Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File: iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier: y/NYo8TScBa1+rXMSwMkFaZS9A6C/ahPeoWQS3rDinw=
Subject key identifier: 73:A8:E7:0C:E8:70:9B:E4:F4:C4:1A:DD:30:67:B5:CD:CC:D6:E5:2A
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 0194BBCDCACB5F1BEFA10DAB200E1A305F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: if3KaihHpbg1Z08V6cXxVYQmFhk.roa (hash: 4GJMU1mopT3EhZuM0ayjHedY3bbBO8iZn11kZBRbuts=)
2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: FfReONlkqYherhwobAwVu0+lOGgwdrC/DpieCxiIbDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ca:cb:5f:1b:ef:a1:0d:ab:20:0e:1a:30:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=73a8e70ce8709be4f4c41add3067b5cdccd6e52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:b8:1a:6a:05:b5:09:5e:4b:1c:59:d4:f3:
23:fe:62:1b:0d:57:2e:3b:3e:96:d0:6a:86:c8:b3:
9d:ff:f3:2e:4d:a9:6c:c7:9c:6e:97:5d:a6:fb:be:
83:e4:40:7e:31:79:54:bb:c6:ed:2c:81:43:0c:42:
06:a5:ca:b4:91:39:12:8e:8a:c2:93:b0:3f:6e:f5:
04:58:50:93:1a:41:bf:cd:5c:af:89:87:a4:fa:11:
1b:98:73:e9:ef:93:ee:a1:a8:cf:84:6d:cd:ce:77:
9b:06:ab:d2:2e:32:25:5a:d7:6f:f2:34:28:cc:48:
04:bf:2d:3e:c9:01:3d:ab:c6:e8:20:2e:1b:be:c4:
fa:af:86:9a:f3:69:fa:39:61:42:c7:2d:8f:55:ca:
ea:8e:b6:5a:77:9f:fd:d2:25:c1:ec:b8:05:48:b5:
5b:6b:89:a9:eb:d9:78:20:47:99:e0:ed:25:62:93:
75:ce:34:d0:69:7a:5d:f0:a7:62:34:55:c4:f3:91:
5c:22:f6:0a:2b:be:8b:b4:94:a9:d7:23:75:5e:5c:
52:a1:dc:3d:4d:ff:b3:11:f6:a5:38:d9:7e:51:a1:
d1:3d:0e:31:25:53:37:2c:44:85:3e:00:61:c2:d6:
50:cc:26:4f:bd:da:2d:df:6c:bb:d7:ff:0f:d8:6a:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:E7:0C:E8:70:9B:E4:F4:C4:1A:DD:30:67:B5:CD:CC:D6:E5:2A
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e8:06:2f:d2:8a:f6:45:8a:2d:fe:83:a3:c9:16:9b:ab:c5:
eb:a0:68:44:ba:82:a5:2d:05:69:32:50:9f:e4:16:dd:fd:78:
c5:5d:e7:a7:fa:4e:2e:b6:82:c0:31:85:43:ba:4e:64:2e:49:
ee:ce:eb:79:31:74:7d:78:27:f7:3d:ab:68:50:ef:bb:1c:c7:
c4:20:45:6a:c9:4f:30:b7:88:12:3e:4a:fe:f3:1a:6c:9d:15:
2d:1f:fb:64:e0:3c:e2:96:98:11:b4:8f:75:4d:6b:48:b1:5e:
65:03:a1:ac:15:e3:a2:80:71:88:a8:47:52:37:8b:82:af:c7:
57:63:0c:a0:1d:5e:67:18:66:a3:8a:57:b0:9e:a2:44:56:aa:
63:b4:57:3a:55:50:fc:fd:4a:45:fb:3f:d5:34:3e:88:cf:71:
30:b1:f4:f5:f9:50:46:e4:5b:38:7a:77:d7:ff:21:23:12:5b:
a5:6f:1a:84:0a:1a:53:b6:e6:71:c2:72:56:45:59:f4:02:61:
ee:7b:01:80:0a:bd:21:6f:ea:cf:09:9b:df:e8:14:5c:cb:0f:
94:92:3f:58:47:bf:89:63:f2:0e:98:98:95:09:9c:66:b3:fb:
92:d5:94:da:10:ec:8e:97:ab:1a:a4:34:5c:76:04:5c:38:db:
79:5e:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:12 2025 by rpki-client