Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: 4r+IneDfd/iTaLo6RxE6AH+SQecXzBXrVHsDexLlEEU=
Subject key identifier: 77:47:18:8C:4A:B9:40:F9:69:50:91:68:97:16:97:B1:11:8D:F2:5A
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 0194BCA9EA9680CD3366D4226372EF19D06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: Ik7YHWJfwtKpsQ92rAG03WWUNTKlqwEFl+LdnMYFgc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ea:96:80:cd:33:66:d4:22:63:72:ef:19:d0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=7747188c4ab940f969509168971697b1118df25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:19:aa:82:7d:98:51:0f:f8:9c:f4:4e:ce:
cf:4a:fe:a7:e7:30:43:2f:ed:fe:53:b9:29:f4:59:
b3:d6:6a:3b:eb:4d:d9:08:4b:07:8c:d6:a0:d2:fc:
45:f7:04:7e:48:e9:ff:06:9f:f9:cd:60:fa:30:e5:
ee:72:db:a6:b9:84:dd:12:94:11:0d:aa:5e:b5:6a:
36:cd:b0:23:49:af:11:29:78:19:b1:49:34:4f:d2:
6f:fd:a2:c2:32:24:5c:d3:6f:bf:7c:0c:b7:10:b7:
6b:75:c1:bf:c2:0b:fe:4a:35:a8:b9:41:6f:7b:04:
56:7f:56:99:6c:aa:14:74:bf:c1:61:13:d3:dc:43:
6a:1a:1e:53:ad:a4:46:cc:48:60:c1:97:0c:93:0f:
37:25:92:ec:89:80:f3:36:1d:f6:0b:f5:04:98:bc:
89:3c:3f:90:aa:9f:dc:8b:55:5d:27:b0:f4:e0:8e:
e2:7d:1a:60:7d:f7:a5:cd:fa:2e:04:98:f8:7b:27:
f1:8b:54:0d:b0:8b:9c:94:3d:42:75:e8:7d:37:1e:
16:e9:14:45:0e:fe:07:2d:a6:0e:ba:0d:bb:10:1f:
35:69:f9:92:61:d2:cb:1a:a0:68:17:6c:af:49:41:
99:1e:92:fd:40:bf:c7:6a:62:8a:bb:e3:9e:ef:7f:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:47:18:8C:4A:B9:40:F9:69:50:91:68:97:16:97:B1:11:8D:F2:5A
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:aa:3b:f8:2d:e6:21:fa:bf:fe:1f:15:67:a9:91:b7:39:80:
4e:b4:31:87:b7:ad:fb:ed:6e:bb:30:12:3c:1c:f1:05:02:0f:
ea:c7:1f:36:92:91:c8:12:94:99:cc:5f:e2:3a:bd:3d:25:74:
d3:62:00:d8:17:93:c2:65:43:7f:15:00:2c:8f:7c:26:07:42:
5e:e8:a4:02:05:4b:97:6f:c5:70:58:0e:d0:35:5e:49:11:09:
ef:a5:e0:43:36:df:87:24:54:80:e1:58:4d:4c:e1:8b:02:7d:
63:6c:48:9e:5e:70:7a:55:03:74:6b:67:c7:eb:01:5c:52:7e:
c5:8c:f1:88:6f:12:5b:84:81:17:79:08:43:4b:a7:8e:e8:45:
36:99:3e:2a:9a:f0:01:9e:ee:35:e8:8e:d6:29:47:6f:5b:47:
56:ae:69:12:2f:2f:c6:a3:3c:c1:1f:86:f9:4d:66:d5:24:74:
3c:66:14:ff:9c:2f:09:53:3d:22:b7:5e:f5:7b:39:58:ad:9b:
1f:58:77:ef:26:fa:50:54:22:33:1f:68:1d:00:50:30:14:43:
9b:ac:0f:d2:d0:05:6b:bd:85:cd:d9:dd:76:14:53:ba:6c:c0:
33:18:84:0f:8d:72:2d:1d:93:0d:8a:75:34:b3:c9:3b:09:f1:
cb:71:ee:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:42 2025 by rpki-client