Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
File: ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft (raw, json)
Hash identifier: Y6ksoxiygiHNMBwd75rX1R/8exIUWoMYIRSWk2fjC6o=
Subject key identifier: A3:5B:7E:6C:FB:D4:41:9D:E7:14:6B:6A:2D:09:32:5D:72:13:A6:49
Authority key identifier: 8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
Certificate issuer: /CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Certificate serial: 0194BC729780A178AA16E5EEF91E5C049B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
Manifest number: 0812
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: RZMmAomJrqs0yCU-Sl6pSFt5lLQ.roa (hash: mHTuz89sEZswLAvVyf4aCavMINMyLcZOi1mRW8tq0vE=)
2: ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl (hash: vCEs8lIsmlU5PlubSns7XPSy6yF2qIrLNbNVtabw+vg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:80:a1:78:aa:16:e5:ee:f9:1e:5c:04:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7f32d33f6646779a51fb23201c6442d1451ca
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=a35b7e6cfbd4419de7146b6a2d09325d7213a649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c2:b6:1d:c1:cd:6e:c5:33:e3:e3:e0:8f:ec:
9e:d2:d8:bd:65:1b:eb:ad:6f:c5:15:4a:76:c2:2a:
53:5a:dc:d8:45:5a:c0:fa:af:60:84:21:5f:18:96:
70:f0:4c:de:eb:ea:fe:1c:c0:43:c6:9a:d6:ab:94:
22:75:aa:04:f3:f2:64:03:03:99:86:14:60:4f:63:
d3:07:b9:6a:dc:23:0c:e8:78:79:1b:af:c1:f0:31:
30:51:0f:06:95:21:d3:87:06:b9:bb:85:e4:47:d3:
35:47:7a:58:dd:6a:80:06:f7:84:db:7c:50:6c:45:
6d:c8:71:76:18:12:ca:1b:c7:be:56:c9:e5:74:ff:
60:45:fc:63:46:8d:f6:fb:e8:b7:ca:c4:b5:49:18:
45:51:22:37:38:a5:71:50:ce:13:a6:27:32:3b:15:
ba:43:00:fc:fb:27:ed:57:b2:b7:98:d1:df:ba:99:
95:2e:00:1f:7c:a1:96:4d:2b:2a:a5:bc:e3:9d:51:
8e:d5:0e:63:31:52:dd:6d:e9:03:17:59:45:d1:95:
8b:d1:a4:69:a8:b2:4d:4a:be:48:42:4d:86:73:7f:
78:95:54:f8:7e:cd:69:5d:52:2d:6b:2e:35:89:4f:
2b:76:fa:4a:6d:3e:82:40:de:2c:51:7d:a4:a6:55:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5B:7E:6C:FB:D4:41:9D:E7:14:6B:6A:2D:09:32:5D:72:13:A6:49
X509v3 Authority Key Identifier:
keyid:8A:F7:F3:2D:33:F6:64:67:79:A5:1F:B2:32:01:C6:44:2D:14:51:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivfzLTP2ZGd5pR-yMgHGRC0UUco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/affcbb-c1b3-444a-876c-5b72fb927d1c/1/ivfzLTP2ZGd5pR-yMgHGRC0UUco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:20:e4:7f:6b:75:f8:d1:c4:1e:00:2b:88:47:00:08:8f:5e:
23:b9:7e:69:f4:59:1a:86:a8:42:d4:ac:a9:d0:dd:3c:12:6d:
bb:32:70:77:86:2b:82:f5:c2:9b:ba:22:07:eb:b9:0e:39:74:
40:0a:3b:0d:a4:fe:ff:da:c1:32:7e:30:d3:29:f7:46:12:61:
f2:ea:66:d3:c4:13:7d:b7:7e:1b:ff:f1:e3:b0:e0:27:20:15:
78:ac:bb:66:54:f3:42:bb:46:34:2d:37:f5:48:ec:d3:e5:58:
ae:12:76:c2:3f:6b:10:91:0a:7e:57:32:76:21:98:3a:87:50:
ce:32:06:ce:69:f4:f0:33:23:9d:00:3f:91:4e:c4:77:b6:68:
9d:28:c6:e8:10:72:57:2c:8c:01:5a:a7:f4:7a:13:79:cc:dd:
46:03:17:3b:50:3c:81:60:a1:48:6b:67:ad:77:1c:0d:cb:e3:
0c:eb:00:3e:86:c6:1a:c1:b7:ab:07:d5:81:ed:b0:aa:b2:f2:
30:b5:59:cd:e7:35:52:a4:15:a2:c9:8e:d0:79:48:84:71:76:
5d:e8:91:7f:22:24:f1:39:5a:69:a8:a7:08:c2:52:47:fa:24:
e2:d2:87:e8:82:40:f4:c6:48:e7:b1:c5:bc:2e:a8:f6:de:4b:
d7:a2:20:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:36 2025 by rpki-client