Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: nP2Nt9le1IEDJiNBCKH6uQ/Grda7HmTvW2IBUZZ4Jb4=
Subject key identifier: E5:0F:79:C1:BF:1A:7C:55:05:C0:D8:40:B8:9C:92:81:8A:35:43:39
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 0194BD8525A1B8D0D1BE4A35E30491CD5930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: 1mpaZuDCYs44uvxRH6z2Ejpvg18.roa (hash: SCT441ghaL2WqZRPiOCyS9Ob3laiZBvZ8Lbji0j039s=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: MbtmRCNK5AYc6mgRZvTJKKtTMjzAzrRcrT93tEPLGQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:a1:b8:d0:d1:be:4a:35:e3:04:91:cd:59:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=e50f79c1bf1a7c5505c0d840b89c92818a354339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:a9:a1:2a:15:6c:17:a5:58:a0:41:04:96:
ca:7c:48:9d:41:aa:8b:06:b7:fd:ca:ec:5f:9c:a6:
c4:92:74:c7:47:24:b4:33:db:f4:06:a8:70:e9:e4:
fa:3f:f7:d2:f3:11:a3:1b:17:ff:d6:d3:29:a3:b5:
05:ab:c4:7d:c0:73:6a:44:b6:89:80:c8:57:ac:ca:
f7:21:ab:b0:f3:c5:3b:5f:e7:0f:23:dd:74:c4:98:
6c:3f:7f:ae:1f:3a:f5:44:49:18:02:08:a0:fd:a2:
f2:ef:09:f1:66:21:f8:65:ff:56:22:14:8e:e5:93:
16:a5:f6:7d:c3:35:69:fd:63:a5:91:76:2a:d7:a7:
89:78:45:5c:8b:51:27:20:40:03:b5:f2:64:cb:fd:
45:a6:32:55:49:ab:54:b6:8e:e2:9f:53:b1:85:69:
f1:1f:7d:88:7c:26:fe:8f:a3:b6:14:0b:44:37:08:
52:54:b8:3f:50:ee:66:ea:2f:f0:63:de:8a:ed:cd:
96:4c:e3:fc:a3:61:ed:3a:97:9d:03:3b:e8:5d:c1:
b5:be:04:1a:a1:99:39:ed:97:ad:6f:9f:eb:95:a4:
aa:07:0a:8f:e7:d0:91:ea:27:d2:47:0c:94:cb:51:
9a:3b:3a:2d:8f:4c:1e:b5:be:d5:09:ce:df:f8:0e:
a0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0F:79:C1:BF:1A:7C:55:05:C0:D8:40:B8:9C:92:81:8A:35:43:39
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:11:9e:46:dd:ce:a0:e6:2e:b9:4a:ca:f3:2a:27:28:d4:9b:
53:b1:49:36:65:e7:4d:82:70:4e:37:27:bc:3d:f7:db:6c:e7:
c9:8a:70:0f:a8:97:43:48:da:ee:df:6c:84:35:3c:39:63:18:
a9:2c:16:7a:8c:c1:a2:0b:f7:20:c7:53:da:25:4a:ee:ff:23:
e8:36:93:21:7b:d0:e0:9c:86:c6:e2:69:70:b6:23:44:36:88:
51:a6:e5:9a:71:fd:3d:0d:5f:05:d8:eb:c1:08:4d:21:eb:f2:
ec:8f:ca:6c:5c:41:07:30:90:bc:4b:70:d9:e7:9b:90:23:b7:
81:dc:d4:83:bf:c7:bd:b4:e0:f0:68:72:a4:bb:82:07:3b:aa:
25:21:45:8f:ba:22:bb:87:6b:7d:c6:ea:48:c1:59:2e:f9:c8:
ac:54:69:6a:28:0f:dd:94:8b:89:38:e3:e7:bc:1e:fc:b2:f7:
00:b9:64:84:6f:36:26:93:ae:7c:3a:81:18:eb:3e:f0:75:18:
48:fe:41:75:b1:db:1e:b9:dc:c2:a4:bf:da:dd:85:ea:b3:6e:
df:ed:ab:a5:95:05:e6:c5:94:ce:4d:d1:b3:94:13:a5:3f:11:
30:ff:eb:ba:db:59:83:2d:8c:90:c3:83:48:f0:e7:97:ac:9b:
98:71:f7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:47 2025 by rpki-client