Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: 4u5Cp8NhHzYdJx3i/vXTLCjExfqDtVIRZXbqhgg4JdA=
Subject key identifier: 79:3A:51:90:4E:C1:B9:54:22:3A:31:91:DC:2B:2D:D2:48:B2:5E:4F
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 0194BBCE96B1FA80ED1756AC0A1C6D4D8349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0C0F
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IhQKj6UiQS-W5EmNKI0dkpCOs90.roa (hash: dOyH8r0Q3jqdPxzWjgiYUrfy8XskQY+sMtZqebKaaBc=)
3: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: H660Wi0UzijlNbC9/dhfDhzoKlhsaE7WwTXf5RRuzc4=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:b1:fa:80:ed:17:56:ac:0a:1c:6d:4d:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=793a51904ec1b954223a3191dc2b2dd248b25e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:94:95:cc:d5:d3:65:91:31:10:cb:03:f3:
a0:35:ad:d3:dc:81:47:09:26:17:bb:86:7e:0d:4f:
06:f6:f8:3d:a4:86:70:52:0d:3e:1b:ff:70:fc:e4:
82:35:39:87:29:60:97:79:d8:39:3c:fe:e9:67:e5:
4d:49:2a:53:be:5c:1c:7d:dc:38:f2:a2:16:01:94:
6c:38:1e:c1:51:02:07:51:94:fc:f9:6c:10:65:fc:
6b:a2:21:10:f7:64:30:6f:cf:5b:39:cb:75:56:8a:
48:45:07:b4:9c:a0:3d:70:a0:d5:7b:39:66:00:d4:
3d:07:d8:b5:79:78:c9:fa:23:7b:9d:95:9e:7f:2f:
33:42:50:99:fc:c9:64:76:0d:c8:4d:0f:6e:39:9b:
df:93:d6:13:a2:e6:dd:33:1a:62:59:76:1c:7a:30:
d2:4d:9c:25:f5:8b:9d:48:d9:d1:7c:3d:4a:55:1b:
cd:d1:e8:15:47:a7:99:14:3e:c5:e8:8e:5b:4c:78:
20:b7:3a:05:b7:33:7a:9d:00:95:0e:23:b1:eb:88:
82:b5:5f:0b:2c:25:3d:ac:01:fa:74:d6:75:b7:bc:
f9:82:55:58:86:de:12:e2:13:88:ad:94:d9:db:bd:
7d:74:6c:eb:8e:fd:b0:74:d6:73:64:eb:56:1d:d6:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3A:51:90:4E:C1:B9:54:22:3A:31:91:DC:2B:2D:D2:48:B2:5E:4F
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d1:62:aa:79:b6:cb:3b:f6:1b:65:87:fb:2f:eb:22:c7:dd:
a0:01:c8:d7:ec:e9:48:7c:fb:d3:12:7f:6d:1c:88:8f:4c:a3:
76:13:4c:f1:b7:69:7b:64:bb:e1:f6:02:a0:a0:60:29:31:04:
ed:fd:d1:cd:79:be:58:2c:dc:75:e8:b0:04:3f:e3:d8:63:00:
67:1d:4f:88:0f:6e:c2:8c:3d:3e:ef:e2:5e:d1:17:45:f2:0b:
43:ef:59:bb:6c:44:e9:d4:eb:95:d4:d1:25:6a:88:c6:15:54:
28:e0:be:26:fe:b3:ca:2b:55:2f:5e:a0:24:7b:67:55:e4:68:
15:cf:4f:40:b1:ea:ee:18:2b:28:7e:83:3c:a5:bf:47:b4:a4:
90:79:8b:ff:a5:3f:fd:47:ed:b1:1b:40:28:bb:21:b5:6c:eb:
e2:34:3b:7e:2f:3d:0e:01:62:0b:a8:04:3e:33:b4:3e:8b:66:
f0:a7:3a:f5:67:13:ae:e5:cf:28:de:6c:81:f1:8e:07:56:65:
6c:76:5b:34:f3:42:90:d0:a9:10:6e:c9:2d:57:49:47:8b:81:
dc:24:b1:62:b4:de:64:24:18:fb:58:22:c5:b9:3d:69:fa:0b:
82:e2:0c:de:14:04:bc:3d:5a:c4:85:b9:14:ad:34:41:82:3b:
81:c0:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:44 2025 by rpki-client