Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
File: iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft (raw, json)
Hash identifier: fwURSJFP1k70yrgLMAUX5dCLZSCN201kOq1gh5F7YTk=
Subject key identifier: 5A:94:D4:D5:FF:59:99:B0:F4:67:D2:38:10:EB:2B:0E:1A:2D:F1:DE
Authority key identifier: 89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
Certificate issuer: /CN=898825d2f064989b38c781f2a8535189a26928c3
Certificate serial: 0194BBCF001C27D5B539AE40A7E76EC8ED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
Manifest number: 12AC
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl (hash: 7gvCjGsa9m1cwqoL1jeoZMGS/VRojddsbImcHeIdyCY=)
2: zbnBRUeVPnEEwLI2vvj0r39FPtE.roa (hash: 4AvpkRySedv9+g3/SFfJUIRAayJwpWmaa1FdREtJu9E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:1c:27:d5:b5:39:ae:40:a7:e7:6e:c8:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=898825d2f064989b38c781f2a8535189a26928c3
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=5a94d4d5ff5999b0f467d23810eb2b0e1a2df1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1c:63:14:c0:c3:32:98:f7:24:b2:84:e6:c5:
6a:74:e1:f2:c3:94:c5:6a:b3:4f:ca:e6:67:58:75:
be:18:42:e4:0a:69:05:a6:00:b5:b5:80:5e:9e:99:
80:63:72:43:ff:4d:a0:41:8d:8c:67:26:41:36:d6:
bb:63:10:c5:e6:c1:db:55:b8:72:a2:b9:65:0d:ce:
fc:a1:ea:0d:16:4e:d7:85:b7:2f:8c:e7:5c:62:d0:
db:0d:a2:ff:38:bd:7f:f8:f2:ae:fd:ef:cf:2b:98:
15:c0:da:5b:40:58:6e:79:bb:37:14:8c:be:3f:7c:
51:46:c7:10:97:c6:c6:bb:18:37:59:b2:f7:b4:bb:
86:75:ba:b9:68:7a:b9:89:ab:04:af:a9:97:41:32:
2a:fe:7a:d9:9a:40:02:a8:98:67:03:6a:b8:f7:2c:
53:46:ce:b3:76:5b:ea:1c:0e:80:c0:ad:be:ef:2d:
7c:f7:2e:4e:bf:51:aa:83:e6:b7:e9:b5:50:96:36:
81:0a:f7:8b:af:c6:f8:81:78:6f:13:f6:ec:0f:e2:
81:41:e5:ff:32:ce:1b:52:58:71:6d:03:3c:22:6f:
12:64:3a:65:b6:15:70:39:1c:ab:9c:c7:a1:9d:d4:
c5:48:9f:0e:e1:27:e3:cb:3f:ef:5a:2c:dd:4e:8d:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:94:D4:D5:FF:59:99:B0:F4:67:D2:38:10:EB:2B:0E:1A:2D:F1:DE
X509v3 Authority Key Identifier:
keyid:89:88:25:D2:F0:64:98:9B:38:C7:81:F2:A8:53:51:89:A2:69:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYgl0vBkmJs4x4HyqFNRiaJpKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0aa4d0-05e4-4802-99d8-ecae41446b77/1/iYgl0vBkmJs4x4HyqFNRiaJpKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2b:5f:68:a2:68:dc:ff:8e:c3:ce:af:2f:33:06:ae:67:89:
de:3c:c1:d3:38:cd:2e:7d:3e:c6:b0:c2:ee:0d:4e:29:04:b9:
74:d2:b1:a7:51:70:31:0d:6b:ce:8e:aa:a7:47:d7:59:88:4e:
df:45:78:c9:fd:74:c0:13:f1:7e:5b:32:4c:7b:5e:ab:f5:b3:
c7:ff:a4:44:95:e0:40:75:20:04:d4:96:8b:56:25:b5:bc:78:
e1:50:25:f7:9d:b9:0a:bf:f1:23:2d:61:93:79:e7:32:64:21:
d6:4a:74:6e:47:75:a9:95:1f:e5:ca:6f:47:55:df:b9:c1:d0:
cf:16:a9:43:e2:00:b1:27:34:33:93:99:5e:0b:5d:44:dd:26:
0b:fd:28:ac:85:13:cf:3e:2a:6c:06:e4:94:6c:35:7a:bb:55:
3f:82:ab:50:57:82:b9:f7:29:4a:96:3e:d3:cf:42:55:b4:69:
67:a6:ba:f2:04:8a:e5:9a:91:b0:a2:ce:e9:2d:08:31:08:4a:
6d:ba:17:79:3a:f2:90:73:da:17:f2:87:b9:b3:47:5f:ad:19:
04:b8:7f:bd:ea:63:ea:89:09:04:30:03:81:45:f4:48:b2:97:
19:ba:f5:82:a2:6a:f0:d1:5b:51:ac:f3:52:17:1f:61:11:fb:
69:71:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:11 2025 by rpki-client