Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: q8HVQy7qWDkdWmAmFQbeRbJx8yy/x50vu1VY4jt1xMU=
Subject key identifier: 5F:02:11:22:A6:69:51:EB:AD:4D:50:8F:7B:D2:E2:C1:DA:C3:F5:0A
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 0194BD4E8FCBD9BED7B219B7716323EBAC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: o+R5oxy8UAWpVOg/dVTjpaGZQwWjdoQtJyXuwr/1nts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:cb:d9:be:d7:b2:19:b7:71:63:23:eb:ac:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=5f021122a66951ebad4d508f7bd2e2c1dac3f50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:cc:46:1d:ea:b7:85:89:6f:f4:35:9c:f0:
96:43:9a:25:80:3c:90:72:01:33:2c:f8:7f:c8:db:
71:25:c9:9e:93:13:00:07:64:78:10:df:9d:64:da:
35:12:66:75:5d:53:73:09:f2:5f:54:71:81:12:3a:
7c:ec:99:a2:16:8f:ab:46:e2:39:61:63:ab:38:82:
42:f6:70:65:ef:8a:b2:be:e0:98:1e:95:e8:98:6b:
5d:91:62:5f:b6:b5:fc:41:6e:af:49:8b:4a:a8:bb:
34:22:7c:a4:d3:df:d9:2a:fb:87:3c:7e:2c:5b:2b:
f3:36:2b:92:37:8d:90:6e:d1:41:8f:6b:24:ce:fc:
ea:b8:57:4a:25:8d:12:06:85:be:c5:01:99:4f:63:
52:20:4b:54:f9:29:ed:63:4b:96:94:1f:9d:24:ea:
23:4b:fc:35:ed:2c:b4:66:74:66:39:84:c2:9e:5c:
e3:b6:86:38:bb:0d:85:ae:07:5a:ac:17:20:37:fb:
ce:20:c0:29:fa:2d:ac:6d:fe:f6:38:5d:33:36:ed:
54:dc:99:51:48:e5:22:65:ee:83:e3:de:27:90:50:
79:57:0c:ae:43:ed:62:f7:a5:97:bf:56:cc:67:47:
16:9d:f5:60:05:0b:57:4f:76:0b:7c:be:47:aa:14:
67:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:11:22:A6:69:51:EB:AD:4D:50:8F:7B:D2:E2:C1:DA:C3:F5:0A
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:07:58:f2:f6:c5:d0:83:a0:75:7a:b5:9e:59:e9:4f:65:e6:
15:d7:2e:d6:20:27:72:1a:ef:c9:7e:e1:b5:35:16:08:93:cb:
5d:d0:27:00:3f:ad:9e:59:cc:1d:c3:c2:a9:62:d9:49:03:d5:
a5:a1:6a:65:3e:17:74:59:1e:59:e3:16:5a:d8:c8:5b:f6:5e:
7b:d1:a5:1b:ab:8c:cf:e5:ee:28:cc:7a:4d:47:25:4d:ef:2e:
73:38:07:2f:95:3a:78:04:0f:bb:53:ef:2b:7c:33:a3:eb:56:
0f:65:86:58:0d:5d:2a:c8:a1:16:8d:87:61:b5:f8:3d:02:09:
40:9a:62:c6:72:d1:6f:50:69:3c:57:45:86:1a:7b:4f:99:5b:
3b:f3:ef:15:36:4c:b5:49:40:c9:1d:38:82:ef:34:b0:27:93:
a1:ab:96:eb:02:ba:7b:4a:73:48:1b:fa:23:3a:42:74:f2:b3:
bf:7a:0c:fa:43:28:96:1f:e1:27:db:d5:ab:26:b0:1c:29:2f:
a7:c2:05:5b:7a:31:76:4c:35:da:e2:84:b1:96:eb:b1:4a:1f:
82:b9:a8:92:34:66:7d:4c:5a:c5:60:86:07:90:5d:ee:b5:bd:
0b:cf:d1:04:7d:1a:33:c7:20:0b:2f:0e:50:a1:e4:cc:8d:92:
af:51:cb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:59 2025 by rpki-client