Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: Xk0fqsiPTwStMIYEJy7/YPhSdyc6yc6LYYs03JHFUMA=
Subject key identifier: 43:80:F4:CA:44:3B:9F:76:3F:F7:F8:1F:B2:67:4F:3C:44:69:67:5B
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 0194BBCE9843637F25BB6633D3F071D4D623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: gl5jVkYAoBFN7cdrLnkDFxT9xzs.roa (hash: DKhlihYjJGtiikGfA1O1zHxswQCNAc4gtqIYH1Qddqc=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: tsgyxz1A9ZMTdGyrpWrqrAswD4bin7zAUyWoMp7j/+I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:98:43:63:7f:25:bb:66:33:d3:f0:71:d4:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=4380f4ca443b9f763ff7f81fb2674f3c4469675b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:11:96:c4:31:10:12:6b:d9:e8:70:a5:73:
f8:b1:a2:0f:27:93:7a:b0:0a:30:9c:b9:90:4b:6c:
39:f8:13:52:24:33:5a:47:2f:4d:e8:d6:97:0f:e4:
ca:0d:1c:1f:75:e7:0b:e6:2e:ad:e8:06:2c:05:91:
3b:2c:5c:24:ee:ed:d8:c3:66:e0:31:65:90:af:51:
32:91:b1:42:6a:f0:7b:df:c1:75:08:d0:7b:35:28:
f0:3c:cd:ae:7d:f1:9b:36:39:77:9c:f6:18:ff:4e:
92:38:e8:93:0d:49:e4:27:94:8b:1f:61:b5:52:69:
e4:62:d5:a0:23:0f:92:a7:9a:1b:ee:66:18:05:10:
9a:66:7b:28:f0:5e:6f:e9:11:43:5b:09:06:cb:f2:
f6:a1:e6:cb:d6:f2:56:af:3d:b6:42:e3:4f:b2:31:
c4:f4:2c:e0:76:95:9a:ef:67:01:bc:1d:1d:f9:d4:
20:11:20:46:cc:88:54:d0:fd:52:07:c5:b3:8d:8a:
a9:a7:5d:25:b2:65:32:5e:23:2b:6d:f0:dc:4c:5e:
80:9e:26:d5:11:b5:35:d3:b1:b8:a3:a6:ff:79:a0:
a0:40:46:81:2f:df:2f:8f:e1:25:ed:5a:ee:49:7b:
07:0f:a4:37:ba:09:43:0a:50:bd:5b:e6:b0:60:a2:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:F4:CA:44:3B:9F:76:3F:F7:F8:1F:B2:67:4F:3C:44:69:67:5B
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:68:50:29:e3:81:9b:12:dc:e1:89:60:0b:ef:10:cb:d5:4e:
0c:01:c2:8f:ce:b7:5a:36:31:3a:32:db:c8:bc:d5:af:56:7a:
ba:55:19:55:88:90:12:6c:12:65:e8:bc:6e:4c:4d:49:be:21:
88:09:29:f1:0a:f8:90:ce:6b:ef:77:69:89:99:b0:2e:ed:24:
65:7e:fe:63:32:fd:1e:43:a2:b9:57:32:86:99:b0:3c:db:f8:
eb:f5:0e:33:b4:9e:33:55:a5:de:80:2c:ca:c5:1f:8a:94:11:
a3:a5:ed:d3:d7:2f:6d:a0:58:03:01:6c:2a:28:46:96:bd:36:
ce:a2:7d:d1:b6:5f:76:9b:66:ad:94:60:33:b1:2b:c4:ea:88:
69:de:fa:cc:8f:ae:e8:92:26:c6:21:06:29:d9:b9:26:7d:b2:
01:7c:ca:a3:06:90:56:f2:a4:aa:cf:67:59:34:b6:f2:05:3b:
40:db:ab:1a:b9:69:8a:69:bf:00:da:1b:8e:3e:94:f9:78:6c:
d2:07:38:44:55:6d:62:b5:95:d5:56:16:0c:f0:25:bc:1b:92:
8c:71:ad:a0:cf:ea:20:c5:31:25:4d:6b:53:be:44:eb:4f:86:
ce:ec:61:89:ae:41:76:78:b4:6c:24:c4:84:63:49:0c:c3:26:
b6:06:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:39:59 2025 by rpki-client