Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File: ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier: uo/U10NSGbXR95d5+9G6nHfg/s2mJ5vwKbsrtNcN3wg=
Subject key identifier: 31:71:1F:AA:DD:A4:64:DE:F8:25:2D:4B:18:8C:E7:C8:D2:F9:E8:9B
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer: /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial: 0194BBCDC3047B4B3225759676EC36823E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number: 0288
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: dIFQWBjoG+OtmRYx32YfZIuWZLifpYvZ1QgPVjHuzeE=)
2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c3:04:7b:4b:32:25:75:96:76:ec:36:82:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=31711faadda464def8252d4b188ce7c8d2f9e89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:8f:54:f9:a6:83:80:b2:b9:c4:0a:a9:fb:
c7:56:e1:31:d3:4f:70:32:02:09:18:73:ec:dc:e4:
90:2a:c9:7c:0d:c5:f1:6f:2b:c3:3f:03:44:9b:f5:
78:90:95:00:71:65:ed:f3:18:a2:18:75:ed:d7:f7:
b4:0a:0e:5b:3e:6d:fb:73:c1:9c:80:13:ff:f4:fb:
d4:7a:8e:e6:cf:4b:32:47:b3:e3:a7:3d:9d:9e:f3:
1d:56:3b:b5:74:09:e6:eb:89:52:aa:f7:b3:08:ef:
b4:70:d5:a0:cc:6f:0a:e6:ef:34:8f:e8:cb:84:2d:
77:aa:12:75:5f:6e:b3:6b:ee:c2:bc:c4:ed:fa:4d:
d8:4b:2d:db:06:3b:60:72:f2:b3:56:97:df:f4:61:
98:ab:f1:cd:12:60:57:be:1c:40:ae:c2:fd:11:43:
bb:79:fb:9d:d4:de:e3:2a:83:2c:ff:02:16:e8:c8:
1a:8f:d6:55:08:e0:a5:e4:d1:93:23:be:a6:96:4b:
f6:84:12:3e:95:73:da:ab:bf:7b:d7:56:5c:5f:d1:
b2:d0:2e:80:81:fb:24:4e:b5:d7:1f:93:41:8c:0e:
5d:d6:05:1b:11:5b:c5:18:6d:96:b3:65:cc:5f:83:
43:90:26:32:58:7b:e4:a9:8e:70:eb:e4:18:a0:62:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:1F:AA:DD:A4:64:DE:F8:25:2D:4B:18:8C:E7:C8:D2:F9:E8:9B
X509v3 Authority Key Identifier:
keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:ad:97:dc:97:bc:8c:3a:ab:dd:b2:13:c2:00:b3:c7:ff:
04:e7:db:c3:d9:1f:15:e1:46:f0:87:47:4d:7c:46:0a:17:f4:
35:63:3d:80:48:8b:0b:66:bf:bb:3a:19:d2:44:8d:d4:9c:f8:
7c:1d:0e:dd:43:5f:97:59:a6:28:a3:a5:ce:03:b9:58:9d:83:
1d:1f:61:87:69:4c:63:60:9c:9d:f2:28:e6:2f:68:e1:75:7e:
ba:ec:0e:68:31:64:f3:10:34:2f:20:68:8c:b7:f1:81:63:f9:
1a:38:be:c0:7a:0c:ac:23:71:75:f4:88:40:77:30:1d:1f:02:
92:b5:81:8c:cd:86:d6:cf:6c:75:da:df:75:50:78:54:7e:7b:
95:30:9d:ca:d0:9a:b6:11:be:4a:d9:34:3a:d7:ec:b6:a1:b1:
07:3d:4b:27:45:ea:28:35:f2:01:af:5b:75:2b:6d:f6:74:22:
a7:c4:41:44:5b:f7:5d:1f:1b:59:15:d7:f3:c7:8d:4d:86:c6:
65:e7:4b:ce:57:61:6a:af:30:e0:8d:44:4b:18:75:2b:81:14:
be:b4:df:c6:41:58:eb:20:b6:49:45:81:26:2f:32:b7:73:a5:
b8:16:29:ee:8b:b9:40:10:35:b7:dd:5b:d7:14:93:b4:f8:95:
2a:e6:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:17 2025 by rpki-client