Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File: iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier: JvO76mam7dIYe4flaCiMcgaVFJME3/+Bqwo5AZcRIwQ=
Subject key identifier: B2:F3:42:28:9E:04:72:1F:5A:F8:00:BB:5C:4C:81:1D:1B:F5:19:AE
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer: /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial: 0194BCAA2CD3FE608517BF742FCA93A4F440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number: 2A
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: OCYkPImwnimwz8s4rkU4_ZSSVP4.roa (hash: IT8FmqKb7k4tTBmkTpzEjVWks2g+luw2EP1CzS8y1xM=)
2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: Hm4gZC3LHcZwlApj6QtIuEo/KYcxc1ehcg+Wi9MWZSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2c:d3:fe:60:85:17:bf:74:2f:ca:93:a4:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=b2f342289e04721f5af800bb5c4c811d1bf519ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:4f:3e:99:ce:47:87:aa:15:3c:3a:a9:12:
a8:0d:76:21:e4:4f:3a:21:4b:38:e1:0e:cf:b4:59:
0d:da:bf:f0:3b:6c:5c:48:ce:fe:b1:8a:2c:c0:01:
5b:4d:2f:12:1c:ae:69:16:a5:a5:b4:f3:03:4d:c4:
69:a2:68:61:78:55:50:f4:a4:df:70:5d:15:10:66:
48:c6:72:e7:5f:a4:77:19:da:1a:42:88:e7:77:18:
ea:55:93:e1:c9:ed:ed:fa:11:cf:36:c2:0a:a0:d1:
b8:e3:30:e1:be:a1:c5:27:f9:bb:5d:34:74:ce:4f:
b3:62:06:0c:4d:c2:4d:e9:54:1e:b2:d7:fe:67:80:
7a:c8:71:fd:fe:35:57:b5:12:29:e9:aa:62:5c:04:
34:b1:9b:e9:da:65:8f:2b:09:9a:23:b3:4f:07:27:
08:d6:f2:07:ae:0f:6c:32:a6:b8:6c:a8:05:c4:ff:
b6:fc:bc:bd:f0:33:43:0c:d3:a0:cc:d8:25:c9:0f:
f5:30:e4:8d:c2:7a:86:15:86:11:ec:d3:fc:e4:3b:
81:1b:49:b4:62:e1:12:e6:55:6b:8c:8e:38:3e:54:
52:91:76:e0:4e:91:81:a2:ed:d3:a0:55:34:7d:26:
f8:38:16:ef:bc:09:fe:15:ca:6d:30:fc:24:7a:cc:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F3:42:28:9E:04:72:1F:5A:F8:00:BB:5C:4C:81:1D:1B:F5:19:AE
X509v3 Authority Key Identifier:
keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:17:c9:c7:bd:71:6d:fc:96:48:ef:4f:80:e3:2d:59:4a:ea:
ee:71:5d:03:b0:03:e0:a6:e2:4a:12:86:a1:72:ce:36:78:11:
2f:ea:18:21:f6:3c:5b:4e:39:a7:6d:01:58:37:e3:03:bd:ba:
9d:7c:d4:a3:f0:dc:3e:5f:4a:0e:21:c8:3f:ed:d6:a7:9e:ee:
4b:14:00:72:b2:5a:2e:36:a5:b5:43:b3:c6:ee:c0:f5:8c:f7:
8e:45:8c:88:19:7b:59:db:c0:8b:76:71:c9:9e:06:fe:f4:68:
ab:37:03:3b:ed:cf:fd:de:e8:84:10:07:51:20:27:f6:06:21:
4c:9e:89:a7:46:1d:fc:37:80:7c:b7:f3:e8:a3:f5:a5:74:71:
18:d0:98:b6:1d:00:a7:f0:cf:99:93:27:99:ce:13:29:5f:71:
4d:fa:e5:fc:b0:c6:c8:e1:a1:9f:ea:d0:1a:9d:ec:c6:8e:0e:
7b:48:bb:89:d7:ae:73:55:21:9c:aa:a6:50:fa:4c:17:78:91:
04:b8:d2:c9:c6:b4:8e:0b:f8:97:12:d9:1f:c7:2e:14:48:be:
39:b6:45:a1:74:6b:04:62:d7:bc:21:75:4f:bd:6f:e8:da:4b:
eb:cd:25:27:e3:28:ec:cd:47:52:7d:ec:f0:c6:af:17:1d:93:
f4:4b:10:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:26 2025 by rpki-client