Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
File: IHeZAnMp8iaCdkVzryEV2pWp9r8.mft (raw, json)
Hash identifier: rYeL02wjIH38ma27f0pF0p1wJKa28D6VkEfwaxVkQOM=
Subject key identifier: 0E:6B:93:0E:04:61:21:7D:3C:5B:50:58:3E:58:25:34:2F:53:64:84
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Certificate issuer: /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial: 0194BD17C78743FBA31642DB331249116476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 16:00:39 +0000
Manifest this update: Fri 31 Jan 2025 16:00:39 +0000
Manifest next update: Sat 01 Feb 2025 16:00:39 +0000
Files and hashes: 1: 5-CR-odXjfFXX-cbD_KrA88AnGY.roa (hash: ZyBB8eo1lTEFydHVFlAnAjM+USjp+b5TDsaNXh5nnS4=)
2: IHeZAnMp8iaCdkVzryEV2pWp9r8.crl (hash: KKzQ4v8onriPGSblPft1jdRjyydsRFhGqUZ5OkTpllY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c7:87:43:fb:a3:16:42:db:33:12:49:11:64:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207799027329f22682764573af2115da95a9f6bf
Validity
Not Before: Jan 31 16:00:39 2025 GMT
Not After : Feb 1 16:00:39 2025 GMT
Subject: CN=0e6b930e0461217d3c5b50583e5825342f536484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:f2:6f:2c:fd:8a:89:08:3f:57:d5:08:66:
13:5c:70:0d:16:e7:ac:de:db:cf:1d:2c:92:92:ad:
98:74:42:f3:a7:c3:49:aa:6f:46:22:03:80:d7:00:
db:f2:e0:97:1e:9e:b6:a8:3d:c0:58:ff:ed:56:01:
5e:ba:ff:a6:b5:8f:6b:e0:05:4e:00:97:69:61:f9:
6f:0c:41:c1:d5:ae:bf:1c:5e:d1:a4:be:e6:8b:fc:
55:5e:fd:78:a9:52:b5:d6:67:16:f8:1e:66:14:b9:
e5:8b:df:16:06:0b:db:33:8b:93:11:d3:e3:ed:48:
87:86:c3:44:a1:d1:f3:b7:f8:7c:08:7f:b4:7b:a6:
29:14:21:2a:90:df:6c:68:11:c8:83:e7:78:69:b0:
da:9f:df:dd:c2:13:9c:6f:c8:86:cd:98:9a:35:aa:
b4:0f:17:2a:63:bd:ca:cf:73:40:06:89:8c:5c:4f:
f2:bb:7e:72:b1:7e:ec:cf:de:60:e2:cb:93:fe:9d:
33:05:02:89:1c:04:b6:1e:69:78:bf:15:c1:b3:72:
12:d1:f3:68:e3:96:7f:79:68:e9:54:40:92:f3:c5:
a3:e3:96:c4:ec:73:cf:49:2c:06:be:02:74:02:45:
c3:d6:fd:bd:78:65:06:76:77:68:ae:95:e9:66:ec:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6B:93:0E:04:61:21:7D:3C:5B:50:58:3E:58:25:34:2F:53:64:84
X509v3 Authority Key Identifier:
keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b5:fe:f2:91:e6:4f:8e:3c:bc:ec:d0:e9:36:23:12:8d:33:
e8:d7:97:e8:17:73:c4:5c:3b:d7:3b:56:40:b3:6d:2a:39:83:
40:dd:60:53:89:f8:1f:19:3a:7e:39:c4:d2:b3:73:ab:0c:54:
bd:db:8e:0e:0a:1f:b8:a4:3e:e5:be:7c:c2:f5:4e:a2:40:da:
a4:62:d5:4d:15:54:3f:b7:9b:98:01:29:13:9a:65:32:b2:be:
ae:d4:7e:f6:d7:d6:75:02:92:9c:27:9f:12:5b:ec:2c:84:a5:
66:7b:37:66:5a:47:d7:87:70:84:8c:26:4d:56:5d:f9:64:59:
e5:0f:80:bb:6e:f5:2d:50:be:3f:3f:ca:8d:dc:a9:4a:7a:26:
de:71:7c:8c:30:85:e6:53:b2:86:de:55:24:d8:ba:7b:86:e5:
06:14:b6:af:39:66:74:92:59:29:ba:59:12:bd:74:3c:22:25:
8b:03:0f:03:9a:56:3b:30:ba:60:11:97:10:1f:cf:6a:6a:35:
e5:e8:1a:2e:58:21:ed:01:5e:cf:80:c5:f0:ce:a1:6b:0c:75:
91:cf:6a:5c:67:82:c8:7d:ae:18:cf:70:94:18:94:4c:76:56:
bf:67:6a:15:e9:f2:f9:2d:22:eb:3f:25:6b:2d:d6:35:53:79:
38:35:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:34 2025 by rpki-client