Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
File: iW1QqxLax1eoUX-YnnMXJVoUfFA.mft (raw, json)
Hash identifier: SMkk6ly3XBqL1MJ4pDAa1vtuThyu9j7M87+8l/RbMk0=
Subject key identifier: 97:7B:AF:0D:78:65:E2:62:BF:C0:F6:68:D4:5D:EE:FF:58:1A:5F:92
Authority key identifier: 89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
Certificate issuer: /CN=896d50ab12dac757a8517f989e7317255a147c50
Certificate serial: 0194BC3C97B033C2CA8A6AF9C3683EA6E540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
Manifest number: 06A3
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: B38rRSPWErqXfPx0DzWgKIR_ZF4.roa (hash: 3ngIsupMWcvGfbEOZowjuSpsq4xSUo0YoDqyx3tWI8Y=)
2: SW-4hL0mVSkVe3oiFDw6-IYGB80.roa (hash: aedwmf02se0U+ifzhQZmrqdfm8+Faq7npwCgMp24KCg=)
3: iW1QqxLax1eoUX-YnnMXJVoUfFA.crl (hash: mQGnDs5pUfr0OCnz8WRyMXECUi+v5GaLVk+8+lZ7lk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:97:b0:33:c2:ca:8a:6a:f9:c3:68:3e:a6:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d50ab12dac757a8517f989e7317255a147c50
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=977baf0d7865e262bfc0f668d45deeff581a5f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:ba:c4:19:3a:c5:f9:dd:8b:62:10:41:4c:
c0:3d:c1:85:ea:c2:05:e9:b4:08:7a:85:31:d4:56:
07:52:c0:d4:93:55:31:f6:12:7b:58:c3:77:97:3b:
6d:60:ee:57:30:b7:96:68:33:eb:d8:8a:57:9f:82:
79:98:6f:fc:11:2e:7e:0c:15:9b:50:c2:8f:66:55:
29:e4:95:0e:82:44:70:c8:73:26:ea:d4:8d:32:a8:
2f:96:ad:22:fa:f6:60:76:5a:a8:7f:04:dc:8d:af:
d8:27:91:e6:9a:d1:84:a1:aa:fd:9d:44:ff:d7:56:
c2:50:16:a1:1c:0a:86:7a:9d:c8:7b:38:54:9a:6d:
da:34:aa:71:95:59:15:ce:7d:c2:80:aa:9a:d2:d1:
3e:bb:5b:1a:32:3a:62:1b:13:4e:cb:c0:22:b2:dd:
ec:c1:b0:96:e7:a7:67:34:03:b4:05:aa:3c:fd:31:
16:77:81:2c:fe:da:61:48:bf:49:41:18:7e:53:df:
be:b9:1e:84:a1:d8:ef:8b:9b:db:8b:9a:9f:e9:58:
20:19:be:e3:7d:36:9f:9b:93:a3:2e:7c:5f:2d:ca:
1d:32:d9:1a:98:d3:74:d2:4b:94:10:56:17:6d:7f:
54:77:8d:ce:44:94:fb:c0:ca:29:8b:4b:6e:03:15:
fc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7B:AF:0D:78:65:E2:62:BF:C0:F6:68:D4:5D:EE:FF:58:1A:5F:92
X509v3 Authority Key Identifier:
keyid:89:6D:50:AB:12:DA:C7:57:A8:51:7F:98:9E:73:17:25:5A:14:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1QqxLax1eoUX-YnnMXJVoUfFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/75c017-162f-4d0b-97c9-013b2feb5d28/1/iW1QqxLax1eoUX-YnnMXJVoUfFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:88:66:f7:e2:38:41:29:d4:a8:09:6f:85:c4:eb:96:63:fc:
b4:a8:68:a8:9d:18:5b:6b:74:e2:1b:ed:8d:85:88:d6:76:92:
07:f6:1c:9c:b1:b4:b7:de:4f:94:e6:b5:d9:e1:48:c4:44:39:
26:2c:8f:d0:ec:ab:a4:04:dc:40:c3:6b:1f:b7:57:b8:5d:20:
19:72:39:e0:6e:b7:a8:68:ef:62:e5:bd:fa:cb:f5:02:83:43:
3f:cd:6d:af:f6:7d:3d:7e:97:c2:65:b8:f5:df:7c:a3:d6:6d:
1c:51:43:3b:c6:89:08:19:d2:b9:97:a5:d6:90:16:48:fb:a4:
25:bb:fc:aa:9e:14:f9:96:2b:d9:e1:ed:cd:c1:f5:98:ad:4e:
22:23:99:14:5f:54:a3:d5:dd:e6:00:7f:0d:a6:dd:2b:4c:f4:
53:14:96:64:32:8a:33:59:b1:52:aa:bc:f0:52:39:d1:1a:e8:
5e:46:bf:58:fa:fa:92:34:18:17:26:9b:46:81:62:6f:88:45:
b9:97:53:f9:1f:c9:a4:80:0a:38:c4:cd:cb:de:b9:dc:11:8a:
18:c2:79:09:46:99:df:f5:cf:d6:60:14:c8:80:d6:89:a8:c1:
f6:37:9a:92:aa:33:8e:70:c9:99:63:89:b6:b3:2a:6f:f7:8a:
34:0b:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:58 2025 by rpki-client