Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: Si8ekvbBbOKnRXA8+T5tvjAyw2w8+kzwp/57CUuz8iY=
Subject key identifier: D9:36:CE:13:91:29:03:92:5E:1C:38:01:11:25:8D:04:C4:CB:11:A4
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 0194BC72C993EC7292AA382B62D9E14EBEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0D00
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: QufIFWym/qVXzCNx+gxqm4MQtMx7cHJjxEPjbxAMCiw=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c9:93:ec:72:92:aa:38:2b:62:d9:e1:4e:be:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=d936ce13912903925e1c380111258d04c4cb11a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:12:45:b2:04:3e:0b:52:e1:67:4e:11:e7:
28:72:7b:b3:c9:0f:22:04:54:f8:8e:4a:9b:29:58:
d3:db:3c:32:36:52:35:72:cd:8c:ef:ee:82:30:ca:
bf:e6:a6:ce:88:c3:ea:c2:69:ad:66:3d:eb:3a:0c:
70:ce:09:18:02:33:f8:61:2e:18:d5:58:ee:ea:41:
e2:a4:fe:03:15:33:e6:73:84:a4:9c:18:dc:08:cb:
db:73:db:59:17:ed:01:7e:a0:e1:e5:49:71:a0:f5:
b2:6c:21:2c:ef:a9:b5:50:26:01:8b:c3:55:ef:b9:
99:85:ff:03:c9:39:60:06:53:79:62:86:8c:91:88:
51:90:98:58:50:c7:ed:a3:8c:6c:cd:6e:36:44:9f:
6f:5d:24:90:60:7b:74:15:bb:1e:61:f7:f6:5d:1b:
2e:13:7d:13:a6:6e:2c:6b:b7:20:bd:98:66:c3:a4:
dc:af:88:0c:bb:3a:ed:a5:7a:7c:f6:1a:4f:5f:ac:
b8:38:9c:3b:e4:0d:d3:c6:fe:5c:3b:c0:f5:d9:f7:
00:33:dd:34:6f:41:c9:b6:78:ab:39:16:ce:ea:4f:
b2:bf:92:cf:35:ce:b4:35:08:dd:65:3e:32:25:52:
55:e8:6c:a8:01:30:9d:54:94:d2:f9:bc:24:11:a1:
bd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:36:CE:13:91:29:03:92:5E:1C:38:01:11:25:8D:04:C4:CB:11:A4
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:55:d1:c9:6c:61:23:6d:37:1d:cf:32:66:1c:b8:01:62:90:
31:40:16:37:4a:98:23:f5:25:1b:31:79:aa:87:d8:cd:ce:b6:
ee:c1:30:ad:67:9a:f8:82:1f:71:c5:49:44:33:46:a7:2b:3f:
b0:f8:ed:93:7c:b4:2a:b0:d7:2d:b4:90:cd:99:3d:4c:c3:91:
10:13:1f:79:d4:17:10:23:d6:2c:cc:51:62:30:a1:09:61:75:
75:d9:3c:2f:58:6f:de:18:4a:f6:da:12:cc:20:45:fe:b6:fe:
b0:b1:b5:13:09:33:96:46:59:dd:a2:36:af:fc:f2:0e:82:17:
e7:f5:cd:f0:bd:76:cb:d9:aa:b8:21:af:8a:b3:65:b8:dd:15:
1f:8c:b3:df:8b:17:47:b7:96:91:f1:4e:1e:fe:f2:c3:b6:68:
09:6b:64:08:c4:7a:a6:9c:e6:04:19:ca:16:9c:3a:40:67:9f:
0d:da:b7:40:6c:dc:8d:c4:a2:e8:bf:51:6b:9a:dc:d5:c5:fe:
0d:ca:ce:96:ce:33:56:2d:74:f4:a2:45:19:04:a1:64:65:8e:
9a:07:e5:a4:b2:e3:c6:06:11:eb:0d:ba:b2:50:80:02:28:20:
c4:63:d1:cc:af:5c:4b:31:e4:1b:bc:df:f8:6e:6a:fd:39:dc:
35:e9:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:53 2025 by rpki-client