Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: 1OX48TljSqgotFg/KekrivX/XcNIGcnyREHbO5+9dm4=
Subject key identifier: 93:37:0B:38:DC:7B:3F:AC:52:6F:28:CC:13:84:61:B3:6C:C7:4B:C0
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 0194BD4EA7E85AED1C5A894B532666BA67CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: WwzQtT+KzhdNnYBlLf/zdzYVtDUdzJ4vCrx/8S/sIxQ=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:e8:5a:ed:1c:5a:89:4b:53:26:66:ba:67:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=93370b38dc7b3fac526f28cc138461b36cc74bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:6c:71:ba:cd:7c:81:32:b5:c5:87:12:11:
e6:f9:44:55:e1:37:99:97:84:b6:52:cd:40:f4:72:
30:36:a4:3a:ea:59:ba:f3:7f:68:63:a7:9d:d2:c8:
1f:7a:e3:05:e8:d2:ae:47:c9:17:07:9a:ac:dd:7e:
2c:1b:80:9d:5d:0a:87:c5:2a:ea:36:73:36:e9:a1:
59:42:8e:a9:6d:99:3f:9c:f8:26:4b:9e:c9:2a:78:
c7:b6:f9:20:72:7e:e1:2a:c6:d2:6f:65:f5:55:56:
63:2f:58:3a:5d:18:a9:2a:f1:1e:09:54:6d:21:91:
a8:24:0b:c7:85:48:43:1d:1c:47:3a:b5:a1:da:6a:
88:a0:2d:64:23:40:d6:a6:5a:e5:d1:26:40:60:ce:
ac:c9:18:24:e3:a9:b9:5d:eb:ac:b9:38:44:f2:95:
5f:04:85:15:a7:3f:16:46:b2:03:a3:4f:1f:40:43:
67:cc:ef:ce:f6:94:65:97:1e:a7:de:1c:7e:29:dd:
22:88:e9:76:4b:d1:45:78:d0:c4:7a:a0:12:37:20:
38:fb:89:76:7e:e7:36:9d:9a:11:eb:4c:24:dc:d0:
0a:21:a4:47:84:9e:64:e6:c2:da:6f:97:3c:9f:f6:
02:9d:c0:d9:86:30:0b:59:e1:ef:5c:f0:c6:05:a2:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:0B:38:DC:7B:3F:AC:52:6F:28:CC:13:84:61:B3:6C:C7:4B:C0
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fc:a0:61:ee:c8:06:70:39:81:b8:ed:45:0e:c6:49:ff:e4:
f3:50:29:be:49:f4:04:d6:e6:f9:1b:b3:44:18:23:4b:4a:97:
8c:27:4b:a9:31:27:72:85:93:f4:c8:d1:1d:23:40:0f:47:6b:
f9:a8:58:78:5d:54:a1:91:ae:83:22:6c:24:e5:07:72:46:ae:
fd:59:a5:ad:46:4f:0f:31:f6:51:01:3c:68:11:51:02:11:8d:
9e:c8:ec:16:fc:01:7e:73:6b:bb:df:db:73:7a:49:cb:61:57:
2c:6b:94:6c:73:65:4b:8e:71:23:f3:c0:2c:80:2e:82:66:eb:
0a:d5:e8:aa:dd:08:d6:a6:fa:3e:05:8c:ed:17:58:1d:8d:be:
18:50:35:5f:45:08:9e:a8:54:26:62:3e:6e:5a:48:82:4e:be:
21:2b:26:48:06:ba:ab:20:4b:ff:73:1a:63:c6:cb:78:3f:a5:
26:e7:7c:5a:eb:2d:38:ed:c8:6e:75:24:ea:52:67:8c:34:57:
28:51:42:35:d9:bd:c4:f1:d8:db:6c:cb:82:f4:f5:66:4f:a8:
e7:76:8d:5d:27:82:16:cf:86:73:9f:d7:54:af:3e:cd:83:c6:
bf:00:04:cb:78:42:9d:dc:20:57:54:d2:40:ec:34:e6:5d:41:
c3:2f:25:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:52 2025 by rpki-client