Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: S/gxG6bRGZhOsxA6X5JZqyq9KL3sX5iV+k+/veU5cUU=
Subject key identifier: 7C:D7:25:CE:11:07:66:67:D8:C7:1D:77:26:80:5F:14:C3:C7:47:F4
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 0194BD17D60A089C1FD0CFBE5A111B102EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 122B
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: 5Fp1j9rS6yWIM+cg9pmrpJxaTiqutzW3bYd0v8XlVvs=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d6:0a:08:9c:1f:d0:cf:be:5a:11:1b:10:2e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=7cd725ce11076667d8c71d7726805f14c3c747f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:88:f5:55:e9:0e:51:0b:49:6e:99:fe:f3:
af:d4:50:c4:c7:28:7f:3d:08:1e:8b:ae:8c:1f:49:
8a:2c:4e:03:7d:e4:56:81:5b:48:b6:ec:c6:39:2c:
c2:0a:f6:d6:ca:57:42:8e:10:fe:33:11:41:1b:c8:
3a:59:10:8b:74:a7:39:f3:f8:16:cf:d7:46:8a:e9:
b4:49:f7:72:0d:a4:93:f0:a5:b0:fb:68:89:ee:3d:
91:d5:7b:72:b8:53:e8:63:61:34:e3:a7:9b:aa:d4:
6f:4e:80:6c:cc:62:81:11:a3:63:9b:c6:81:c2:50:
76:f7:d2:9d:8e:94:55:10:c2:a7:62:a6:a5:03:1f:
16:46:96:43:56:9c:c0:39:58:3c:78:f3:a5:eb:dc:
96:ae:89:96:2b:8b:08:55:25:57:78:ef:d9:20:6f:
7f:d3:d6:3d:42:2b:ea:88:5c:dd:93:bd:63:f3:bb:
4c:7b:ce:c6:69:f3:64:c8:ce:c3:02:98:fa:1f:40:
48:7b:ea:2a:07:04:c9:15:29:ed:f0:fe:29:26:21:
b1:dc:ee:e9:bb:a2:27:c4:99:a6:81:e0:48:fd:00:
6c:54:23:09:28:f2:7d:72:0c:01:42:e2:14:b7:40:
61:02:00:c4:a0:52:73:60:37:9d:a8:b8:86:4e:c7:
33:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:25:CE:11:07:66:67:D8:C7:1D:77:26:80:5F:14:C3:C7:47:F4
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fd:ed:3a:96:73:41:6e:f8:81:d6:6e:55:b9:28:83:ba:db:
aa:0e:4b:25:c5:94:cc:97:0b:53:77:28:8c:47:13:f8:18:e9:
c3:e7:15:5a:e7:fa:78:54:d3:d1:c2:74:c6:d0:6e:52:23:02:
e9:aa:2b:9f:64:c4:61:22:9b:c6:48:28:b2:13:7f:ec:40:30:
d3:ac:39:27:79:71:be:85:70:47:7f:e1:12:fb:0a:f3:45:61:
5c:ab:35:c1:1d:9e:cd:14:c5:cf:d2:1d:0f:18:02:34:5e:62:
cc:af:68:4b:08:50:33:02:f2:3f:d5:c9:ff:25:9a:50:42:07:
e6:bf:3d:d0:95:d5:7f:45:18:c8:8a:12:31:3d:07:a8:d8:0d:
99:21:1d:1a:c3:6d:67:69:c5:f5:96:cf:68:89:b5:a5:f4:f5:
61:b2:63:bf:ec:bd:d3:46:b7:3a:d2:b8:bc:9b:b1:ca:98:32:
c7:c1:24:06:99:5a:b3:f5:9d:9f:30:61:5d:94:64:7f:ed:c2:
f1:39:9d:c7:f9:33:80:a3:b0:e7:f6:5c:ec:c9:54:0e:ef:64:
0b:f2:ee:8e:38:af:cc:30:15:0a:52:4a:2c:e2:bb:ff:6e:80:
9b:22:60:15:95:f6:b1:7a:ce:13:f0:15:06:ee:70:6a:8f:7d:
8b:31:7c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:06 2025 by rpki-client