Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier: nYo427JhHPZBSRUx00SWV3pABLNDF5F6KCBU7JpJxHg=
Subject key identifier: FA:8F:5E:F9:0A:EA:5D:34:A9:27:96:67:E6:11:BA:AE:51:45:82:A9
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 0194BBCEFC438F1B1A6E518093D338381CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=)
2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=)
3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=)
4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: GkKMNNDgWKiQAPdbnFBzITCqTzk7jNFsHTjf5jDNLHY=)
5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fc:43:8f:1b:1a:6e:51:80:93:d3:38:38:1c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=fa8f5ef90aea5d34a9279667e611baae514582a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:b7:52:64:7c:62:ad:d7:b0:01:5c:1c:82:
74:07:ea:39:f8:12:11:01:d1:06:be:4d:a6:83:11:
5c:4c:b1:65:2d:69:18:5c:06:12:f0:39:79:cd:85:
31:1c:0c:91:9b:12:77:7f:71:6b:a8:b9:e2:f6:28:
a1:b6:66:64:c7:f7:2c:b0:1f:d5:91:85:c2:20:6d:
2c:18:97:c8:26:b3:d9:e6:87:ed:4f:49:ee:ad:8b:
6b:f5:10:bd:0e:c2:d3:c9:8f:54:5c:25:2d:c5:fc:
e2:66:96:90:e4:e0:b8:7b:4c:07:37:15:93:fd:a8:
d8:c0:be:19:b0:25:37:f2:52:e1:14:c5:3e:de:c1:
3b:d3:bd:c4:ab:c3:1f:16:b1:78:f2:8b:80:2e:28:
dd:b3:6f:08:df:87:88:0a:94:7d:96:b8:c4:a7:6a:
cf:36:3b:b9:6d:6c:73:bb:81:31:94:43:7b:02:97:
49:57:c1:76:0b:49:91:53:c1:de:d3:ca:34:a7:59:
19:48:dd:e4:1e:f1:26:bd:9b:4a:ea:db:49:59:06:
80:e1:ae:c6:46:f6:e3:d5:a0:c1:b0:ce:e9:b7:6e:
75:69:e4:af:5f:03:c4:01:3f:ef:0c:1f:6d:5f:ab:
08:2a:b1:9d:b7:b3:c8:8d:0a:8a:71:8b:93:1a:a2:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8F:5E:F9:0A:EA:5D:34:A9:27:96:67:E6:11:BA:AE:51:45:82:A9
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:38:34:b0:e6:d4:69:f7:de:22:6c:aa:02:43:9d:06:25:11:
24:84:a7:21:8a:d0:45:d4:6f:26:7d:d3:3b:63:e0:57:6c:1b:
0f:5c:13:9b:f7:fe:8a:63:ed:75:78:c0:4a:b6:2c:61:ba:17:
51:b8:6d:d1:ec:cf:d9:81:5c:56:be:43:f2:49:6c:6d:7e:ae:
1c:5d:2c:bd:21:42:e6:14:04:10:e9:17:0b:0a:1e:b7:1d:3d:
c0:a4:79:0c:70:f6:c4:39:07:7b:f8:96:8e:86:05:ba:af:f1:
27:9f:21:63:24:b6:08:23:34:49:b1:b1:89:ec:33:97:80:e2:
de:f8:d5:86:83:26:ef:50:d4:d2:aa:3c:33:de:5b:88:f1:63:
20:67:14:be:cc:0b:1b:ee:e0:92:18:fd:8a:d6:ad:f0:c5:96:
9e:2b:bd:be:d7:fb:76:e3:45:57:0a:ad:ad:4b:58:fd:5e:a8:
05:28:56:b2:e9:8e:81:b9:1c:90:2c:48:3a:70:92:9a:7c:cf:
f6:ba:5c:23:21:49:b2:77:1b:8c:fc:67:ed:8f:ff:5f:a8:a1:
b2:0e:76:ba:68:97:6a:33:cb:3b:a6:e9:a5:7f:59:6c:59:22:
be:de:f8:d7:cb:f6:8f:fe:ad:0e:06:f9:ab:1a:a1:8a:96:d3:
86:22:02:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:49 2025 by rpki-client