Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: xx44TETR2j/dLhNnhyiWcFfIulj/QLIMmNgU11GR/Hg=
Subject key identifier: 60:AE:78:B7:70:80:D8:28:03:D3:D2:6D:19:E8:FE:BA:11:EC:BC:80
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 0194BD4E88523457ACEB8649C6492CD20E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1017
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 04BOBYgFUlgDG3ot5mee2vBOUo0WTBpAyA4gs38xpPA=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:88:52:34:57:ac:eb:86:49:c6:49:2c:d2:0e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=60ae78b77080d82803d3d26d19e8feba11ecbc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:bc:e2:1c:88:77:9a:12:db:ce:7a:bc:57:
8a:4a:5e:0a:14:ed:7a:5d:96:fe:44:3d:45:e2:0a:
e1:92:3f:19:76:9a:3e:d3:b4:b5:8b:5b:28:2d:87:
e2:1a:bd:24:e6:87:2a:ad:2b:cf:d0:7a:68:6e:ac:
da:c4:8c:aa:88:12:b5:c1:22:4c:1a:9e:bd:a7:9c:
e2:97:3d:20:ee:b0:7e:23:64:75:5e:bf:8d:ab:e3:
41:fd:fa:6d:02:0b:7c:bb:e1:c5:77:c0:3d:ea:94:
05:7d:a2:40:cb:c5:3a:5b:cb:ea:57:1a:30:1e:02:
61:af:2e:69:a5:9a:ec:d6:33:7d:d9:b3:a9:1a:58:
a1:e1:1c:27:4f:f4:22:b7:b2:4b:08:7f:8b:be:7f:
2f:11:06:a7:43:5a:69:42:18:ae:00:92:d9:d2:18:
a9:e7:4f:b2:2e:58:37:47:f0:fe:2b:25:63:b3:d6:
f4:4c:fa:84:0e:a5:da:ca:2e:23:07:1c:4f:be:b5:
e1:e8:d7:02:1b:8a:15:dd:77:32:af:cf:4d:c5:d8:
15:c2:13:41:5d:cd:c8:f2:34:ea:f0:8c:8d:eb:75:
37:3b:05:2e:d8:b1:e8:7e:75:21:9a:74:05:03:26:
b7:ff:d6:ae:d0:b8:65:a4:47:08:4a:d2:cc:e0:69:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AE:78:B7:70:80:D8:28:03:D3:D2:6D:19:E8:FE:BA:11:EC:BC:80
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:3e:88:d3:eb:99:bf:cd:fb:09:bd:1d:e3:80:9c:da:c9:
0b:15:de:f3:89:c9:7c:41:58:43:9e:35:76:ad:3f:7c:3e:5b:
2f:f2:b0:ff:97:61:c7:34:2f:35:11:ae:88:00:27:7e:08:1d:
7b:91:ec:3c:34:d4:d5:13:20:f8:b5:c7:82:49:31:76:2b:f2:
09:56:d1:0c:50:0f:9e:ce:fe:6b:b6:db:26:90:db:9b:45:20:
17:2c:0c:40:eb:42:fd:18:e8:9e:f7:c5:ed:a7:77:c7:98:02:
35:f2:e9:8d:90:85:ab:48:f8:53:45:8e:b1:b3:28:d8:c1:59:
87:77:f0:ac:62:7f:86:c6:e4:cf:b2:19:b1:30:f1:3c:2d:b3:
30:fb:a4:1e:ef:f4:f8:ec:8d:32:3d:f3:bf:46:8b:27:1c:a4:
c6:51:98:3f:4b:06:12:13:d1:1a:44:d5:32:04:5a:17:44:03:
6d:d5:98:7a:db:d5:9d:df:0d:a7:15:98:c7:a9:22:29:d7:da:
ca:5c:a1:cb:86:85:e8:c5:82:87:a1:ae:e9:dc:8c:e7:df:99:
fe:25:b0:83:07:24:27:50:af:cf:11:57:37:f2:af:f9:e0:53:
61:72:c6:b3:71:10:d2:cf:b7:58:cb:04:cf:66:64:73:12:ec:
4e:11:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:28:57 2025 by rpki-client