:a6:
13:b1:b0:6c:55:09:9b:50:5c:5c:7a:fa:a0:e1:e1:1a:3f:59:
36:79:38:97:3d:0c:0d:93:e8:39:ba:e7:87:44:6e:8b:66:d3:
24:d8:f9:52:70:39:bd:92:10:f2:94:84:a0:fd:b3:2c:90:8f:
ef:0b:cd:21:d1:eb:c9:5f:d2:14:da:3d:86:82:3d:84:ae:50:
86:1a:0e:fe:7b:65:3d:95:13:94:bc:eb:04:eb:1b:ed:c9:b6:
53:3a:a5:ea:a5:7e:ae:2a:2b:a4:28:c0:4c:f0:70:6a:26:53:
81:27:da:ab:fb:4c:8e:cf:cd:87:b0:33:4d:70:a0:97:37:b9:
21:5a:49:33:db:1b:06:61:ed:5a:24:52:ef:ff:37:a3:78:98:
ea:7f:47:fe:3f:b5:81:e5:73:92:25:b2:43:e7:a9:1b:01:50:
a5:ce:8b:51:e9:b0:9b:f9:89:9c:07:90:91:6e:46:cd:50:bc:
6b:95:23:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:29 2025 by rpki-client