Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: hiBNxWPqvKI5G3zoELM2XMA4pf7s2sv59YChDydPtUc=
Subject key identifier: 5A:B7:D8:60:00:1C:6C:BD:B6:96:04:FC:00:5E:1C:10:DC:1C:DC:DF
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 0194BBCEE62CDC5236AD0FB76A59CE054675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: aiaA7FPOKEaAdgoihnG2VbfmJyMkWCm5vskEbtQQ2ok=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:2c:dc:52:36:ad:0f:b7:6a:59:ce:05:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=5ab7d860001c6cbdb69604fc005e1c10dc1cdcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:93:b2:c5:38:87:c2:74:d6:f1:71:f2:e0:
b0:f7:a0:56:96:9b:b0:2e:4f:54:95:a7:d4:4a:eb:
22:fb:5a:7b:84:76:a8:d0:d1:cd:1f:e1:43:4b:2a:
0d:dd:f9:cd:0f:2f:1c:b9:6a:8c:c2:8a:bd:53:97:
40:e7:0c:3f:ac:91:85:f6:5f:39:42:e3:ed:10:a7:
c0:db:c6:b0:92:63:27:2a:a3:34:3b:a6:45:ab:1f:
be:06:be:ab:68:dc:b8:e5:00:c8:6a:a2:57:54:ad:
6b:1f:77:9c:61:e2:f5:f3:cd:14:dc:49:df:63:a4:
3f:45:3a:ae:08:c6:b9:de:aa:28:35:db:5f:a8:a5:
09:9e:09:12:1b:0d:42:ff:c1:ee:36:6d:31:b4:9e:
67:cb:12:ba:8f:67:9a:5f:71:83:ac:47:f4:98:90:
cc:39:30:57:c2:0e:ed:7c:2b:90:c8:e0:21:ac:38:
f0:c4:ee:0e:fd:9e:0d:da:d1:dd:33:9e:53:b1:fd:
3b:58:e3:1d:a0:09:8a:50:25:71:65:82:fb:ed:58:
75:80:e5:fe:16:de:72:06:81:95:e3:c7:f5:df:73:
f8:fa:fa:fb:5a:bf:a7:4f:1e:b7:be:ec:26:aa:3e:
63:3a:95:8c:a3:76:65:ef:e5:a7:fd:36:e8:c7:17:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B7:D8:60:00:1C:6C:BD:B6:96:04:FC:00:5E:1C:10:DC:1C:DC:DF
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c6:2e:08:b5:e3:f4:10:c6:29:d9:6b:4c:2e:58:6e:91:0a:
a4:8c:82:11:f5:9c:88:79:c3:38:fb:66:04:da:b8:34:ce:f3:
9d:31:e1:96:d8:58:c1:4e:b9:a7:c5:82:71:c8:6a:38:99:84:
d9:14:0f:fa:f4:59:ce:c2:fc:3c:84:11:5e:83:46:6b:a3:34:
30:e7:c5:c0:85:60:8b:12:8f:7f:bd:67:13:c8:c4:a6:0d:c9:
de:5d:b6:3c:2c:43:49:49:45:d8:81:d2:1a:9a:ad:a1:22:b8:
73:2b:99:27:6f:2e:73:21:eb:e6:e1:fd:ed:29:12:5f:24:60:
fa:ee:75:06:39:75:94:18:1b:59:a6:3e:78:b0:17:50:2e:47:
65:2e:4b:92:7a:71:fa:a5:b8:81:52:38:e9:c6:30:45:26:ff:
f2:f0:7f:07:40:52:d0:09:32:11:85:c6:e9:9a:19:32:98:00:
bf:74:bb:22:1b:c8:04:e3:d9:60:37:fd:4a:62:9f:71:2f:e3:
d1:b7:3d:d1:21:1c:e5:bc:a1:20:da:18:b6:99:b6:3c:9e:f9:
aa:e3:3f:64:93:db:78:c5:fc:99:f2:4a:bc:5a:5b:e7:5e:5f:
5b:5c:7b:dc:dc:ea:5a:28:4e:22:74:96:ec:34:29:c0:d0:32:
a6:20:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:56:58 2025 by rpki-client