Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: QTQdEah7X9j1crgg1u49RbcaOoIgiu7Z6VvgBD8+/zw=
Subject key identifier: 96:34:69:06:A6:10:43:87:34:75:04:5B:F5:BF:6B:1B:86:74:2A:CF
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 0194BC3C6FE3A05DC292FD797996DB7F6C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1235
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: exceIeW1Q3yngzK281MwDc1Ibfq53YxCvd7D/gnwx/8=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:e3:a0:5d:c2:92:fd:79:79:96:db:7f:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=96346906a61043873475045bf5bf6b1b86742acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:be:a7:ca:db:35:76:4d:41:6d:41:9c:c1:
1f:7e:4e:07:4f:f1:5c:0d:6c:8d:e1:c4:62:c3:5e:
c6:70:cc:49:56:8b:46:e8:64:45:c1:4b:8e:a1:5c:
35:c0:48:a0:4d:60:cd:62:84:57:59:63:fe:88:45:
1f:7f:fe:4c:91:99:ce:5f:a4:45:b4:c7:5e:09:40:
a6:c3:28:16:ba:32:39:f4:6a:c3:f7:2f:90:3b:32:
7b:bf:86:30:76:9b:5e:8f:79:04:83:e4:e4:7f:4e:
c2:29:ef:4e:f6:90:7b:63:7c:53:14:ef:2b:d4:f1:
30:27:4f:60:ae:19:b8:e9:6f:65:c5:c6:5f:75:82:
6d:b9:d6:76:bb:55:97:89:e4:e0:e0:58:f8:8c:88:
30:38:99:68:b7:40:8c:e0:2f:5d:b0:6d:b9:d4:35:
5f:20:63:48:10:5e:40:9e:5d:eb:01:03:86:8f:c8:
60:c2:9b:6f:3d:2e:78:55:69:82:57:65:ff:51:ba:
95:be:25:6a:e6:fb:32:51:78:5d:70:5f:da:bc:15:
e3:f4:ba:cb:e1:a7:44:9a:0c:94:e1:fc:90:ab:aa:
63:c2:bd:6b:f1:ce:5f:ff:87:8e:18:ef:ee:8c:2c:
85:a9:36:a5:7d:b2:a4:99:58:ee:f6:06:56:27:a9:
5a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:34:69:06:A6:10:43:87:34:75:04:5B:F5:BF:6B:1B:86:74:2A:CF
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:44:7d:93:37:49:84:e6:6b:4f:d9:65:5d:d6:6a:e7:44:4f:
78:d9:44:11:86:cf:49:40:1a:33:64:1f:65:b0:71:ea:07:d5:
37:8f:bb:5f:8b:63:8e:e6:26:2c:21:95:1f:bb:43:5d:5c:dd:
ef:a6:79:86:cb:e8:d8:8f:4d:0a:e3:f6:1d:d0:da:4a:f1:6b:
44:0e:9c:2e:ae:a1:65:8e:16:a2:14:2c:5d:7c:a6:6f:5c:42:
2a:5e:81:10:6c:12:a6:1c:50:8e:63:2f:96:11:1c:f8:1f:0f:
f4:2d:72:af:29:1c:19:7e:5a:d5:ad:00:77:be:4f:ff:16:46:
41:98:12:7e:e3:a0:55:b8:59:5f:4c:5f:a0:41:db:b7:5e:a0:
dd:25:8c:a9:3c:63:84:87:d7:62:0d:8a:ae:7a:8f:3e:a0:67:
aa:3d:dc:ce:cb:a8:64:39:0f:6e:1c:ac:7d:2c:b3:73:e5:c8:
53:e9:9f:89:79:a7:6d:16:9a:fc:f9:fe:b7:c3:dd:c9:b3:07:
0c:de:16:a8:3e:ae:57:e7:0a:92:b1:5f:84:aa:bf:13:65:22:
97:fa:99:a8:cf:6a:3f:89:32:46:a9:a1:b1:e6:0c:62:c8:61:
b9:76:8b:fe:d9:7a:8c:3a:e3:3a:d0:94:8f:a0:83:c2:34:e7:
3f:c9:ec:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:06 2025 by rpki-client