Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: S77XIvGsmKbhTmgsJdIEHgoWO5NwNl6DaNadK5CZQSI=
Subject key identifier: 7F:A3:B8:4D:60:D0:68:0F:F5:82:D2:57:F1:11:4B:17:C8:57:47:51
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0194BBCEAA56DCBC2C77AB9569E6C8157CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: Chjdl+DO/J+FhxApS9bQ6h2K+K+95zTCOZ2vEHTLbrM=)
4: xnynb6ZbVphY17eL44tNUD6FdtM.roa (hash: aGjCMZd441gHskLtab8MXJtzSfVKNikkX0711IjLPWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:aa:56:dc:bc:2c:77:ab:95:69:e6:c8:15:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=7fa3b84d60d0680ff582d257f1114b17c8574751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:6b:e0:2b:07:c1:88:9f:08:0b:14:cb:e0:
05:76:39:af:dd:11:17:29:e4:69:07:04:83:8c:62:
38:de:c7:2b:7e:7e:e0:a9:c7:7d:b7:c3:4a:5f:0c:
82:da:36:bc:e4:7c:b2:1e:d4:45:2d:de:f3:b0:cd:
41:86:98:82:8f:c4:b1:8a:21:89:0c:2d:3d:c0:82:
ba:44:8f:d1:12:f7:4d:73:23:92:e5:a3:99:25:fd:
a8:6f:0b:2d:0b:25:57:0d:e5:22:37:95:6c:c8:38:
b9:2a:22:5e:c1:24:90:6f:ba:c8:f5:9f:f1:6b:66:
0b:e2:b8:eb:5e:27:e4:ae:23:cd:a5:11:34:97:c0:
09:16:04:28:67:1c:05:eb:67:af:84:16:ae:e4:fd:
e3:7c:28:0e:0a:a0:1e:a5:d1:63:45:d3:bf:da:d3:
a0:7e:4c:d0:d6:79:31:40:3d:b7:1e:ce:f6:de:28:
a8:8a:c2:52:93:4c:a3:25:4b:1d:8a:22:82:b2:f5:
35:65:70:2b:af:cd:da:01:9f:d0:10:3b:96:ce:64:
a5:fa:14:62:65:0a:d8:7d:8f:94:d8:29:4d:28:b6:
55:b9:59:a8:a5:f3:ac:a0:c4:c5:d0:62:a9:3e:c1:
c1:e7:ef:40:3f:37:7f:ba:71:04:52:a8:af:99:af:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:B8:4D:60:D0:68:0F:F5:82:D2:57:F1:11:4B:17:C8:57:47:51
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6b:46:c1:e2:66:9a:dd:9d:a3:46:dc:8d:5f:42:86:9e:8a:
74:d4:5d:b3:01:f4:d6:60:e1:a3:16:82:f1:4b:c1:a7:b7:ae:
d2:40:c1:4c:4d:ac:41:a4:58:61:2c:c6:b7:0e:b7:64:cd:68:
ed:10:ca:4a:46:54:58:34:9e:af:23:21:1b:53:fb:f9:ea:fd:
71:87:72:01:c6:a0:43:71:f2:d5:ae:30:65:ab:00:10:36:be:
9c:43:22:d3:e9:ed:5f:66:33:5f:86:e4:2a:f9:d7:d9:b5:9c:
49:1a:a2:77:b1:fa:9a:c1:09:25:32:b6:3e:49:f2:cd:e2:37:
10:e5:bb:8c:e3:42:2d:57:55:8a:20:41:0f:a7:71:5f:7a:1b:
f6:57:b3:7c:c3:67:5d:19:b5:9e:98:ff:81:aa:ce:72:21:99:
59:f5:be:84:0e:f0:ad:ab:fe:30:91:05:1a:46:1d:b4:f3:3f:
46:5b:00:81:8c:10:91:3a:cf:ac:0f:c6:40:81:54:3b:64:f5:
ce:bb:0b:d1:20:f6:ed:5a:d0:b3:42:3c:b1:76:a3:a7:68:87:
28:a0:ac:9c:91:f7:4c:3e:58:f6:21:ca:b8:86:43:27:0e:04:
21:5a:cd:58:09:ba:5a:01:07:38:19:8e:2a:14:07:d6:8a:2c:
0d:f5:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:39 2025 by rpki-client