Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
File: IY2yiCPzcIslWqEkum73QdET6vM.mft (raw, json)
Hash identifier: x4V+2jzRoPRVw8mCCAK1zND5pqxAeehbwG2LWIEf43k=
Subject key identifier: B3:37:5E:F3:35:08:D4:68:48:AA:E4:45:36:5A:46:3F:0E:51:50:E2
Authority key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Certificate issuer: /CN=218db28823f3708b255aa124ba6ef741d113eaf3
Certificate serial: 0194BCA97330998963F7B867FE9127F858B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
Manifest number: 0C25
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: HaSDza_YVtRITzJIrQ3cs39clVI.roa (hash: MJ8iuClDZO6N2HHVvtqNHlRWHvmySc+prn9LGP/6I2Y=)
2: IY2yiCPzcIslWqEkum73QdET6vM.crl (hash: 7oB3C+epgEo9Kg6PCaS42Vfx4BslOlLKXAXMzoefg0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:30:99:89:63:f7:b8:67:fe:91:27:f8:58:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=b3375ef33508d46848aae445365a463f0e5150e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:02:d1:fc:7b:c8:c2:6e:bb:16:98:1d:d3:
21:a1:fa:90:a4:3f:d0:58:b5:17:b0:80:50:2b:a7:
59:45:00:f8:31:51:10:88:f6:97:ce:bc:8f:ea:0d:
c4:94:ad:37:34:71:17:88:fd:ca:15:4e:d9:38:5a:
11:6c:d3:0c:65:03:74:eb:fc:a4:fe:58:75:33:37:
03:9b:e8:d1:13:f1:7e:78:01:d4:bf:cb:a0:e9:bd:
e5:de:fc:c0:31:4a:59:bc:6f:f0:08:92:c1:fa:4b:
28:c2:c5:3f:7e:da:e4:90:4c:23:c0:89:86:81:83:
b1:4c:db:84:e3:12:8a:77:a3:68:5b:5e:e8:e6:0a:
38:97:94:78:ed:52:e4:a9:53:f0:ab:74:77:96:97:
ed:aa:83:98:3a:e8:e7:97:ea:06:7a:4d:a2:99:d5:
b5:e8:4f:6b:1f:c6:1c:d9:df:4a:98:5e:13:68:40:
b1:b2:ab:6c:73:82:5a:1b:a0:33:4a:6d:c3:dc:f5:
cb:15:f1:eb:0a:ce:73:79:58:a1:fd:e4:91:fe:24:
12:a3:37:60:9c:c5:65:33:db:e3:21:a7:a1:e8:20:
3b:60:22:cb:e7:c3:b7:0a:89:be:bf:f0:5f:c4:95:
ef:39:e3:44:21:2f:18:8c:dc:02:58:80:54:bf:b2:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:5E:F3:35:08:D4:68:48:AA:E4:45:36:5A:46:3F:0E:51:50:E2
X509v3 Authority Key Identifier:
keyid:21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:58:57:7e:3e:23:49:de:f5:bb:e6:84:e0:63:da:e4:a1:
30:63:5a:2f:71:b9:c4:3f:04:0d:2d:51:c9:69:cd:41:df:f2:
05:90:36:b3:4b:6d:f0:5b:bc:37:fd:1a:0d:d7:c4:72:ff:60:
46:69:50:1c:bc:88:0e:80:ba:fa:2d:f5:84:25:f6:66:7b:37:
f2:a1:1f:e7:d8:41:53:e1:5a:a8:24:91:54:54:d5:bf:58:b4:
1d:1e:88:1a:05:ab:8b:da:41:b4:8a:8c:3c:8b:50:8c:f5:6c:
4e:94:01:6b:c8:ce:3f:98:23:03:b9:6f:a6:d5:3a:7a:de:f8:
1a:b3:e1:81:46:50:3f:8e:71:23:b7:d0:aa:d9:20:9a:f4:87:
5c:06:92:4d:bc:7f:94:77:4e:9c:03:4a:46:a1:02:e8:5d:64:
9b:d3:06:07:dd:27:fd:4c:14:e6:95:a8:32:ab:88:b1:11:29:
ef:70:2d:93:c4:5d:75:7d:23:3e:f3:75:41:58:f2:5f:91:6f:
df:95:35:6d:95:72:21:b5:99:f1:92:fd:2a:69:7a:8a:35:45:
ed:3f:28:f9:dc:7c:bb:08:0f:e4:1c:f2:54:3e:6f:b2:41:6b:
6a:2f:28:a2:20:43:8c:4e:46:84:ff:45:1c:1e:52:3c:cf:d4:
34:51:1a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:11 2025 by rpki-client