Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: Tog16rQGq6xDSdYAt34UfzScjFLlckfngTHhND9JtVA=
Subject key identifier: 4E:87:88:F5:76:D6:68:92:E8:1B:01:67:7E:EB:2A:CC:92:BD:F1:30
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 0194BC7327926E0E8EB99D9B42C0BB7D69BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0C47
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: ChHdFKu2ujvQaQsbOSOMx1xTRLHx3dF8N4vg2kynEaY=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:27:92:6e:0e:8e:b9:9d:9b:42:c0:bb:7d:69:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=4e8788f576d66892e81b01677eeb2acc92bdf130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a1:bf:46:38:c1:83:09:ad:4d:ca:70:8b:89:
a3:16:57:c5:71:bb:8e:c0:09:0c:f8:c6:df:9d:d8:
c7:33:ed:ee:ec:c9:fe:38:1c:e1:c9:63:ae:fc:15:
6f:d4:98:5a:02:75:6b:7f:19:f2:27:f9:6f:e1:f8:
d5:51:57:90:0d:d4:7b:9c:1e:2e:b1:91:f8:04:07:
35:48:32:c3:50:4f:c1:58:72:ea:98:3a:34:d6:04:
19:d8:1b:49:fc:4a:c9:d4:33:0a:1c:2d:39:86:61:
b4:7e:57:e3:5c:4b:7f:83:e5:23:01:12:e1:e8:6c:
56:05:43:fe:8b:f5:5a:b1:d0:89:2a:a0:b8:1c:3f:
ed:65:16:c2:3b:af:3a:99:9d:64:92:d4:76:b0:8a:
1a:51:47:ea:3e:0e:9d:1e:37:05:c0:2f:b7:5c:29:
d8:27:66:c0:5c:2f:f7:b4:9f:75:10:f5:6c:b9:98:
4e:df:5d:d7:ee:5f:2b:72:6c:2d:98:af:28:23:3e:
ec:ae:60:27:b0:10:12:ab:4c:41:2b:75:74:40:5b:
24:f0:fa:26:54:84:53:33:62:fa:13:74:38:5d:df:
20:3d:ff:6c:2e:59:19:9b:78:39:b4:a5:e9:f5:17:
a4:8e:e0:20:af:44:cb:83:e3:ae:07:7c:72:ee:93:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:87:88:F5:76:D6:68:92:E8:1B:01:67:7E:EB:2A:CC:92:BD:F1:30
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:a4:e7:e7:6d:ed:e0:6a:1b:03:41:a2:83:a9:f8:6a:d3:
ae:f0:5d:f7:19:2c:c1:78:fd:9e:5a:75:99:09:e2:3e:0c:fc:
7d:4f:cc:d6:3f:95:6d:8d:44:53:6a:d7:7a:89:97:a9:d7:19:
d6:28:d9:2a:ef:9b:6c:aa:f8:5f:f7:d9:8b:a3:fe:c7:ba:13:
d3:61:0f:f8:42:39:bc:39:74:47:eb:ae:28:32:d6:e1:61:fa:
d8:a3:ab:05:fc:cd:ac:62:73:a1:4e:93:c4:39:8e:b3:bc:4c:
4c:97:81:16:53:6b:4e:4f:21:2c:9e:49:ef:3b:84:9f:59:83:
3c:3c:00:f4:28:69:11:2e:d9:f1:84:60:9f:7c:ba:26:66:20:
fc:e8:68:a7:45:bf:f1:39:72:7b:07:6f:52:d7:64:09:aa:3c:
53:79:a2:16:2a:aa:ff:b3:e2:f7:38:66:93:bc:24:e9:c3:e8:
c5:76:1b:51:0a:24:5f:77:38:f2:da:62:72:f6:f7:94:57:ae:
ae:c2:2a:c4:02:52:f9:56:52:55:85:17:c2:0d:00:c8:e6:46:
5c:c0:de:32:a9:f7:50:9e:b3:d7:17:28:6b:56:92:2c:6a:82:
82:e5:03:79:95:37:d7:84:59:7f:83:ec:cf:b3:50:ac:b2:43:
5e:a4:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:59 2025 by rpki-client