Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: AZF2wcuRmzSE11vI+rqcIEp0yYjYyton2KP1uo+hLWc=
Subject key identifier: F5:B3:35:FC:8F:E8:B4:CB:91:A5:E3:7D:6C:3C:1B:C3:68:2E:DD:34
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 0194BC05161765ADB9F912B81320EDA95A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 7A
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: yfLQrwrITXr9CVXK6pThDOJZbudkRAEOXnlSNc3e8zI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:16:17:65:ad:b9:f9:12:b8:13:20:ed:a9:5a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=f5b335fc8fe8b4cb91a5e37d6c3c1bc3682edd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:f7:6e:3d:ae:ad:17:4c:f7:50:f5:c6:92:
e7:74:a3:99:18:5e:d9:e9:ec:9f:66:9c:68:a2:5d:
d1:ac:be:a2:c4:1f:83:18:9e:f8:40:a5:55:a8:73:
6f:1a:c9:b0:29:1a:94:bb:cd:62:01:15:6d:2c:f2:
f8:09:11:04:f6:7c:3c:8f:c4:c2:d4:7f:dd:0e:43:
e8:f0:1d:70:3b:a1:8b:06:4a:5f:66:ea:27:62:63:
dc:0b:3b:ee:d0:84:e1:0c:aa:82:e9:c3:74:52:27:
bc:74:5f:b8:f3:9b:bd:ed:a5:f7:65:3b:98:47:d5:
54:0e:7f:99:f1:4b:47:66:6a:6a:f1:bc:ae:4e:00:
8d:24:ed:3f:9e:a4:d9:ad:df:de:ec:e0:1c:02:bd:
af:da:fc:0c:e7:68:02:a0:a3:92:7d:fd:f9:7b:5a:
79:94:07:9c:ac:3a:b3:38:a8:1d:43:b8:b0:32:a0:
82:79:cc:a8:27:ba:e7:01:b0:65:d9:21:8f:78:a7:
b9:46:dd:14:54:42:58:8b:ed:85:40:c2:ec:af:6d:
c1:2b:1e:2f:84:ed:0e:5e:5a:58:5f:e8:f8:19:49:
fc:2e:30:c6:18:65:ee:7f:0c:43:4a:02:ac:1b:a5:
2c:95:a7:e0:fd:00:9a:99:1d:2d:35:56:70:7a:4d:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:35:FC:8F:E8:B4:CB:91:A5:E3:7D:6C:3C:1B:C3:68:2E:DD:34
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ca:b2:1b:62:1b:45:2d:a4:5e:83:c4:1e:05:ff:59:c8:32:
bf:b3:3b:91:71:35:b3:60:a1:88:7f:21:28:96:4b:ff:4f:b5:
2e:23:33:6b:44:99:97:9a:b2:f6:35:7a:af:85:ad:d5:c9:25:
47:73:c2:d6:4d:8b:bc:6c:f2:1f:2e:8e:7c:92:2b:7b:9b:8e:
85:7f:80:f8:6d:d8:71:f5:fb:6c:a1:4a:91:e4:60:bf:8a:f2:
32:41:60:a7:f1:3f:86:cd:93:81:0d:4b:3f:a3:53:5c:92:d4:
0e:2d:31:14:f1:02:46:5f:3b:f5:0a:98:94:e1:a5:0a:db:49:
ed:16:a6:bd:92:2c:42:4f:23:09:46:cb:ce:a9:5d:36:1b:48:
e8:35:10:d2:12:44:f3:94:34:91:52:e1:86:71:d4:af:12:a3:
fa:36:b5:98:c3:3e:b1:a9:32:4d:9c:9a:8f:bf:64:8f:85:83:
95:85:56:7b:6d:e4:2f:13:d8:54:74:5e:89:4f:ea:48:1e:f2:
f1:48:c2:a8:dd:d7:3c:2a:09:86:f0:5b:07:fb:b9:ff:a3:5d:
f5:32:bb:3d:92:16:41:5d:1e:c3:9c:5b:5c:b1:3b:33:5a:3a:
80:88:a1:b8:3f:b7:a7:34:cd:d2:60:a1:48:8a:9b:9a:bc:cf:
4c:9e:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:33 2025 by rpki-client