Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: rRwIG+5bhaLbm1AIQLzrxKuw0F9cM1y/LWZJ09WHgT8=
Subject key identifier: 9C:A4:FA:74:24:E8:D2:D8:E2:64:09:B4:F6:30:37:E5:5F:DA:93:BE
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 0194BD854B0ED93F38ED49310E1378C7C151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 034B
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: jnfONsxrEndGaTb0HZR3K9cdVMAX6T2eb5NAokyvO4I=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
3: dSWnDMzGU7w05-szcewuViNoYXc.roa (hash: Z3YzI+In7TPyeUHO276uy8/ZGrKKO82F7EoRqQw0E6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:0e:d9:3f:38:ed:49:31:0e:13:78:c7:c1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=9ca4fa7424e8d2d8e26409b4f63037e55fda93be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:ab:14:41:64:ba:f7:61:7c:9d:1e:e6:0a:
c0:f3:9c:7a:da:1d:06:b6:dd:93:b9:0f:a7:af:28:
9c:89:e5:40:89:4b:b2:45:75:6a:ef:94:77:ee:8d:
b7:04:36:80:08:a0:ae:b6:3b:c9:96:a5:c0:8b:fd:
c8:c5:54:34:23:4c:9f:e6:16:7c:48:3b:59:13:d1:
c5:6f:ee:9e:7a:a3:9d:4f:78:fe:d9:0f:95:43:ff:
7e:6e:44:44:05:ee:11:71:70:d1:93:d6:e1:31:5e:
b6:b1:f8:8a:21:36:0b:8f:6f:b7:ea:d2:9f:46:51:
92:05:7c:5b:ed:57:8f:1f:1e:c2:c0:ba:62:b6:7b:
9e:4d:f8:93:a7:58:f9:c6:ad:e6:dc:69:92:4d:62:
44:40:c5:68:d0:0d:87:a1:45:2f:03:a8:25:6b:22:
ae:94:9e:7a:a7:15:0e:d4:aa:fd:d9:83:66:3c:bf:
d8:6a:86:fe:f1:78:83:34:b3:24:b6:3d:6a:57:25:
05:d8:ac:c5:d6:a9:d2:54:c9:1d:58:32:a2:be:19:
79:85:d2:2b:a3:b6:9a:70:21:a3:6e:d7:6a:fd:c2:
74:69:09:63:7f:88:98:1b:66:34:b8:1b:0e:60:ba:
88:4a:b8:e8:8c:f2:62:ce:aa:ba:39:6a:6b:2a:44:
a8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:FA:74:24:E8:D2:D8:E2:64:09:B4:F6:30:37:E5:5F:DA:93:BE
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:87:ca:f2:5b:f5:07:d9:c6:cd:e9:b0:60:72:6e:f4:07:d4:
fb:f0:71:d9:09:1d:60:5c:8b:aa:1a:3b:e2:c4:dd:a6:4c:eb:
91:28:31:6e:05:dd:c1:3d:64:cf:8e:68:57:5f:8f:a8:8a:84:
19:6d:a1:70:e3:bf:db:23:2e:be:09:5a:93:6c:8e:d3:39:93:
17:be:0c:e4:f1:07:75:b3:59:12:c1:1c:6f:77:56:a3:58:6c:
83:d1:eb:01:4c:7b:62:cb:fc:58:e9:21:f7:3f:7b:06:2d:77:
0f:51:6b:c1:0e:c6:99:c1:df:cf:b3:1a:70:70:91:e9:9a:c5:
d9:ab:16:7b:14:3d:3d:7b:8f:7d:9a:21:4b:67:8c:63:3f:f1:
3a:53:cc:b1:b0:d8:51:ae:03:2f:f2:9d:c0:1c:0a:b3:fe:b6:
e7:9f:fb:63:09:a9:26:45:1c:2c:8d:2f:a0:59:6c:e0:48:a5:
17:9e:b4:3d:cb:92:81:e9:cc:0a:c2:61:97:3f:8b:e3:b9:e9:
52:d3:bd:f8:bf:98:25:37:48:6b:f2:bf:22:91:23:35:cc:f9:
68:77:98:0d:0b:c9:51:48:37:a6:d5:5c:98:da:93:33:87:61:
79:8d:ac:73:42:17:7d:e0:75:20:77:c9:74:03:e9:44:9e:1c:
2f:38:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:28:45 2025 by rpki-client