Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
File: iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft (raw, json)
Hash identifier: MesfTfFVJ0sejO4nWaxFv8CCnj/vhnumxlH2pnZ0C5E=
Subject key identifier: 95:76:C1:AE:7B:8B:ED:89:2C:B1:EF:1D:91:99:93:2A:71:58:7D:34
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial: 0194BD8545173CF8834BD7A75E14D406D107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
Manifest number: 11A7
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: FVISxrqgKm1jzuVDA1W7GgFPx7A.roa (hash: vGtytU+11DFVtQgoaWrwrm8B3AMwfHF+sCYR/tFEDO8=)
2: McPECbWiOZZptuHIWFrOcEgtdOI.roa (hash: xHYw+KJVEhQFDVEUioGvFwcLa2C5OgHkMSM0z9hHgHY=)
3: iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl (hash: 6AEwii6EQAYi9jnzQWGOuzOCLe+pdIHj7VXfi+k8mPc=)
4: vvI0g8BdWOjRPV00wNm8r2tdp4I.roa (hash: mTpdkbaV6/+O1nfMWFer4UtqR769YxVmqPMQSeiPoZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:17:3c:f8:83:4b:d7:a7:5e:14:d4:06:d1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=9576c1ae7b8bed892cb1ef1d9199932a71587d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:0b:84:a8:9d:3c:43:94:f7:2d:60:b0:4a:
68:9c:41:30:40:91:ac:a3:b1:99:ce:80:ec:37:e0:
d7:b2:b2:a2:1d:c1:83:2e:f5:a6:81:b4:10:ad:a7:
9c:f2:91:6e:14:bf:94:fc:68:64:35:34:dc:01:c0:
13:cc:d8:8c:73:d9:43:e5:03:fe:b3:58:aa:e7:16:
d7:53:c9:b4:46:35:2d:62:bd:c0:d1:c8:4c:70:f6:
bf:9f:a7:76:7e:b3:0f:d8:aa:57:68:f8:b7:c7:05:
d7:92:a2:a4:b3:6b:fd:85:7f:12:43:11:ba:fb:12:
92:af:f9:fb:b9:90:4a:89:36:0d:a9:05:82:9b:bf:
7b:8f:e8:4d:0c:97:bf:17:4d:18:96:92:c8:c0:bd:
1f:03:ab:78:68:66:b5:e9:95:10:8b:ab:8f:dd:ca:
13:b0:1b:9f:65:85:58:cc:88:4b:2f:56:64:66:e4:
a7:42:26:ab:e8:01:58:04:6e:e1:57:57:5f:8f:22:
c6:df:b4:eb:ff:47:ad:57:a4:0c:aa:b3:51:c0:8b:
70:71:38:d8:59:07:55:62:a0:6b:8b:2f:d0:06:f2:
22:9a:f8:26:c5:1b:0c:30:00:e4:f1:3a:f6:50:90:
8f:da:9e:9c:19:ab:2a:96:f6:8f:66:e5:f4:f8:96:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:76:C1:AE:7B:8B:ED:89:2C:B1:EF:1D:91:99:93:2A:71:58:7D:34
X509v3 Authority Key Identifier:
keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:b8:f9:e8:14:59:5f:d2:e1:75:31:03:8b:5c:c0:1a:f1:
79:c4:98:b9:08:79:eb:67:8d:6a:02:40:3b:07:9d:39:2c:6e:
37:a8:ff:b3:f8:ca:60:b4:f5:bd:cf:19:1d:f7:b3:38:5f:de:
dd:d0:18:e3:5d:5e:5c:bc:86:d0:0f:4c:d8:c4:b4:7e:3c:00:
05:84:f4:c7:68:9a:43:eb:c8:f7:e9:b8:51:55:58:1b:38:cf:
9b:fc:75:8a:d7:19:e4:2f:29:9b:89:76:e6:27:fd:c2:f4:58:
ed:a2:c5:12:54:b3:57:a5:e7:b0:23:6e:f8:25:0a:c3:ab:17:
8d:94:d0:ce:c3:90:52:0f:09:22:b3:ec:eb:14:62:f8:03:0b:
ed:a3:a2:c4:05:37:97:ff:be:1a:9d:86:ea:2f:b5:c2:33:c6:
1a:e3:72:a4:85:6c:c6:41:c6:97:44:43:b4:2b:4c:ed:b5:f7:
cb:d3:0a:7a:59:42:93:90:9d:cd:c2:1b:eb:3f:07:68:16:1f:
9a:b3:60:2d:9b:f6:e1:a3:63:c5:20:fd:4f:33:6a:0a:7d:f7:
8d:94:39:4f:89:08:93:89:f4:a6:15:71:10:ef:46:ab:b6:12:
85:9d:44:f0:11:2f:d7:e0:ef:ef:ba:2b:b6:e6:59:14:29:c8:
14:63:42:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:53:02 2025 by rpki-client