Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: uThEPnYsWmDnPOlH/PLTGAkr2NYPBY3idPSahETnelU=
Subject key identifier: 5E:97:59:28:5B:F7:98:BE:B9:22:86:F5:5D:47:C1:FD:54:1E:C4:4D
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 0194BC73207BF0611A695E789EB02658F789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 0E60
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: HzZpAlRGi6MIyqoEJc9A99kJa20UHe4+a0RYYg/UlVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:7b:f0:61:1a:69:5e:78:9e:b0:26:58:f7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=5e9759285bf798beb92286f55d47c1fd541ec44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:8d:cd:43:05:a5:95:8a:75:9c:8d:c1:ca:
01:3a:93:44:c4:11:5e:f5:cb:00:60:69:02:1b:78:
24:4d:8b:16:ec:34:86:80:11:8f:a6:fc:2c:71:a1:
e2:90:47:00:ba:64:ca:be:06:25:6c:a0:3d:ae:c3:
fe:bd:02:f3:d0:bf:e2:5c:43:d4:bf:f4:2f:7c:c3:
d5:b0:2a:ca:2e:d0:9b:c4:2e:f0:ca:0f:60:12:db:
4b:82:4d:4f:bf:31:d6:6f:aa:51:76:cc:1b:7f:35:
aa:3e:8d:f2:c7:6a:af:9f:92:bb:0b:06:b2:b7:b0:
79:e8:c6:63:4a:97:5b:13:09:45:58:d9:d3:44:35:
30:af:8b:f6:d1:d0:fb:a9:8f:cb:17:d7:bc:5d:a5:
87:67:de:7f:ee:02:a8:24:9d:57:36:4e:6a:d5:ca:
68:d0:ee:7a:42:d0:a3:d4:a8:d6:c7:08:d8:ed:50:
82:ad:fb:3f:00:f1:ac:b2:78:5b:e6:8d:72:22:dd:
b2:8b:01:40:6a:55:d4:e0:b9:dc:6f:31:7c:de:10:
52:78:56:49:e6:a0:1b:c7:61:bb:da:4b:2b:6e:cb:
50:4b:da:5f:98:0e:e7:5a:fa:25:84:4b:bd:2d:17:
d3:49:47:0d:18:7e:03:9d:e6:ec:43:87:72:d5:6b:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:97:59:28:5B:F7:98:BE:B9:22:86:F5:5D:47:C1:FD:54:1E:C4:4D
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:4b:5c:72:6d:4f:a4:b4:b4:60:0c:97:49:a9:02:67:83:
89:ff:51:44:86:39:a9:11:fd:7f:32:2c:25:7e:89:66:61:12:
8f:91:d6:9a:19:e9:e2:e6:d2:20:36:82:cd:a0:2a:2d:ad:e4:
06:69:e9:ad:ff:ea:ea:fb:ef:cd:34:07:b9:92:a5:fe:a0:15:
ad:94:2f:e2:41:89:02:fe:cf:a0:94:dc:a6:23:0e:9f:f3:69:
9a:ce:6d:6b:d9:c5:a0:af:33:49:cd:77:a8:40:aa:41:65:2f:
a5:72:6f:14:0d:e5:a7:53:42:30:9b:33:53:54:3f:ad:b7:a7:
37:79:1a:e0:6f:e5:d5:4b:03:ae:4d:20:09:eb:76:9d:f2:33:
5c:73:ec:ed:51:39:0e:ff:61:c0:a1:51:86:bf:4e:62:d1:2b:
04:37:a1:40:ce:03:37:b4:3e:f9:6d:c7:65:49:df:95:2c:d3:
2e:d3:b9:0e:36:af:84:65:29:df:5c:3f:69:6d:33:1b:d5:c9:
d9:46:73:75:65:c8:a9:ac:36:92:66:6d:35:d6:f1:58:e0:4d:
dd:73:fc:dc:b6:a9:60:80:ee:ca:f4:a3:61:6a:de:25:f3:97:
6d:73:f5:92:45:1e:a4:11:9d:41:54:66:aa:52:f7:d0:06:86:
80:4f:02:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:02 2025 by rpki-client