Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: Y3vM9mcI7oTfvWSMlRznaE1TX9NubT05KmBAWNc16iI=
Subject key identifier: 5C:75:80:A9:C7:36:EE:3A:5B:1B:19:C5:EF:96:E6:58:D1:CB:5C:55
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 0194BCAA131A5D013D9BF6390F626F99F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 2H2nerzLtdSTry2ZOI99HJWM0u8Vn8z5YtHSGEabCzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:13:1a:5d:01:3d:9b:f6:39:0f:62:6f:99:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=5c7580a9c736ee3a5b1b19c5ef96e658d1cb5c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:07:1c:1f:f9:7b:04:70:38:29:f1:20:c7:
1b:a0:2d:29:3f:dc:49:a4:7a:59:18:22:b7:0c:d4:
3c:c3:95:ae:9a:d1:d5:4b:86:f6:4f:99:d9:c8:d2:
6c:8e:ff:c3:b9:72:f9:60:15:30:90:ee:d9:2e:04:
d3:c1:df:e7:cc:15:84:3d:6d:29:9b:57:d2:c0:65:
ec:24:0b:46:56:62:14:e1:89:d4:bf:60:b0:35:c7:
9a:3d:ff:81:56:7a:06:63:68:db:bb:fc:67:4c:2e:
06:2e:0c:8d:82:6e:a5:ac:89:cf:12:ce:70:ac:1b:
05:16:0f:3a:f0:f6:26:f0:7e:76:70:74:59:c2:91:
48:da:12:f1:88:62:b4:34:0d:51:07:10:31:ed:24:
d8:19:bc:5a:80:c8:3a:ca:54:91:0a:dc:1f:8e:37:
0b:c3:cf:12:c7:82:c4:b0:28:3b:fc:2a:8d:d5:1d:
10:49:20:0d:ad:3f:9f:40:be:31:0d:c8:e3:74:d1:
0b:db:e6:65:c1:cc:e3:ce:4c:65:39:a8:6c:ed:94:
d7:e4:ae:2c:b5:f8:0c:71:dd:2d:44:c1:af:60:10:
81:39:1c:8c:2c:fd:82:18:96:15:b9:af:0d:82:0c:
41:e3:fa:b3:4c:c0:87:13:cf:23:92:b3:dc:34:89:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:80:A9:C7:36:EE:3A:5B:1B:19:C5:EF:96:E6:58:D1:CB:5C:55
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:41:b3:2f:7a:17:3e:a3:c2:43:8a:b5:80:ce:01:75:c6:ad:
33:0f:0a:67:a7:01:30:25:e0:37:db:18:2d:ee:98:12:89:74:
6e:31:ee:a1:9e:f1:e1:36:a6:de:d1:75:1c:82:08:6d:7d:29:
90:46:26:99:a6:a1:ed:9e:4f:9d:18:90:5b:02:0f:a5:5e:07:
e4:62:4a:81:fc:ac:b2:d4:89:fd:cd:dc:c1:07:9d:0f:78:02:
ef:ee:c5:bf:42:d5:d7:81:f0:5d:5a:b7:2b:ff:37:49:9a:6b:
23:d0:86:5f:d2:27:4d:9e:3f:ad:25:ff:b0:f0:fc:ab:79:38:
5c:7a:4d:93:37:6d:07:d4:6c:f3:16:d7:f7:24:0d:88:00:65:
52:c3:f8:89:11:30:5e:50:e6:b7:dc:d8:9d:57:d2:82:04:20:
dd:56:1a:01:0a:67:f5:07:cd:ca:96:c0:d0:d7:59:1b:ef:69:
59:6f:2b:e6:0b:71:89:8f:f0:e7:1f:ea:32:2e:55:ae:e1:69:
4c:75:15:0c:a8:14:6f:d3:25:87:75:f6:34:61:6a:1f:09:f1:
1a:4a:30:23:50:c6:e6:ad:fe:a2:c0:65:1a:81:45:f1:1c:4a:
38:4f:9b:78:4b:1d:32:77:cf:66:f1:7a:e6:ac:d4:43:a0:d7:
43:20:4e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:59 2025 by rpki-client