Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: l6WcsMnom/tj1ChRBGi9S9AxebThfS5Hw4kbEaETCo4=
Subject key identifier: 0C:4B:F3:5C:58:19:54:09:5C:7E:94:27:77:18:13:24:71:A3:56:2D
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 0194BCA988C33057995F836844B0F543A74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: 7OwvAno2l244O2H5lKoBs2hR5TM.roa (hash: e9tNLBCWuvvFCB2/sKRegknsmXrZcwUi3KAU/8XQUJc=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: q/PewU1DaAh0wIyucGnhwDhIbMMc6Rho9801uN98rgA=)
3: k-udsIECVPoVZ4hVJjV1FMS17aY.roa (hash: 76+LdtT2pK7jJlV8hOCIZByBXKgKYoLXUsN/z5PhjRk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:88:c3:30:57:99:5f:83:68:44:b0:f5:43:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=0c4bf35c581954095c7e94277718132471a3562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:65:78:1c:68:9f:c6:f7:9e:2f:d8:9a:7c:
6d:f0:e0:d1:36:5a:35:7c:62:da:0f:9d:39:7a:eb:
6c:af:49:1f:19:23:2d:4b:2a:77:e9:96:c1:f0:c7:
60:a4:7c:ac:c4:a1:66:23:e8:26:82:c4:a3:fd:da:
ae:24:80:ab:79:91:46:b2:19:cc:19:87:89:21:a3:
34:a8:60:1c:52:6c:f2:8c:19:37:c5:2d:45:5b:1f:
da:af:51:45:2c:36:21:aa:6b:ce:ac:6b:88:81:41:
8c:01:77:00:80:d1:3e:fb:71:d3:0d:46:f4:2c:82:
1e:0a:6f:eb:71:83:26:d0:2a:af:0d:08:f6:63:d3:
5d:e4:04:97:20:8b:fc:13:0c:c6:15:bd:77:f3:7b:
5e:ed:36:e5:64:56:95:ee:d1:53:df:1a:8c:fc:bc:
4e:07:44:ad:f2:c2:97:97:15:66:1a:ef:31:01:11:
be:0d:ee:0b:9c:86:b9:cc:36:56:d2:51:ae:88:1e:
27:fd:8c:83:86:f8:1d:47:5b:02:9b:3b:ff:7e:ac:
64:8e:ec:08:37:3b:0f:f7:6f:1e:f5:e1:05:1d:78:
1d:48:65:83:3e:c9:14:75:6c:3d:d9:f1:02:ab:7b:
70:79:41:60:6b:90:52:b8:a7:35:de:dc:f3:e4:bf:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4B:F3:5C:58:19:54:09:5C:7E:94:27:77:18:13:24:71:A3:56:2D
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b7:cb:43:4c:90:bf:ac:34:5e:d1:48:02:df:2e:ed:c6:ac:
d6:a1:35:33:a2:ac:f3:81:5c:7d:4b:8a:fc:24:26:7f:d5:8d:
63:b1:5b:5d:19:a7:42:23:78:01:f6:8b:33:1c:6e:6d:f1:8c:
0d:c1:f6:e5:f4:57:3f:d0:c9:c2:aa:60:67:e8:f3:ad:93:e4:
8f:0a:03:85:98:02:23:00:94:07:aa:98:de:77:95:57:17:96:
97:a0:61:e6:52:92:7d:c0:07:49:90:4e:1d:4c:27:67:f5:6d:
2f:0a:d9:1c:a9:86:c5:6d:3f:8e:0e:cf:95:c0:45:1f:a7:25:
06:03:a1:d1:89:86:40:94:b6:91:c1:0f:9b:b7:57:e9:95:d4:
6d:c0:b3:a0:02:90:0e:17:26:50:19:26:da:f1:11:d7:c4:1d:
28:de:1d:17:ba:da:ce:64:af:e1:c8:5e:05:d2:fd:a1:e3:78:
fa:5b:ff:0f:d1:be:ab:ba:9a:86:55:6c:11:73:33:5d:c8:8d:
ea:05:d1:17:04:17:d0:41:44:ba:1b:49:7f:f1:b5:2e:be:53:
dd:97:37:2d:71:6a:0b:0d:ad:20:6f:2e:ae:88:26:d2:9e:e9:
a7:fa:90:8d:7c:03:91:f3:ad:e0:5d:f5:1e:af:ac:c5:7a:23:
a2:7d:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:41 2025 by rpki-client