Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: +Ls+8X4UAbT/E+PGDhVgvvEl3YV4QJLyCWalzKQBRZ0=
Subject key identifier: A2:17:3B:96:1D:46:B0:50:6A:58:79:02:54:97:03:C3:F4:F8:CA:4C
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 0194BCAA222B53AAF3B4698A74FCFE16A6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0AE7
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: xnsSA5bwbVkiqcc3LFKx7PUv7NtW6gUfzwU53YoCCE4=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:2b:53:aa:f3:b4:69:8a:74:fc:fe:16:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=a2173b961d46b0506a587902549703c3f4f8ca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f1:d2:90:86:09:ea:5a:80:5c:c1:85:8d:36:
86:99:ca:93:04:20:4a:e5:37:60:44:ea:b0:17:2d:
5b:bd:af:fa:90:c1:39:60:dd:1a:0b:fd:35:cb:f8:
3a:79:ad:bf:06:5a:70:e0:fd:7c:53:71:e2:a6:be:
67:19:b4:5e:b1:65:d8:3d:c7:a1:62:8b:dd:00:6b:
5f:1b:fa:72:1d:18:2b:84:71:e5:93:cc:b5:76:87:
b6:70:2e:42:ca:a1:2a:2a:17:47:87:29:9c:ee:93:
e4:ce:b0:b1:5e:2d:7b:5c:bc:b7:9b:95:46:a0:17:
4e:91:52:29:79:e0:96:3f:24:58:94:46:e9:6a:c0:
f6:bd:6a:28:ea:20:15:47:6e:01:96:57:a5:d8:73:
90:e2:d0:6c:20:b9:4d:23:1b:57:c2:ae:1f:03:50:
cf:ab:7a:3e:05:05:6f:d7:91:b4:f4:29:87:50:ae:
18:0d:22:49:a4:3c:d5:a4:ba:ae:c3:a8:95:96:a0:
5a:ed:99:69:a7:c4:a0:51:45:5f:10:77:a2:d4:80:
8e:07:40:ce:b2:2a:28:6f:65:00:2b:12:f0:33:4b:
88:1a:ec:b3:99:73:d8:4a:c3:7a:a5:ae:37:0b:3d:
39:2b:72:7e:90:7c:ba:c2:35:4c:47:3c:72:62:5c:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:17:3B:96:1D:46:B0:50:6A:58:79:02:54:97:03:C3:F4:F8:CA:4C
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:a3:c3:c7:e2:20:7c:38:b3:eb:38:58:1c:cb:48:23:29:
d0:77:d1:32:68:54:41:88:bc:ec:76:51:70:cc:f4:8e:03:42:
ea:cd:f7:7c:29:9f:ec:eb:ee:f9:b4:87:3e:b5:8b:b2:43:27:
33:b2:2d:93:e6:d9:ac:f4:f5:77:a9:a1:ef:42:e0:a4:b2:99:
62:aa:28:7f:f3:6d:9d:f9:2f:b1:dc:dc:61:74:9b:97:44:1b:
d1:3a:86:3f:9a:0f:66:7d:cd:8c:5f:10:d7:ad:88:6f:d3:1f:
1c:0f:db:5d:89:3d:1a:53:7c:9b:b2:61:68:87:4c:e6:9d:6b:
9f:43:4f:19:9e:7f:8b:f0:a2:e2:00:1f:1b:35:91:8a:b4:57:
99:e1:1b:cd:e1:dd:4d:82:a7:d6:f1:80:5c:70:f0:e5:1a:e5:
e2:1c:e0:1f:a8:0c:7d:15:1b:85:80:8f:c5:91:4b:2e:86:19:
b4:a9:13:4d:c6:4b:6a:f5:a9:5a:49:06:99:8d:19:5f:ab:4e:
a8:c6:4b:48:d4:30:6b:3f:36:1f:34:28:7d:33:70:01:c4:3d:
5f:1e:61:58:c2:5e:29:b8:0c:9c:be:be:68:69:cb:aa:54:52:
52:fc:18:50:6d:a6:4c:5e:c5:7a:a8:27:e7:77:82:09:44:12:
40:ef:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:54:19 2025 by rpki-client