Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: WgM/9m+xNUsMFR7eSiUbcsesimQ6BM0y+zsHw2Lxt88=
Subject key identifier: 41:CF:0D:51:4A:0E:13:0F:AD:DD:D3:52:31:55:16:7B:0A:9E:55:23
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 0194BD179F788486E1154444AB5DDE062883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: 7xae0ucIz2HSo3Hp+AWMVufwIhSlWuoRv4Jlweskl04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9f:78:84:86:e1:15:44:44:ab:5d:de:06:28:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=41cf0d514a0e130fadddd3523155167b0a9e5523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:12:bb:49:12:40:8b:67:eb:62:41:7a:b6:
2b:b9:a9:86:44:b6:2a:5d:40:d0:97:11:b2:a7:1b:
ec:df:87:91:1d:d3:73:1c:d0:ec:2d:da:28:72:d4:
bb:4b:3a:c4:cd:7f:50:52:d8:89:f7:ec:aa:09:4d:
a6:e5:4e:0b:e2:d3:b5:7a:e2:8e:80:06:e9:ce:cc:
d9:e1:fb:35:f9:fb:8f:55:bb:7e:90:d8:03:3c:c5:
0f:ee:c2:0e:4f:e1:42:e3:50:28:9f:d1:37:77:dd:
0c:6f:eb:0f:32:e9:c7:1b:87:69:3d:d0:15:c0:b0:
b6:34:d3:76:42:0c:60:f5:e2:ea:ca:3e:f5:e9:51:
e6:19:5c:2d:a6:a3:ae:c1:53:25:ba:56:1f:73:2a:
da:a7:c5:8b:41:f9:59:30:56:f7:2f:c2:80:cc:76:
17:25:be:a3:15:7c:90:49:92:ec:31:cc:f6:6f:01:
c8:46:b0:1f:26:56:0e:e2:87:be:54:36:70:25:eb:
9f:e1:26:06:5a:2e:3a:24:99:e5:69:87:f1:a9:01:
f5:32:2d:5a:f9:2d:1b:10:f8:82:19:d9:bf:fb:12:
59:83:5b:0d:d4:90:11:87:af:08:44:f9:b7:2c:7f:
38:d5:f7:e2:15:e5:40:78:99:36:cb:be:a3:11:93:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CF:0D:51:4A:0E:13:0F:AD:DD:D3:52:31:55:16:7B:0A:9E:55:23
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:8f:a6:ee:fa:2f:83:16:95:2c:80:34:5f:84:96:55:f5:
09:64:5d:bb:e0:06:68:a0:21:54:76:66:de:8d:01:4e:18:dd:
d8:89:e1:18:e4:b3:a3:ca:9b:fb:9a:5e:40:d1:0d:d8:b3:d1:
b0:9d:bd:aa:b7:61:0c:47:cc:22:da:9d:ca:ac:3e:8f:31:29:
e6:3b:80:f4:c8:ca:a2:66:f2:98:48:19:0c:c5:e3:d4:c4:6a:
5a:bd:c4:6c:0a:38:5e:b3:e5:eb:74:c4:e5:60:76:50:93:01:
56:52:6d:91:ab:30:64:43:61:8b:d8:58:0f:62:d5:00:f8:26:
8b:da:9e:75:4b:75:c7:90:ec:fb:80:7a:db:18:5b:96:4b:01:
24:b3:58:89:69:53:93:c1:4c:c1:b0:6b:3e:b2:8e:23:14:b5:
28:5b:8b:2e:ad:3e:24:23:4c:05:05:6e:da:26:2c:8d:63:52:
8d:8a:63:97:8d:d0:fa:3c:35:2e:a9:61:e9:4c:0d:54:cc:e6:
02:95:07:0b:4c:67:49:c9:79:8d:70:a0:7f:f6:49:21:de:a6:
3b:25:88:44:b9:e1:13:48:11:27:a2:c2:1d:c8:e4:d5:ee:b4:
8c:a1:87:f3:0e:d9:06:83:93:b0:76:85:a7:9d:63:10:b6:0a:
ee:ca:7d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:32 2025 by rpki-client