Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: u90ClHtE8uSSqS+JijHskmy7X/6n6WUt04vnjO7M/0M=
Subject key identifier: E2:36:9A:4D:7C:8D:D2:4D:49:B7:19:9B:6E:3D:AC:30:4E:F9:35:CC
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 0194BC05239A4ACD4E2D67ECF776AB1F16E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: PIAiuI8Y8M9j+jDFS80eTMptmePD/62QY3V5WKMDBCA=)
2: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:23:9a:4a:cd:4e:2d:67:ec:f7:76:ab:1f:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=e2369a4d7c8dd24d49b7199b6e3dac304ef935cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:53:5d:a2:97:3e:f5:14:bb:0c:b5:d5:9c:
8f:02:7d:53:3a:93:fb:37:5a:19:ee:40:f5:9f:46:
e6:39:3a:0d:08:16:05:60:07:93:00:25:65:e7:9e:
62:35:12:2c:67:8c:b6:02:91:6e:77:7b:5a:51:44:
dc:1a:51:91:a7:fe:53:4c:36:7c:22:61:4c:27:f6:
69:1d:84:e0:59:8d:12:df:16:74:55:01:9c:af:2f:
24:c4:e0:fe:89:b8:f2:4a:52:5d:f9:82:65:7f:4c:
6b:2c:43:e1:81:b6:be:30:6d:a4:d7:b6:e3:22:6e:
4f:12:3e:7d:d8:71:60:26:eb:75:da:d1:a5:4c:c1:
f2:54:44:42:b3:50:20:af:e1:01:fe:e0:7c:5b:90:
88:97:4c:13:1c:98:89:01:f6:a0:9e:ac:c4:3a:3a:
df:4d:3e:d6:58:8e:be:b5:bb:22:5b:cc:df:b0:21:
e9:b6:b4:43:f9:1f:2e:60:88:c3:df:77:9f:07:5e:
a8:dd:00:0d:e6:04:67:39:f0:78:a1:b5:37:88:03:
57:54:4c:a3:2a:dc:6a:42:12:81:5d:8a:63:bb:46:
18:80:d4:95:bb:fc:dd:00:30:a9:27:c3:ea:5d:e4:
1c:79:ec:7f:da:88:4c:2f:32:18:46:f6:35:51:d0:
6e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:9A:4D:7C:8D:D2:4D:49:B7:19:9B:6E:3D:AC:30:4E:F9:35:CC
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b0:ac:1b:19:ce:a9:57:47:18:6f:4f:36:45:ba:e5:b4:28:
ee:9f:a1:13:09:00:88:89:c7:0d:07:35:a1:4e:a8:dc:00:de:
cc:32:67:5b:2e:71:80:70:02:bd:c4:a6:4b:b6:57:2a:e2:04:
54:73:40:97:1c:d2:e4:97:b0:18:ef:3a:fd:46:97:89:64:e8:
99:64:28:e9:82:bf:32:98:4c:38:45:de:f2:5a:8f:57:07:dc:
e6:87:24:ba:0a:d9:2d:11:a1:e4:a9:d1:3b:c3:16:08:2b:be:
22:d7:24:98:6f:56:15:bc:40:f8:ed:41:ab:12:fb:b4:8c:66:
2a:b4:21:be:4c:8b:9a:c1:d2:2e:75:fc:1c:54:e6:c7:b3:3f:
ed:0a:90:f4:48:ae:8f:06:99:4a:0f:47:a7:97:90:33:8f:44:
0d:06:a7:00:d8:fd:5e:29:11:f2:20:9a:54:46:d7:41:fe:d0:
77:b0:c4:9e:58:ef:9b:9d:af:ca:a9:b4:71:ab:7f:33:a7:05:
b1:92:8d:fa:7a:cf:60:fc:a8:24:3a:78:3c:81:7e:9d:d9:c5:
ea:b5:3b:db:21:29:19:54:65:44:4c:54:a4:35:a2:55:40:20:
46:ac:72:c0:e3:29:1e:72:82:b0:96:59:5a:e6:5a:af:0a:47:
0b:0d:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:55 2025 by rpki-client