Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
File: IPblO2l60mO0uk6kmBQ2aog7VK0.mft (raw, json)
Hash identifier: rpBfFUhErVCeaXYxFusAg66AW4U59rKC596luUVSW+8=
Subject key identifier: 58:82:1E:34:16:13:AE:21:41:FF:49:7B:8F:74:06:42:4C:93:B4:B4
Authority key identifier: 20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
Certificate issuer: /CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Certificate serial: 0194BBCE26DB8A550BE89C9CC844B4CDC3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: APkFGhaR8YtianTelxgsgSDeVhM.roa (hash: 2Pdlo7CTCPlVPPRVRRuXnXVCI5TavhpFPnrp+xkks5o=)
2: IPblO2l60mO0uk6kmBQ2aog7VK0.crl (hash: U24t08Yc6G9ll7frp34N12MU1pWUJFNqWcp2JLdBdsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:26:db:8a:55:0b:e8:9c:9c:c8:44:b4:cd:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f6e53b697ad263b4ba4ea49814366a883b54ad
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=58821e341613ae2141ff497b8f7406424c93b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:30:28:86:70:25:59:24:32:80:18:ee:ae:
e9:63:e9:da:d3:0d:b5:b1:b9:2b:ac:33:1b:0d:9d:
58:09:d4:d0:e2:96:f6:8a:03:83:23:8a:da:67:a6:
55:25:f1:96:48:41:c6:86:73:e3:a0:2f:54:6d:54:
09:06:3a:f9:cf:5f:06:ef:c3:3a:03:7b:b4:3c:fc:
14:6a:36:af:e5:fa:51:5f:e9:40:24:13:48:c5:20:
5b:b5:72:de:10:aa:ce:06:65:80:99:94:a0:a6:73:
31:55:eb:e7:48:5e:1d:c0:01:d7:12:ba:34:a9:51:
f9:42:9d:36:c7:b7:6c:d6:38:c5:1a:ee:42:b9:48:
c3:e6:dc:4b:b6:bb:42:de:20:4a:81:9f:d1:7a:c6:
82:82:f0:db:e5:ff:9a:20:65:71:58:cc:1b:e4:ca:
1b:c5:a9:48:9f:0a:d6:62:a5:74:2a:7d:3a:e8:2e:
8a:b9:43:ca:b7:92:98:e9:77:09:dc:32:c6:7b:98:
5a:d6:cc:e7:c1:9f:28:c2:51:5d:c7:65:57:7b:a5:
2a:b1:f4:45:74:57:52:a4:c9:4e:e6:fc:8d:4c:af:
3d:75:d7:82:15:f6:ad:81:7d:51:68:81:a0:53:6e:
18:21:25:19:d4:5c:9f:5c:04:c8:8f:dd:a0:65:05:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:1E:34:16:13:AE:21:41:FF:49:7B:8F:74:06:42:4C:93:B4:B4
X509v3 Authority Key Identifier:
keyid:20:F6:E5:3B:69:7A:D2:63:B4:BA:4E:A4:98:14:36:6A:88:3B:54:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPblO2l60mO0uk6kmBQ2aog7VK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e7576a-4363-4984-b4c7-b1f29cccce55/1/IPblO2l60mO0uk6kmBQ2aog7VK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b2:c0:06:82:d8:47:d7:2c:22:4c:f0:5c:8d:56:4e:d8:7e:
db:bb:da:cb:eb:f8:2e:13:25:f6:59:47:f3:f9:d5:f0:f5:1f:
e8:ca:ba:c3:77:d7:97:67:54:df:12:d2:02:b3:55:06:be:cc:
75:b3:d6:34:11:24:98:2b:53:03:dc:39:d8:b4:f7:03:5c:5d:
7a:61:ce:59:98:31:d3:bb:eb:54:7e:e4:c0:ee:46:de:52:7d:
4f:66:f4:b2:d3:3a:18:3f:ef:48:91:21:8c:e7:a6:1a:25:a0:
c8:88:71:5f:00:85:0b:f5:da:5e:d9:4e:ad:53:1b:3f:46:f5:
4c:bb:12:7a:e9:e3:03:1e:58:00:db:12:9b:55:b3:52:3d:b9:
51:f1:e0:ca:b6:60:05:42:f2:77:e2:3b:ba:90:5f:50:58:c6:
67:10:4a:38:62:ff:64:20:59:8a:71:6f:99:5f:b0:75:ab:52:
29:e6:a1:46:50:87:14:41:dd:95:00:10:b5:b6:2c:62:1d:48:
d2:10:f1:d4:17:10:52:08:17:00:79:33:5f:d3:5f:86:db:39:
22:0c:f8:ec:f6:99:07:7c:da:aa:7c:b3:e4:8b:4d:fd:ff:62:
8f:72:8e:14:53:f7:9b:5d:0c:73:48:45:f1:1b:0c:27:6e:68:
bf:e5:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:59 2025 by rpki-client