Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
File: IslM_TGhqAnL9sAqdKV73cf_H3g.mft (raw, json)
Hash identifier: KW+54lwdHyCQOLTbHuZkZ/DnMk2dXX8YutpQplEdpg4=
Subject key identifier: 40:0E:1F:D2:48:08:CB:ED:70:03:4F:0A:F3:D3:CA:F5:00:8D:0A:22
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 0194BBCEF18A4F9AB7FB72067C51352143E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
Manifest number: 04D4
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: CwytAeoAPMBULxHYDp6qDplt6X0.roa (hash: viFg7rwxnBmLUeqhjN2NYQSZQQF6tsyU789xfVsXk2A=)
2: IslM_TGhqAnL9sAqdKV73cf_H3g.crl (hash: wzyqlKncUWaJ/Ps4SJoAJca/DuqhcncFOqNUIAlbjdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f1:8a:4f:9a:b7:fb:72:06:7c:51:35:21:43:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=400e1fd24808cbed70034f0af3d3caf5008d0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:5e:fc:df:c7:fb:6a:29:d0:9e:53:08:eb:
ea:c1:19:f1:0e:0b:35:8e:66:b5:23:39:d3:02:a1:
10:c4:74:23:c0:00:9a:c0:79:13:af:2d:63:dc:2d:
3e:48:64:f5:2c:46:37:02:d1:80:ed:70:c7:3e:0a:
92:ea:e8:f8:fc:89:cf:0d:87:e0:ed:2e:08:75:7b:
5e:c7:a3:aa:74:86:ab:26:34:55:cc:a1:bb:05:4f:
98:8a:26:d2:8d:e3:14:0e:41:26:74:da:5a:21:62:
0e:41:e9:7f:6b:97:ba:55:a0:e9:73:85:d5:9c:ea:
24:60:46:87:b4:17:a3:52:9c:59:4a:72:3a:43:ef:
9a:28:db:35:b8:81:3a:9b:df:05:04:31:cd:3d:85:
e0:0d:63:4e:8d:66:0a:d7:e1:66:d2:89:12:1a:7a:
7a:f5:e5:5e:95:9c:1c:db:ec:a4:94:6b:3e:3b:be:
9f:d1:b0:07:db:da:15:45:fc:15:72:ed:02:b7:8d:
d3:f9:e1:28:f7:40:b7:c9:48:6d:2c:83:e8:ca:8a:
36:ad:c0:dd:07:48:bc:49:77:64:2b:8b:7d:f8:18:
fc:37:08:24:0c:73:e1:7d:a1:8c:7d:9e:75:43:8c:
2a:84:cb:95:64:19:3d:ff:78:de:e2:f0:b9:13:27:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0E:1F:D2:48:08:CB:ED:70:03:4F:0A:F3:D3:CA:F5:00:8D:0A:22
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8e:08:39:5d:a0:9e:23:56:a6:35:d9:f4:3d:1b:a2:42:18:
8f:e3:c2:5b:58:95:c5:1a:8e:70:5d:d2:05:fd:59:8f:53:24:
c8:a0:c4:69:9d:4a:b7:6e:c6:7d:08:00:52:60:b6:6f:09:6d:
e9:14:16:cc:34:73:73:21:b2:8e:7c:d5:78:ee:47:5a:e1:02:
6f:34:b6:b6:c7:e3:7b:04:0b:3c:c1:19:4b:e4:d9:00:b5:f7:
65:ba:56:77:c6:65:d3:24:a4:bc:cb:8b:2b:58:4c:a0:3a:1a:
2b:a6:3a:ee:7f:cb:73:66:cd:63:fc:44:79:a2:40:8f:11:09:
c3:41:39:3f:52:a3:5c:14:40:94:e3:d2:99:e8:2d:13:6a:d1:
49:3d:a5:7b:59:b1:0a:2a:20:30:04:12:e0:1f:d9:48:ed:0f:
26:c1:18:3c:9d:05:4d:b0:34:39:d3:7b:9f:66:57:da:41:50:
9c:79:21:e0:13:be:32:72:12:b0:c4:b8:c0:1a:ff:04:b6:7e:
d2:e1:32:c5:72:4d:6c:b3:01:0d:97:21:82:a3:eb:cc:2e:62:
ca:24:c7:d8:40:f1:79:36:64:af:47:32:fe:1b:96:4b:84:41:
8d:f7:a1:26:85:61:d9:e0:20:fe:a1:e6:f1:36:09:52:87:c6:
8d:e2:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:02 2025 by rpki-client