Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: a7jAQ4zAqb7RzYE1AJi4YyUM1Ul+ZneNqqTaBd6LAXg=
Subject key identifier: 4C:9A:74:EF:61:82:FE:81:3E:06:F7:E8:8C:7B:2C:0D:7C:74:FB:6A
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0194BC3C87D416DFA6750CF9AA3EB4AFA687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0D58
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: TUMvbb3N16THwvOJ9fTqscpDWH9wsXTtyxd1Frbx0Pg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:87:d4:16:df:a6:75:0c:f9:aa:3e:b4:af:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=4c9a74ef6182fe813e06f7e88c7b2c0d7c74fb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:d9:af:03:ea:15:8c:1d:df:88:4a:3c:a0:
57:42:3c:a0:7e:62:e2:7c:8f:32:5d:8b:8e:c5:ff:
73:bf:5a:41:a6:5f:a7:c2:25:0d:ac:e8:8d:f5:d4:
bc:09:8e:84:c8:ae:fd:65:9e:81:29:e8:59:8b:da:
43:a4:a7:d9:4d:e4:4e:3d:e8:90:18:53:f6:ef:5f:
9c:1b:a2:48:33:8c:a1:a8:55:28:0d:78:bc:77:a5:
bb:23:82:6f:c5:03:fc:55:6f:b3:5e:0a:7b:36:4c:
e9:5b:0a:6f:17:83:c3:53:ec:83:a2:a7:50:09:19:
37:e4:0c:b1:37:f7:35:4d:17:89:bf:11:7a:cf:3d:
89:41:ed:4b:34:2f:82:98:68:98:7f:21:93:ac:a5:
df:cd:6a:67:1b:6a:72:0f:d9:71:00:b5:11:a5:7d:
7f:c4:51:c7:d2:22:c0:b5:b6:4f:fd:1a:03:f4:1c:
d1:8f:70:47:f8:e3:92:02:81:69:73:0d:00:d1:10:
e0:3a:f4:12:01:7d:31:50:0c:b6:bb:1c:97:8e:c7:
a8:97:ae:e5:38:b3:3f:de:55:d3:73:02:a5:d8:16:
0b:5a:6d:91:ec:bf:16:ad:ae:ce:0b:e5:42:ad:00:
02:7f:44:73:36:30:d4:c6:1d:da:40:fb:21:d8:df:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9A:74:EF:61:82:FE:81:3E:06:F7:E8:8C:7B:2C:0D:7C:74:FB:6A
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:c0:74:0f:ed:75:e8:ba:c1:7a:c5:29:d4:c8:95:6f:c8:20:
6f:41:a8:65:4b:16:ac:26:4a:dd:d4:f0:58:14:23:72:58:28:
4b:ec:c9:6d:b9:98:30:b5:cc:82:88:56:4f:29:1d:ff:55:06:
df:75:f8:d3:d9:30:b3:67:8e:ef:58:f6:0b:26:13:e6:e7:f8:
68:3f:43:18:ad:57:68:3c:f9:3d:2b:31:2f:7f:8a:37:d2:aa:
a3:3a:f8:c4:ba:dd:f1:1b:73:55:d3:20:00:df:ba:d0:41:f7:
d3:f8:e5:24:09:27:e3:ad:97:89:d6:b7:b6:0d:6d:43:fd:4b:
d0:57:25:8d:88:6c:25:9b:3e:e1:e9:7e:9a:63:54:3f:ba:23:
53:bc:3a:a4:93:63:88:59:d0:38:be:2c:6b:8f:68:d4:a1:49:
dc:87:df:8c:f0:0f:b6:96:65:4c:ef:9a:ae:fb:0b:89:18:cf:
14:03:74:11:db:1a:00:1c:6b:25:f6:ed:e9:90:6c:8c:d9:e3:
65:4f:c7:e3:14:a2:fd:8c:14:bb:3a:98:fb:49:8d:56:7d:42:
75:cb:b3:61:86:5a:66:57:87:23:ad:af:6d:93:ed:43:23:55:
95:3b:23:c0:c4:f7:d9:0d:ce:bc:bb:7c:8f:0c:cd:9e:7f:92:
3e:6b:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:07 2025 by rpki-client