Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File: IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier: qdad5TBLO3ceKvSLfW+LSRq4ZO4wmE+T3/6luLtdoqA=
Subject key identifier: A9:E5:4F:A6:D9:7A:B5:56:B6:69:2A:58:EB:BC:48:D2:3F:C9:83:AA
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer: /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial: 0194BC3BE1C9622F843C1653DCDF68F2FA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: D0WMwY3NHpPX5_dmK_570D9pBac.roa (hash: CbiqykEreMJuhwu1zLvtDfPL0dcdrsuGDFZiamJJth8=)
2: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: oLdOXLB1o1LGVGj8UkVCVcKE/nJhMVIgx/4JrYI+jr0=)
3: L9Epons4uT1wXNuXFQwslR3fQbg.roa (hash: U/slM2H+Gow9RoMpX0WbDkfqNCWRtnO7wmFezh1cp24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:c9:62:2f:84:3c:16:53:dc:df:68:f2:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=a9e54fa6d97ab556b6692a58ebbc48d23fc983aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:01:0c:31:ab:46:7c:45:7d:c9:45:82:53:
a6:fc:f1:18:0a:d0:c8:60:5b:de:c5:df:0e:ae:e2:
f2:98:84:a0:6c:2b:df:df:48:2c:fe:b1:46:ca:79:
06:a9:26:4f:67:ea:7e:61:52:e4:28:3c:8b:6b:55:
9d:21:68:04:a7:a0:77:de:f5:18:4f:4b:7e:22:34:
d7:5a:cf:43:83:e8:e5:4d:e4:7a:e2:26:79:1e:de:
97:f8:e8:93:95:91:35:e4:b7:94:5a:74:f5:65:39:
72:1e:c7:af:ea:02:1e:13:21:b0:93:ba:63:2b:cf:
53:58:b2:32:ca:98:95:cc:08:eb:1f:2a:87:50:db:
78:35:a9:4a:3e:24:0f:eb:e7:ec:17:c7:83:2f:8a:
79:7c:2f:57:0c:de:90:29:a2:c8:1b:23:53:22:a2:
d0:93:cd:cc:6e:b9:47:a0:cb:d2:3c:f9:87:40:62:
05:92:27:e3:63:84:d3:5e:37:28:59:10:fe:8c:da:
c8:d1:2d:cf:8d:ce:f2:1c:c8:81:c2:15:5f:a8:11:
5f:4b:0a:4a:c2:41:9f:4d:ba:67:2e:5e:99:ad:c3:
3a:95:79:e5:64:35:c9:d5:af:96:6c:68:f4:b7:f3:
12:ea:e1:af:a9:48:36:f6:d0:6c:17:d7:67:7e:ce:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:4F:A6:D9:7A:B5:56:B6:69:2A:58:EB:BC:48:D2:3F:C9:83:AA
X509v3 Authority Key Identifier:
keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a7:e7:9a:4d:85:aa:6f:63:91:71:88:27:34:90:59:01:cd:
e7:bc:41:bf:c6:de:45:b8:a7:78:9f:0f:cb:c6:db:ab:06:57:
7a:8e:bc:06:b9:25:f9:2e:5c:d7:5a:07:75:b1:16:08:0d:82:
7f:df:6b:2c:9b:f1:89:9f:da:e8:e2:b7:98:de:e4:20:b3:e5:
dc:ec:b1:91:b1:c6:cd:4e:0d:49:fa:4c:48:49:eb:13:5b:70:
07:61:d9:5d:b4:a7:c5:c5:66:47:e5:0e:d5:02:25:81:6b:d5:
ab:00:f0:d5:fc:a2:81:8c:41:d8:3e:af:e2:ed:7a:fd:0b:bd:
7e:e5:5f:0f:0b:0b:7d:f0:53:62:c2:38:0c:57:5f:ae:91:0f:
05:e0:64:60:56:20:80:c7:43:3a:80:69:59:dd:c8:51:d9:19:
55:f1:1c:08:6c:f5:00:3f:30:0a:4c:96:f2:26:cb:d1:94:b7:
a9:59:ea:e5:63:46:1f:c6:23:e2:1f:58:1c:60:72:b1:05:bf:
5f:3f:62:42:cc:a1:9b:03:8d:62:84:df:88:1c:56:c9:2b:36:
80:24:0d:9a:3a:e1:6a:ea:33:e5:91:6b:a1:1d:41:42:5c:a5:
b9:8c:6c:e0:be:9a:b8:93:5a:eb:70:75:ce:e3:9f:cb:0e:24:
92:e5:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:30 2025 by rpki-client