Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
File: IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft (raw, json)
Hash identifier: vaFcx0O/WDDJCobR+O20M2wQ833twrX0Pm3zaOegGyo=
Subject key identifier: 9B:87:4C:6F:D0:3E:B8:9F:BE:E2:20:7F:83:B2:64:37:31:B5:CE:9B
Authority key identifier: 21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
Certificate issuer: /CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Certificate serial: 0194BC04A60538BD7A8EA4CA5A61A9815349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: BIaGV9Zs8uGBriNQ8U7uQ0gnNfA.roa (hash: 7T5AV/yHdfgZicPaqkaiWb9Osz7vZVkyB1rTGAClRcg=)
2: IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl (hash: Hp2syD6Q5e0OqnqGOzqaqJVI5cnd9ay/Q0fPAwaw+RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:05:38:bd:7a:8e:a4:ca:5a:61:a9:81:53:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=214a0f42190944ac6b45e00a24ae41a345fdcb35
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=9b874c6fd03eb89fbee2207f83b2643731b5ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:b4:22:16:b2:1c:bd:8c:5e:41:3b:ac:00:
bf:d9:66:a0:f8:32:a7:3c:cb:d6:4e:e5:23:eb:56:
49:5c:ff:b1:a1:77:5d:d9:54:e8:15:25:e5:c5:4f:
e0:66:56:02:e3:d9:e4:be:c8:51:58:84:a4:34:96:
93:5f:ea:8f:4c:2b:e7:c5:b6:4e:81:0b:73:bd:56:
4d:d8:4f:c2:c4:05:c3:9e:da:75:25:5e:de:0c:f5:
38:ba:7e:b8:97:e6:bc:1f:71:3b:ee:3f:ed:bb:15:
3c:03:ba:af:e2:9e:5a:a3:8f:54:f2:54:e7:93:c5:
68:33:6a:87:2a:3f:71:7b:9e:d9:de:f2:1e:60:6f:
c1:5f:84:93:95:0f:7e:d9:4f:70:70:05:39:08:01:
56:44:cf:da:2d:1a:22:50:03:1f:eb:6f:0e:38:31:
27:66:b1:26:b8:a5:d1:da:34:d4:33:a6:fd:40:18:
14:b1:50:14:ea:c7:8e:0d:29:b4:43:df:c0:35:81:
12:d8:a0:0a:7c:16:c8:2f:c8:9f:62:6f:1c:ef:f8:
7e:b7:4b:66:7a:11:6e:5c:a8:d4:64:65:6a:68:72:
7f:69:33:4f:6b:07:d5:16:14:e5:20:e4:98:a2:a3:
71:dd:96:13:c3:98:45:1e:9b:a7:d9:8b:7d:ce:07:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:4C:6F:D0:3E:B8:9F:BE:E2:20:7F:83:B2:64:37:31:B5:CE:9B
X509v3 Authority Key Identifier:
keyid:21:4A:0F:42:19:09:44:AC:6B:45:E0:0A:24:AE:41:A3:45:FD:CB:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUoPQhkJRKxrReAKJK5Bo0X9yzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0d57ff-5530-460d-8b53-b6656cc1bd59/1/IUoPQhkJRKxrReAKJK5Bo0X9yzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:3f:ea:bf:38:07:90:31:5a:95:f2:92:fa:c5:40:12:ae:28:
e2:e0:e6:e8:29:82:6e:e1:97:6d:25:f9:fd:7f:61:5f:80:40:
c5:d3:d4:ac:2e:15:bc:00:25:b6:dc:9a:3d:da:3d:62:7e:f5:
96:b0:1e:c2:fc:e1:1d:38:63:a4:c6:75:8b:f1:88:a5:58:c8:
e6:d7:c8:50:eb:f8:0e:89:f9:37:33:64:26:e7:d5:59:63:85:
72:e9:9b:41:d6:29:71:1e:7a:9a:af:05:c9:4c:a0:a5:db:fc:
60:a5:9a:3b:2e:0d:b6:0a:b4:b6:13:be:d9:69:3a:4c:0e:37:
02:64:ec:f6:fe:a5:7c:a6:af:db:a8:26:0d:98:0f:86:46:bc:
76:04:34:86:15:f9:bf:7d:12:50:4b:7d:9e:08:32:fa:dc:da:
fd:59:77:52:e7:98:89:f0:ef:e8:2c:8a:48:cd:d9:5d:4f:80:
15:d9:c4:75:77:8b:b7:81:a3:f5:0a:c4:3c:03:26:dd:15:38:
65:58:3d:aa:a7:a8:7b:d2:c7:ec:68:28:2a:d0:c2:c0:d9:7d:
d4:58:3f:8b:5c:c6:8f:24:a9:b5:5a:f1:13:69:c3:31:69:7d:
da:4c:58:ab:d9:4c:4f:c8:8e:fa:c3:33:3b:d2:41:ba:71:77:
2d:78:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:11 2025 by rpki-client