Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
File: IMz236cJVzqCG2PEy2lWBf0maAs.mft (raw, json)
Hash identifier: vCEPv9txOJV2Jx/morJzjA0oAXsKJhWAYQh3xuvumXQ=
Subject key identifier: 2E:BB:06:EC:C1:93:9E:97:44:64:43:D6:1A:EA:8C:18:B6:59:33:2D
Authority key identifier: 20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
Certificate issuer: /CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Certificate serial: 0194BD8596E7953D2640A270F770F3C6D2C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: IMz236cJVzqCG2PEy2lWBf0maAs.crl (hash: VdOtMB8+5thmyozgAtRt9r0jWga3mCBfKH11t60Hw2E=)
2: JhyOMYsYocvVqxQhLK_Rr143Yl4.roa (hash: D5et6ikl0ESFL5b58JCC0EoY+mZ1iOis6weM043v4DE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:e7:95:3d:26:40:a2:70:f7:70:f3:c6:d2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ccf6dfa709573a821b63c4cb695605fd26680b
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=2ebb06ecc1939e97446443d61aea8c18b659332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e0:d9:16:4d:f0:d8:59:f3:a5:24:1c:ca:7d:
cb:de:1e:ad:4c:2e:01:5d:d8:2b:df:45:60:c3:e6:
08:1d:4f:ff:ec:fe:a6:4b:c9:72:aa:86:0e:4b:4d:
d3:1b:f3:fb:e0:f8:3c:e8:69:f7:1c:45:2f:60:0a:
dd:71:d5:04:e2:55:f0:ab:cc:5b:75:0a:83:30:f5:
1a:7c:74:7d:d0:fd:41:c1:74:21:33:d0:11:f3:69:
86:74:f2:a7:f7:e8:6d:0b:81:ef:8b:4c:6c:99:7a:
89:d6:66:7f:2b:f7:a1:fd:36:47:bd:81:4e:ea:7d:
92:81:db:8c:05:6a:50:40:92:b9:93:73:b7:0e:b8:
ab:a6:0f:ca:10:73:11:f8:65:2b:96:97:62:aa:8c:
01:66:89:63:39:69:25:8f:de:c0:2f:18:ad:e8:f7:
f3:bf:d4:fe:bd:92:fb:e8:80:95:c0:19:59:51:e3:
a9:60:ba:c6:84:63:85:ec:de:55:59:98:d8:18:98:
ee:6f:15:38:23:8c:ca:60:f8:5c:14:65:cc:a5:d8:
a8:0d:bc:94:8a:78:16:53:b3:42:f5:be:0c:f1:09:
ae:83:f4:cf:af:9b:ff:2b:9e:b4:26:51:98:ed:21:
a4:78:dd:4f:91:63:24:41:ee:a8:f8:49:58:b2:97:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BB:06:EC:C1:93:9E:97:44:64:43:D6:1A:EA:8C:18:B6:59:33:2D
X509v3 Authority Key Identifier:
keyid:20:CC:F6:DF:A7:09:57:3A:82:1B:63:C4:CB:69:56:05:FD:26:68:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMz236cJVzqCG2PEy2lWBf0maAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/19269c-9d5b-4f09-97eb-3a28f8a9c707/1/IMz236cJVzqCG2PEy2lWBf0maAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:19:fc:b4:7b:97:9f:9e:1e:76:96:6a:53:77:ae:6a:65:13:
63:d5:6f:4d:43:f7:c6:76:8f:6d:43:00:87:a3:89:f2:de:f3:
fe:65:60:1f:b1:08:2d:98:60:61:13:2d:21:91:21:cf:ec:5d:
bb:57:69:6a:e7:c3:1a:22:77:f3:bb:24:1c:e2:dd:08:d3:d1:
3f:01:ac:02:25:e9:5a:18:63:9c:06:3c:30:c8:52:94:e8:6e:
93:25:fb:2d:8c:f6:37:26:a5:94:a7:69:1d:c0:d6:0e:64:11:
f1:d6:67:d9:52:fb:d4:0a:a8:c8:0c:61:d1:4f:e9:b4:f7:b4:
2b:ac:0b:e6:cd:e6:83:e9:04:c5:8e:33:0a:df:98:28:cc:7a:
bd:eb:b3:16:56:7b:b5:3a:c8:d8:76:d8:30:ae:5c:a5:96:ab:
8b:79:1a:6b:44:2a:36:8e:73:75:19:c5:01:cd:6b:34:a4:ee:
33:27:dd:a3:65:f9:cd:26:0c:57:97:c3:2b:c4:93:fa:27:1f:
6b:e8:42:9f:e6:7c:ac:f8:d8:26:71:54:96:e0:6c:f1:27:33:
f8:fa:c1:4e:f1:eb:b1:96:c8:bc:c1:dc:13:9e:0f:de:f8:f2:
d9:0c:a1:fd:29:04:e0:1a:b2:8f:ac:d2:65:9c:cd:a0:44:69:
a7:8d:36:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:20 2025 by rpki-client