Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: tE2b3tFBtqF6mO0HJtLZI35MEr8+FuR0oWvRRiEgAsM=
Subject key identifier: D9:62:C0:B9:60:AF:07:C2:F1:48:4C:F9:A4:01:FA:40:64:EC:CE:82
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0194BC051CC18C2AAD4360F37E93D4D2C7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: tPgWSQVeourekfeM6hCqRyVhFlwpjdjKxdu/tVLvQU8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:c1:8c:2a:ad:43:60:f3:7e:93:d4:d2:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=d962c0b960af07c2f1484cf9a401fa4064ecce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:95:e3:44:39:9a:41:38:ab:13:38:d9:16:
e3:76:a6:0d:4b:9c:ca:fd:84:42:b9:fd:8a:ba:0e:
2c:f5:9b:4e:a0:ed:a7:2f:e9:f7:c9:3e:cd:86:ab:
41:f2:5c:b2:b2:ec:ce:32:16:1a:4c:09:12:4b:bf:
42:f5:1f:e2:6e:b1:98:89:f5:a1:b4:b6:23:1b:66:
7e:a3:10:11:51:db:c4:97:83:87:8d:9b:0b:6f:99:
12:71:d6:04:14:3b:5d:86:ee:1a:f7:01:21:50:b2:
f9:51:e0:1f:ff:5a:a8:b1:bd:fb:66:04:fd:c0:f2:
23:ea:da:99:49:bf:a2:0c:a3:fb:66:26:ed:52:18:
ec:37:7f:fd:e6:f5:09:5b:37:2d:4c:3a:c6:93:df:
75:71:f8:53:26:3a:59:c2:19:ac:4a:90:62:41:f3:
bc:f5:06:2c:f3:1a:28:84:59:2a:e3:60:76:54:12:
2b:12:9f:69:28:a1:47:c9:fe:2a:7c:b2:14:85:50:
b8:0b:7f:21:d4:61:99:38:e3:3d:a9:cd:ed:2b:da:
11:df:e2:01:35:64:57:c2:57:10:7f:19:30:2d:bf:
da:5c:6e:ac:14:3c:6d:1f:4f:4d:66:6c:46:20:9a:
fe:dd:3e:29:51:5d:76:b5:48:b6:b3:cf:aa:10:b0:
a8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:C0:B9:60:AF:07:C2:F1:48:4C:F9:A4:01:FA:40:64:EC:CE:82
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:68:60:4d:75:25:37:b2:86:8d:da:36:78:de:b7:32:5a:67:
8d:4a:33:ea:68:09:7d:87:f1:f2:b4:bd:e7:49:ea:73:d8:7b:
e0:9e:de:a0:cd:1e:f2:67:eb:b3:73:bf:f6:27:4d:a5:35:00:
71:94:15:2a:21:a9:7e:4d:7b:7d:ca:33:09:b1:00:cf:d5:0c:
8f:a1:74:d9:c7:ed:2d:6f:81:8c:b6:b7:c9:43:21:80:bc:3b:
08:ad:64:29:ad:9a:f5:15:d7:84:28:b3:9a:7a:87:b7:a8:7c:
6b:4b:f6:37:6b:20:2c:89:d1:74:b6:2e:1f:4f:a1:9d:5e:d0:
69:31:79:d2:d4:21:48:64:ad:b1:49:d3:47:04:f3:73:7b:43:
8d:9b:46:ea:3e:96:b8:e6:0c:7f:94:5f:bd:c4:8a:9d:36:51:
02:97:bd:f9:99:f1:72:ea:12:d6:0f:57:0f:c0:69:ae:21:6e:
9e:78:85:06:8b:e7:4e:b8:fc:74:3b:e2:75:19:a9:e8:f6:99:
34:af:bc:7d:77:f4:2b:69:f1:d4:7e:d9:54:25:c5:3a:d9:f2:
17:92:3e:8c:35:46:01:da:18:4a:4e:4c:d1:1b:09:87:f6:74:
ab:e6:f2:86:4f:5e:6a:2b:db:eb:51:6c:6d:21:96:4f:d9:07:
cb:d3:36:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:12 2025 by rpki-client