Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: IgmECm3j/PoLCEhzk6bdSkWu82lMoww4EwLsnVqjrfA=
Subject key identifier: 24:5E:4D:65:57:DC:91:77:56:E0:3E:ED:BA:67:96:81:7E:23:8D:3C
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 0194BBCE7B0CA14292006BBEC8DFB6A31526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
2: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: Vo02LSEFfJJjZ+UjSTdYApX4KFKjKnw9R4Y1D1Cpuw0=)
3: S3A1POWiFi4TlajvXsCPIiaaz_4.roa (hash: IXC2iM5ax6sDDcgMKmOBil5L9Ty3tdxbCnAuaFnmWnw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:0c:a1:42:92:00:6b:be:c8:df:b6:a3:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=245e4d6557dc917756e03eedba6796817e238d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:85:6c:d4:84:0a:3d:25:60:15:3c:06:f2:
30:31:0e:03:e9:82:56:f7:2c:2e:94:8b:ac:56:58:
b9:35:2c:85:13:07:75:91:25:7c:4a:5f:39:23:6b:
2a:0c:10:0a:1e:6e:34:c8:7d:48:d9:24:28:09:a2:
c7:48:80:61:d3:c9:0d:1a:e3:23:2d:55:ad:ed:c2:
e8:c4:b2:27:42:cd:50:9b:2e:92:eb:b0:06:54:ca:
60:4f:cd:51:1b:91:94:95:39:43:34:75:1d:17:a9:
e0:4a:bc:7c:9e:cf:a5:8d:19:5b:d0:7e:d7:24:1d:
39:19:9f:26:28:7d:97:11:d3:5f:a0:db:3f:5c:29:
72:14:7b:1c:3f:c8:58:7c:65:5c:4b:68:05:89:15:
e2:32:b3:89:fb:0e:76:a3:a2:6e:95:17:1d:f7:d4:
24:cc:58:e6:47:d5:69:60:79:c7:00:86:b1:7f:7e:
f6:82:cc:4b:3e:d7:e3:a1:93:cc:51:07:7e:7b:fc:
c6:cf:14:f4:f5:16:f8:94:00:95:4a:2f:22:22:a7:
6d:06:f1:36:da:1d:8e:76:ad:df:44:fc:99:47:15:
40:b2:63:0a:db:4f:38:ef:98:14:91:55:30:32:29:
ca:20:5a:1d:ca:c2:5e:18:3e:11:42:bf:f6:9d:40:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5E:4D:65:57:DC:91:77:56:E0:3E:ED:BA:67:96:81:7E:23:8D:3C
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7c:6e:4a:47:82:cf:4b:8f:ea:74:30:0b:71:b5:be:78:83:
01:1f:a2:2f:0b:78:7e:9b:8e:b2:1d:08:c6:27:d7:92:44:44:
58:a4:94:f3:1b:77:ad:a0:f8:ce:31:f6:e1:31:ec:da:85:6a:
19:fc:ef:b6:fd:91:17:fa:5c:db:4e:88:38:c9:33:2a:eb:af:
81:60:d1:3a:2c:94:59:02:de:f1:ab:4d:d3:2a:46:58:cf:3b:
e7:5f:c3:86:f5:1a:9d:3f:8d:2f:f4:16:95:af:81:f9:db:70:
3a:a6:7d:4e:07:46:d9:db:4a:31:8b:fb:f9:08:7b:a5:62:83:
95:13:4d:e4:48:fc:e7:55:d1:ed:c9:95:26:79:f7:91:de:2b:
c9:03:01:89:58:5d:09:fb:b1:25:34:10:77:07:a6:c5:23:70:
e2:0e:b8:8e:19:1d:55:ac:eb:a7:bd:d6:3f:39:48:3c:0f:30:
bb:b4:54:7e:b4:d2:2a:f7:3b:83:fb:54:6e:b6:8c:c6:55:d6:
5e:7a:5d:e0:a1:c2:d0:c0:d0:88:fd:0b:e4:b0:61:95:ec:df:
d5:ce:06:c1:80:f6:17:e7:a8:3f:dc:d1:13:e8:df:12:f3:2f:
92:32:2c:1f:a2:64:60:de:7b:42:08:93:1a:76:4d:79:f7:16:
ee:e3:5d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client