Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: HgJy/5FCALeyFyMtcD9rFAZ+H9U9aAE/YozuAMabSDY=
Subject key identifier: D1:93:C7:EE:8C:AA:CC:F8:04:F6:DC:15:A7:A0:29:8C:58:FA:4C:E7
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 0194BD8551DCC9FAB0AE958C51ED4AACAA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: +PWnVCaaiT2fghYos/zuHk/3+FiK9lGOhqaKYMFApWo=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:dc:c9:fa:b0:ae:95:8c:51:ed:4a:ac:aa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=d193c7ee8caaccf804f6dc15a7a0298c58fa4ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:e1:ac:e1:44:10:50:99:c9:0a:9d:7c:80:
e5:76:f5:1a:27:7e:6a:9c:64:18:b9:07:cc:bc:c9:
de:ca:99:8f:b4:dc:97:75:83:8e:81:5f:93:b5:cc:
d5:14:c4:f4:8a:39:54:8b:d9:2e:31:c5:5a:c4:72:
da:dd:7d:79:94:47:0c:14:40:dc:fa:3d:bb:5d:59:
9b:72:c3:e6:bd:08:9a:98:b0:55:fe:4c:03:ab:94:
47:39:9b:ea:53:8b:37:1c:48:da:37:cb:17:b8:1d:
02:bb:17:13:fc:6f:13:f0:57:25:08:6b:e6:ac:3a:
88:93:d5:b9:54:fa:59:2c:7b:4f:9f:cf:bc:df:c9:
80:6f:5d:9f:a4:ad:49:41:f0:4d:29:5b:b1:b0:25:
8c:d9:f5:22:5d:a0:98:43:5d:60:5c:66:2f:d9:36:
3d:fa:84:d4:ec:52:9d:69:9d:b2:22:55:f1:71:67:
73:98:e4:ff:2d:5d:25:4e:90:bd:b1:5a:fc:d0:f4:
77:9e:02:25:97:b4:cb:50:9e:a6:14:48:73:73:12:
24:3c:e9:ff:1e:6c:02:13:a0:bd:32:45:ba:e0:1a:
c6:00:fc:98:89:58:43:39:5e:8d:80:e5:b5:5d:1c:
18:e1:61:2f:55:53:f9:20:36:32:b6:bb:81:c1:a4:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:C7:EE:8C:AA:CC:F8:04:F6:DC:15:A7:A0:29:8C:58:FA:4C:E7
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5f:8f:79:a6:23:43:c4:1f:af:72:70:14:20:ce:e6:da:92:
8a:23:ef:cf:32:c6:02:ca:02:58:5e:2a:76:8a:f8:f2:02:53:
1a:a4:a5:89:99:82:e7:d0:c3:1a:85:c9:be:a8:6e:89:e1:4c:
8d:d2:b9:f5:36:d3:81:f4:16:7a:99:7a:6a:30:6d:59:4c:71:
80:08:e8:c8:1d:29:6c:68:b1:38:c4:aa:47:07:c3:4f:4c:13:
2f:09:0d:6d:a7:fd:68:d9:9c:65:d9:c5:74:ab:07:f0:ce:24:
69:00:ea:ee:8e:54:c7:d9:16:d6:29:9b:cb:5d:9c:6c:8c:98:
f3:14:6d:89:30:ea:35:8a:31:a7:8b:47:0a:53:ca:25:06:95:
20:26:91:b4:f4:60:60:d0:ea:37:e0:b5:83:24:9a:af:0c:ea:
09:b6:22:8f:ae:6b:6b:68:34:fc:08:d2:f3:33:6c:50:28:db:
9b:d0:9f:19:c3:3f:88:ce:c2:64:b3:9e:a7:d4:11:85:e2:b0:
8c:98:49:f0:85:14:d7:a1:7e:09:c3:25:20:f4:ea:07:ab:88:
48:7f:24:c1:08:c1:ff:52:7c:56:df:e8:e4:59:85:d6:ba:08:
05:23:37:f0:c4:5b:da:71:4d:41:da:bc:48:ce:28:3e:72:b6:
30:7b:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:10 2025 by rpki-client