Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
File: IG0YKjtEp74F0-5w3JCoXVer-40.mft (raw, json)
Hash identifier: 0OGzJkekHJU1qBOem72/gfjo5id1zHv3M1M5uYu0Ykk=
Subject key identifier: CE:E5:D3:8E:D9:A3:6D:FD:C7:FF:02:F4:E0:98:3E:B7:9E:8C:EC:81
Authority key identifier: 20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
Certificate issuer: /CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Certificate serial: 0194BC72B4807AF6436B93027BED8A994F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
Manifest number: 138C
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: IG0YKjtEp74F0-5w3JCoXVer-40.crl (hash: C/znZ7qOVK/foU/gUbtcY05CdL6AJFWHmi+nZufNfCA=)
2: oL5s4daZ2-CvSDbZedMFWpoaJg4.roa (hash: rBJTh0rRi4HBxgXoejT0Pcmh+tBjyPVq1RYIy0Ljiec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:80:7a:f6:43:6b:93:02:7b:ed:8a:99:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206d182a3b44a7be05d3ee70dc90a85d57abfb8d
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=cee5d38ed9a36dfdc7ff02f4e0983eb79e8cec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:13:db:05:94:56:8a:58:7b:19:74:8e:8f:
06:fb:18:c2:5a:00:96:62:f8:61:b4:e4:fe:41:14:
19:21:05:0e:de:f7:cd:27:6e:1d:0a:7d:13:69:db:
40:0e:5a:3f:4a:8b:c0:cf:5b:0f:94:3e:2a:45:33:
5a:81:1d:f6:68:2d:a1:09:2f:ca:52:b0:8f:01:47:
22:3b:8f:22:53:06:88:67:39:9f:03:b2:21:48:18:
35:9f:17:95:7c:e8:78:23:55:ae:10:f6:e7:24:29:
d2:41:22:ba:99:3b:e3:6f:41:42:1d:1f:83:a0:f4:
2e:3e:07:4a:ab:82:54:86:7a:f7:22:1a:45:90:bd:
1b:df:d9:35:f9:04:c5:b2:8a:29:a0:aa:3f:4d:24:
ab:9d:7e:96:03:a5:0f:98:7f:19:f6:da:d3:64:62:
85:56:d1:65:14:7c:b3:a2:84:c6:7b:93:24:5d:de:
b7:5f:0b:60:1e:32:2c:5f:f1:4e:f5:ad:3f:8b:d4:
db:7a:dc:0c:f0:30:9a:c5:0c:8a:49:a1:4f:3d:f5:
0a:01:a1:10:17:cd:2e:56:f3:24:ba:45:e8:4c:a8:
34:66:d0:3e:f4:76:10:a2:90:42:a2:62:88:c5:ba:
ee:a3:ad:0d:8e:fb:18:1c:43:f1:18:2a:e9:2a:98:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:D3:8E:D9:A3:6D:FD:C7:FF:02:F4:E0:98:3E:B7:9E:8C:EC:81
X509v3 Authority Key Identifier:
keyid:20:6D:18:2A:3B:44:A7:BE:05:D3:EE:70:DC:90:A8:5D:57:AB:FB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG0YKjtEp74F0-5w3JCoXVer-40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e6f2ee-0476-40b4-bb6a-660778099b3d/1/IG0YKjtEp74F0-5w3JCoXVer-40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:0e:d0:41:47:66:bb:fc:7b:50:ee:d3:48:0a:ab:50:d3:
e7:3d:5a:ef:e1:7e:e3:cf:c7:ac:ca:5a:4b:74:0e:8e:cb:9c:
2b:f7:53:04:26:a6:cf:a3:92:0d:6a:ac:7b:7b:9e:dc:89:f4:
95:85:e2:5d:d8:9d:cd:8c:e2:eb:e2:70:e4:d4:aa:cf:80:6b:
24:35:29:9b:ed:46:c1:a8:99:16:1b:86:a1:22:a7:49:2d:c2:
d4:ec:52:a6:5d:c3:e3:46:ce:47:23:43:bc:14:f8:de:33:f9:
4a:0b:88:0d:6f:49:7d:fe:36:b4:6e:f2:ab:46:e1:ca:5e:a0:
af:e3:54:01:a3:a5:68:d6:87:99:ca:ef:17:bc:6f:12:f3:49:
5c:0d:64:90:3f:49:e9:f7:93:96:1d:26:b3:2f:95:21:ed:7b:
9c:7c:f5:53:a3:0a:1c:e7:2b:eb:3e:98:a9:ff:c6:d1:27:bd:
38:83:06:33:51:84:2c:d5:b4:0b:ae:28:0c:e8:3b:6b:e2:bd:
2c:0a:73:64:b9:3d:b2:74:8b:c8:40:38:a8:bd:98:6b:bc:62:
e0:03:5b:8d:8f:e3:4f:63:93:d9:ae:45:c3:37:6a:22:b4:25:
3f:e2:c5:c7:42:52:ea:80:88:2e:4a:a5:90:e4:f6:0a:05:f8:
b9:10:79:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:36 2025 by rpki-client