Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: oDitpAaMmxcQj0aXLuTXpiG0a+GXfitY2A7ogwbpnAU=
Subject key identifier: C2:40:19:0A:55:CD:81:0B:18:57:09:F1:83:D1:0B:14:0E:3C:68:C2
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0194BC72AA696685947DF9EA229B8A97728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: uNJcen5Ap1tnvZy/PWwAX7OO63kEUWP8KLkuzYvPCCU=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:aa:69:66:85:94:7d:f9:ea:22:9b:8a:97:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=c240190a55cd810b185709f183d10b140e3c68c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:c1:ad:d1:60:9d:78:5a:ec:0d:9a:39:c6:
2e:93:04:ef:e9:08:1d:c4:4e:0c:8e:92:ac:98:0f:
9f:c3:c3:fb:40:8c:be:e2:63:23:8c:1b:9a:ac:90:
b4:67:0c:74:55:ff:6b:ed:fc:e2:71:37:d0:13:57:
2f:86:0e:34:aa:ba:e2:38:0f:92:ea:b0:41:87:53:
3c:92:6f:c7:e3:4a:47:41:03:38:06:83:27:29:d6:
22:48:53:4f:a5:4c:7d:a5:65:b2:7f:8f:f5:09:4d:
32:cc:8f:ca:27:82:9e:7d:40:1b:7b:a8:5a:8e:97:
e1:bf:c4:0c:cc:72:70:42:6c:44:e9:3b:25:18:a7:
ed:23:f2:ad:93:5f:60:cf:b0:f5:cd:c9:3f:aa:5c:
45:24:5e:b0:e1:d5:d7:5a:fa:98:78:09:a4:9b:7e:
5d:e7:a6:2c:5f:3d:46:97:31:51:79:39:09:1b:90:
34:6a:54:72:e9:9a:c3:98:b2:af:a6:f3:4a:c3:a4:
ab:fd:d4:6b:b1:c4:97:0f:e6:53:db:e7:f1:a5:81:
82:58:e7:15:00:fe:e8:a4:a0:b2:95:f5:37:cf:c0:
6e:ba:9e:e0:00:d8:bb:86:66:c1:14:ae:50:aa:31:
e2:13:25:23:4b:8e:6e:e2:7c:56:2e:c6:1c:e6:73:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:19:0A:55:CD:81:0B:18:57:09:F1:83:D1:0B:14:0E:3C:68:C2
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e0:c5:64:7f:ba:90:01:b5:30:9a:34:8d:f3:57:df:6b:f4:
4b:1f:7d:83:6b:9d:1e:fc:46:41:a4:89:5f:95:a1:a8:94:f4:
47:c7:e1:7c:5f:0c:38:5f:fc:be:3c:28:fd:81:6a:bf:bc:aa:
53:30:b8:d6:89:61:96:06:61:f9:94:aa:f2:df:6a:f7:05:62:
91:77:76:f7:e2:56:f5:86:dc:48:ee:cf:8d:7d:86:e9:82:2f:
7d:6d:11:6e:ca:6b:0c:0e:8f:94:92:0f:fb:b3:34:65:c6:9a:
21:ec:f4:08:52:f7:63:46:6f:7d:a9:c0:43:ab:8c:00:47:34:
7e:d2:cd:be:f9:58:e9:bd:4a:12:e2:1e:fe:88:ac:b7:d3:c7:
ac:1e:2c:25:5d:48:86:bc:19:c6:f2:49:71:1b:2c:f3:e2:31:
38:08:4b:ff:f4:64:30:87:6c:dd:7c:75:52:4c:65:73:77:f3:
28:33:82:47:67:92:3b:03:a7:e4:ed:f3:16:9c:08:f7:c3:15:
0e:3a:d0:b4:d8:99:30:f2:d2:9a:e6:0b:08:71:cd:e2:08:25:
9d:0a:85:a4:ca:41:98:e0:8c:3e:c5:be:fe:80:32:82:9c:68:
36:92:e4:31:15:01:ff:9e:3e:52:c9:d1:67:aa:62:61:76:23:
54:41:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:33 2025 by rpki-client