Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: xgO2ByByrHFkWwSwDFlakom1A3B6AWuhdWcMEr9JETk=
Subject key identifier: F2:3C:B3:18:34:BB:43:93:04:80:EB:2F:B4:2D:51:22:6B:5F:4B:EB
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 0194BCAA1E3AF465A74BD47275D0DA2C4DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: MmFo372K40OsPLhnrWqaIB4O6RoRcYgsk7+X6aVC/08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:3a:f4:65:a7:4b:d4:72:75:d0:da:2c:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=f23cb31834bb43930480eb2fb42d51226b5f4beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:ce:6e:05:47:9c:88:4e:a8:6a:18:79:39:
e4:3c:73:40:41:c1:ab:f3:e6:9a:95:40:65:c3:cd:
da:ff:3a:f2:dd:b1:ef:41:83:2d:b1:3d:bc:6b:10:
67:e0:91:98:64:35:3e:f0:b8:22:0b:fd:fb:8b:e0:
0c:af:7b:da:59:a4:3b:6b:ee:0e:92:35:be:19:6f:
b9:ce:a5:45:92:46:42:11:88:72:d5:17:fc:21:64:
72:be:a9:28:8d:c2:68:aa:97:73:40:34:8a:f1:1c:
92:cd:03:a4:bb:30:9f:e8:3c:27:d4:a9:69:90:d3:
46:46:67:a0:6b:78:ab:29:cd:d2:81:93:c7:07:e5:
26:2e:6b:31:67:c3:51:da:d7:2a:6d:66:58:8f:01:
4e:2e:4e:dc:c7:d9:25:95:37:7c:9a:7a:7f:dc:a3:
74:5c:e8:79:86:79:39:fe:1b:e3:43:ee:ee:fd:cd:
17:d5:82:f8:1e:a6:b6:f2:47:2d:3f:92:11:68:c8:
7b:ef:51:ce:01:c9:1a:cb:c0:ce:e8:39:a4:47:06:
d8:1e:8a:a7:ff:d4:97:93:44:2e:11:0d:4a:4e:42:
94:21:05:24:23:39:fb:29:6f:57:17:8a:0e:f1:1b:
e2:2c:34:5e:aa:e0:57:5b:ea:69:1f:bd:00:93:4a:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3C:B3:18:34:BB:43:93:04:80:EB:2F:B4:2D:51:22:6B:5F:4B:EB
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:21:a0:6c:83:d5:2d:a7:52:97:0d:eb:10:f1:17:95:e9:f4:
14:e6:0e:0b:5b:8a:15:5c:9a:81:21:39:16:b5:46:30:66:7e:
cf:f6:32:26:f8:3d:fb:f0:f7:65:c7:a5:31:d1:50:e7:ec:09:
71:fa:27:89:aa:eb:23:81:dc:6c:a7:bf:24:f9:87:a4:cc:d0:
6c:79:15:9f:58:5d:bc:73:bf:d7:91:73:32:ae:47:0d:77:e8:
00:fb:be:5f:f9:6b:c9:3a:ab:e5:08:eb:0a:1d:d8:db:46:bf:
81:0e:e3:9b:e2:08:ff:4a:6f:b1:43:e7:35:79:db:ae:ff:84:
a2:d1:7f:ce:a6:8d:48:51:91:51:be:be:7d:bd:b0:82:ae:3d:
cb:af:df:d2:7c:53:eb:20:f9:45:9f:82:c1:db:11:c9:a2:2e:
7e:78:e3:23:75:01:58:03:20:78:31:9a:88:79:2a:6e:aa:f0:
9b:5f:86:4b:20:e9:7c:65:5e:9b:ac:d1:b4:e4:bf:6d:b3:71:
48:75:1d:b9:3c:bb:d0:46:eb:db:3f:94:22:5f:36:c3:26:15:
0a:ce:03:67:98:2a:46:f1:a9:54:9f:4f:7f:68:63:a5:da:c2:
9f:b8:3f:04:bd:c8:ef:41:73:57:f9:4d:52:d4:eb:3e:c1:c2:
30:86:c7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:58 2025 by rpki-client