Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: qsTm+tsUC0xw4qa8qLgCl4RcBeoEd/KGHlh2BkY7gcQ=
Subject key identifier: A8:81:32:7E:B5:82:07:89:A1:1C:DD:A0:7A:EB:0A:35:D8:2B:0A:FC
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0194BCA9D76A4FA9EFC84BCA8BC07E191291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0997
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: w9TYxV8v6OqbZnyBAVOyZ9oTKjKPQAwzOaVBncxUthA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:6a:4f:a9:ef:c8:4b:ca:8b:c0:7e:19:12:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=a881327eb5820789a11cdda07aeb0a35d82b0afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:84:af:59:a1:07:1c:81:74:b5:64:15:b7:4d:
89:e4:ef:2e:bb:c1:9d:be:a7:6d:2b:9e:e8:a1:fa:
cb:e9:31:49:c4:15:65:ba:cc:a6:14:93:f2:a0:ec:
6f:39:b0:91:46:3f:22:9a:3d:19:33:cc:71:82:8b:
36:c8:6c:0b:72:85:a3:7d:e5:af:91:5f:7c:d6:d7:
a4:c6:a0:90:20:5b:14:58:76:16:69:ea:66:ed:98:
d0:a4:14:f2:69:53:87:19:72:39:d4:3d:f0:88:c9:
62:0b:63:05:36:cf:3e:8c:47:a5:58:f9:f4:7d:29:
42:e5:e7:2c:63:92:0a:a7:1d:f8:48:29:aa:e3:85:
43:ce:fb:e2:7e:b5:72:40:f8:20:5a:b9:14:3a:d3:
ff:6f:89:c9:84:86:33:df:ab:c7:a1:b1:37:18:f7:
36:c8:0e:7c:df:ff:5c:eb:b6:a2:f6:8a:72:26:e0:
6b:80:2a:a6:e2:50:f8:7c:f2:d0:38:b9:2b:3d:12:
8c:a7:60:e3:1f:08:f3:15:c6:e0:9b:1e:1e:e9:3f:
11:5b:f7:df:8d:fb:b9:2f:f2:23:2e:ba:c1:79:80:
1e:45:c4:25:7b:93:a5:36:bd:d5:9f:75:60:7a:23:
5a:08:84:5a:e6:64:75:88:46:c4:fe:fe:76:47:1a:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:32:7E:B5:82:07:89:A1:1C:DD:A0:7A:EB:0A:35:D8:2B:0A:FC
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7d:41:ef:27:da:21:2a:cd:5d:06:2b:74:9e:87:13:cc:af:
0d:22:fa:97:31:cf:f5:4a:9c:41:41:11:32:79:e9:bc:bc:6c:
ad:66:71:2c:84:44:7d:5e:af:e4:4c:70:16:33:ed:a4:80:35:
69:4b:7e:00:b0:c5:a9:72:81:9d:d5:6a:db:3a:3f:9e:13:51:
1a:ce:79:07:48:f6:ed:f4:66:7b:75:08:56:cd:3b:7a:fa:77:
1d:72:73:09:88:be:da:a9:68:6c:b4:2f:7e:fa:e5:bb:7c:b5:
04:36:25:c0:27:93:ae:45:d8:8b:18:c2:47:9e:c8:a2:2a:5e:
aa:e2:80:5e:6f:57:ac:33:b4:84:f6:91:1e:c4:4a:a6:0c:56:
d9:98:53:b1:c0:d7:ba:70:9f:33:29:02:2b:d1:08:d5:f3:d7:
98:72:e2:aa:10:b9:dc:8e:a0:09:ba:09:28:30:11:d6:a1:94:
03:98:33:2b:bb:2c:d5:90:ea:56:f0:fc:f6:75:54:a1:c3:fd:
cd:36:1b:77:ac:13:4b:c3:c8:bb:4c:8a:5e:46:78:fe:70:38:
ba:cf:d3:3a:4d:14:5b:a1:f2:73:ef:11:d3:41:62:45:06:c4:
3b:f0:9f:63:87:18:d0:20:ac:27:3c:37:1a:1a:d6:48:1d:9b:
d2:c5:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:28 2025 by rpki-client