Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: N92qIb843ySGApfSmQpGYrYv9VGT7A7V+goz2zaa9Ps=
Subject key identifier: B3:61:4E:02:25:C5:95:F2:28:FA:5F:67:40:FA:25:10:82:5B:4F:CA
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0194BD179ABB94C040F2AC4E204F813DBDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 114F
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: fvdQmirtJMsZw2BCIRF84KffrFjMvjPTubANeaS9AJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:bb:94:c0:40:f2:ac:4e:20:4f:81:3d:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=b3614e0225c595f228fa5f6740fa2510825b4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:83:39:46:04:5c:6a:14:93:cc:9b:00:f1:
6c:01:2f:9c:33:32:38:ed:03:d6:30:d8:de:1f:71:
2e:61:c3:02:0b:e1:8c:e6:87:8b:f7:25:81:a5:f9:
3f:7f:ba:0d:33:d4:95:5d:09:c7:7d:11:e0:c6:45:
bf:27:1d:ac:ab:c7:5f:77:26:f8:90:05:de:6b:15:
af:72:7c:fe:70:ce:a6:8c:95:4b:b0:17:9b:e9:f7:
b7:27:19:fe:ef:f5:7c:81:1a:33:dc:9e:2a:5a:f8:
56:45:9d:39:0d:09:f3:db:64:53:31:cd:e6:b5:b0:
be:a6:82:4d:ab:1a:31:d8:f0:23:db:64:54:e1:41:
51:62:36:81:e8:11:76:fa:95:96:e8:18:bb:48:cb:
93:41:ed:0e:79:e4:0f:42:29:06:21:c8:30:6b:dc:
c2:38:b4:46:36:0d:de:a5:2a:12:aa:af:21:cc:29:
a6:4a:0d:f3:d4:1d:97:23:7a:fc:46:4d:b3:e6:06:
6c:36:a2:b1:34:aa:9e:a7:28:9b:4f:a2:2c:8c:e4:
c1:0e:6a:cb:6d:4e:d4:61:1a:7c:dd:a0:04:76:31:
01:d2:35:a4:56:ce:a9:ed:21:0a:8a:47:af:3c:cc:
ac:f3:b0:71:a9:72:d6:13:02:a5:4c:76:b1:4f:2c:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:61:4E:02:25:C5:95:F2:28:FA:5F:67:40:FA:25:10:82:5B:4F:CA
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:74:4e:81:2a:f0:50:a1:86:87:9e:f9:6e:48:16:25:d7:1e:
47:2f:a4:d2:e4:58:94:61:c1:75:e9:63:6d:7f:72:e8:71:e8:
7a:66:cb:c2:fb:ee:61:45:d1:47:e3:c8:6f:8a:29:ff:7b:1d:
77:7f:96:90:c7:ff:5d:7b:f7:9b:e8:be:57:85:d5:a2:82:e3:
de:3f:3e:eb:1a:ea:4a:63:5e:da:d4:38:02:25:94:d1:2f:60:
cd:d9:f4:a6:59:8c:cd:87:a4:c8:a4:93:3c:51:0f:02:44:d7:
7d:e3:ac:93:5a:9d:5b:00:76:88:55:05:3d:13:a8:48:b7:62:
18:15:b2:8f:f8:b0:5a:33:6f:e4:f7:52:db:0d:64:7c:7b:e9:
94:5c:f1:0c:02:80:c5:07:76:19:76:95:69:11:4a:ad:a5:9e:
64:7b:fb:6c:b1:fd:5a:fe:5f:ff:d0:e3:fc:c8:e2:17:ba:fa:
21:39:73:b1:8b:97:7e:6d:3f:cf:e5:05:e6:30:f3:89:b8:37:
a9:9c:15:14:1e:80:38:63:70:22:a1:b9:d3:b6:6b:de:17:a6:
ff:12:c4:3c:5f:75:09:56:22:d0:0f:f8:0a:84:36:aa:db:60:
43:0e:ff:d2:f3:0c:0c:24:a6:ee:f7:07:9c:5b:fa:01:63:b8:
93:99:d0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:55 2025 by rpki-client