Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: NYLNJKnw9h8eFUinn5aNWkQPzG/vA5ykZKo4JIab088=
Subject key identifier: 97:9F:2D:20:3E:55:8A:A2:AA:6A:8C:18:95:59:00:AF:EA:56:CE:65
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 0194BCA9AAB717D78996A7BB9CEE01125315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: HloJi4Y3bXK//eWY6nQxqit/P6oGWu8JLjXhAAd/OM0=)
2: sK4MVj-U3ZeJw_G8vJOASStIhLU.roa (hash: P1pOOJUZXPKz7U3FDlVYBqiKqi99iCrUEDzB8rKKbR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:b7:17:d7:89:96:a7:bb:9c:ee:01:12:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=979f2d203e558aa2aa6a8c18955900afea56ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:b7:90:e5:13:7d:af:d7:4a:8c:ba:f7:a3:
45:aa:e4:40:79:b3:9a:00:d5:9b:f4:54:e9:5f:4f:
14:59:55:96:fc:34:87:ca:1b:a3:69:10:b3:35:2c:
ab:7c:e0:44:7c:6f:a9:2b:6c:7b:f5:3f:e1:37:28:
0a:79:c5:10:4a:b1:f9:63:bc:bd:b3:c2:6b:74:bd:
0f:6b:8d:69:26:73:30:f2:b7:f2:16:e9:ba:a7:fb:
e1:6e:0b:d8:0c:a7:eb:51:17:9d:0a:27:f8:9e:5a:
c7:3b:0b:4c:7b:15:37:56:e6:19:e0:a8:ba:9d:af:
de:7a:33:b3:7d:7a:3f:6a:70:8b:85:1b:5a:6c:0a:
a8:93:01:fc:d5:eb:fc:75:32:06:9e:dd:84:51:a0:
11:f8:9c:a9:2e:3c:5b:d9:54:19:6b:56:ce:6d:17:
e1:be:81:b3:be:77:b7:62:7c:66:97:f4:cb:26:32:
43:6b:e3:1f:16:f2:b0:a0:8c:fe:a1:8d:9e:8a:73:
34:f6:71:36:4b:35:da:76:85:7e:1f:f6:f0:15:1a:
08:b6:13:2c:3d:a6:ab:38:19:f7:2f:3c:e0:a2:f9:
bb:bf:60:b9:f5:70:93:27:6d:28:9e:28:2d:29:c7:
1c:5e:10:93:a5:41:98:36:8d:d5:7b:48:46:5d:27:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:2D:20:3E:55:8A:A2:AA:6A:8C:18:95:59:00:AF:EA:56:CE:65
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b6:73:ef:18:0c:96:96:cd:3e:84:bf:41:2e:d2:25:c8:d7:
79:36:95:1e:3f:a9:ad:77:47:a4:8a:cb:f4:f4:3c:a0:28:fd:
39:16:b2:15:6d:5b:7d:48:2f:ba:ed:5b:65:cd:b6:d4:51:02:
a3:ee:80:8f:1b:ad:bb:74:99:03:fe:bf:e6:34:f6:04:2b:25:
d5:a7:61:ae:1e:57:97:08:df:f9:24:56:4e:a8:96:69:67:4c:
1e:f3:94:f4:04:10:bd:85:2b:24:76:a0:1b:58:bf:05:83:9b:
4b:3c:f8:76:c7:9f:5b:c9:59:18:da:38:08:d3:a6:eb:60:a9:
28:02:aa:52:2c:68:47:7b:da:0f:b5:58:e5:78:13:2d:55:58:
17:ff:2c:c2:f1:a8:49:95:86:f0:c9:28:a4:e4:4a:06:9e:37:
7a:02:fb:26:fe:bc:bd:f7:70:41:42:59:a1:9d:e3:2f:f5:2d:
71:aa:db:01:7e:b0:b4:fc:c4:d8:d8:06:36:d7:6e:df:0a:67:
9d:a4:0f:ab:60:86:90:83:1e:36:73:9b:7b:e6:6c:44:05:a1:
88:eb:df:25:1a:17:37:29:07:e6:52:49:af:41:b3:4e:31:23:
0d:a4:fb:e3:3c:6b:50:b2:28:5a:95:7b:3e:8f:9c:4c:01:1e:
d6:aa:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client