Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: WacVPXqPdaXtYmwaxwzT7V8hxHsmbcgAGGxG9nma3Ic=
Subject key identifier: A8:B0:F3:1E:7C:77:56:D9:F5:B1:AD:66:A2:12:FD:95:52:97:2E:89
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0194BD855145EF9077D62CED9BF2F5C7210D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 055C
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: 1jUSqsHCS/kO58vYhkhfxW++984D44tIiEDkhGQRZt0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:45:ef:90:77:d6:2c:ed:9b:f2:f5:c7:21:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=a8b0f31e7c7756d9f5b1ad66a212fd9552972e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a0:34:ab:dd:fa:2f:51:ce:a2:21:e9:b6:d7:
9d:02:92:4c:cd:22:04:11:1a:66:65:03:ec:2d:d7:
57:61:82:d1:7a:87:f2:c9:39:45:95:4a:e7:7d:e6:
37:40:0b:7a:f4:da:55:a8:ff:ce:10:69:18:d1:31:
1c:19:56:b6:76:42:ab:f0:9a:55:43:ab:de:c0:f9:
f8:f9:38:ca:59:9e:d1:d1:3e:a3:b1:65:91:ec:a8:
e4:8c:51:6f:1a:d4:af:35:e7:1f:37:6b:21:46:c4:
ca:7b:0e:3e:69:73:7a:14:1b:2a:cd:f0:17:fd:5d:
0e:5e:a1:96:4e:a9:da:39:ec:77:8f:c4:e6:1a:83:
43:81:40:10:cd:c1:d4:dc:6d:9b:21:a9:4b:5e:cb:
ae:bc:50:6a:5c:74:76:d1:2f:08:5b:11:0f:53:8e:
fe:29:02:77:e6:59:0f:ef:ae:97:c3:27:f0:f6:5a:
ea:7e:fd:33:2d:f5:71:90:af:83:ad:93:fe:6b:e0:
3b:44:b0:00:52:d2:5c:55:80:53:80:f9:50:02:96:
78:65:be:e2:19:e5:9a:16:1c:4c:a7:ae:74:7f:56:
dd:c7:2b:6b:1c:ea:cd:13:b2:1e:0b:7e:a1:35:91:
b5:3f:7c:3f:38:13:32:27:41:e4:7e:12:4d:3d:0e:
fa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:F3:1E:7C:77:56:D9:F5:B1:AD:66:A2:12:FD:95:52:97:2E:89
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:64:7f:7a:d0:35:37:04:17:2e:fa:39:de:3b:f3:6c:1d:c1:
30:87:99:d3:f9:35:72:9e:4c:fb:02:0e:ee:53:61:c5:1d:f6:
9f:8c:09:75:0d:46:ad:33:80:2f:67:14:84:53:bd:5c:d0:5a:
1b:4b:37:4d:29:09:6d:6d:94:1f:a3:13:5c:8d:97:75:d1:c2:
b7:96:5f:0f:64:43:40:4d:d0:1a:e3:5b:92:6c:fc:ca:53:a4:
d4:6e:d3:c2:c2:6f:bf:8c:a0:ec:20:4c:84:75:08:03:4c:51:
f9:68:23:4b:03:37:5f:ad:b0:e0:3a:3b:84:c0:9e:0a:26:b0:
f8:29:98:65:c6:dc:d3:75:d9:79:5d:51:33:66:4f:87:35:e9:
9a:2a:e0:ac:57:c2:00:22:9c:3d:25:c1:17:cc:97:f5:8b:d6:
f8:a6:ca:7c:38:ad:e2:4f:b2:52:fc:cd:f4:f0:eb:b4:00:c9:
43:7b:e8:e4:05:ad:4e:b7:e0:86:38:87:06:0b:8b:db:c5:a7:
63:ef:99:c4:1c:4b:d0:85:0b:fb:57:61:0d:5d:5f:8d:42:6f:
be:00:73:7f:c8:0d:65:1a:a5:54:f3:23:5d:e7:7b:2e:8b:a8:
48:77:a1:1e:5b:a0:e4:d1:65:0f:21:d7:b9:91:a0:0d:9e:a3:
18:15:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:17 2025 by rpki-client