Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File: iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier: 40deQ2+pQ10SI2/Xm0En+TSeoL4vpuMsavZGB5r30Bk=
Subject key identifier: 66:AE:82:96:DA:0B:B6:0B:7A:B1:39:D2:92:73:EB:20:48:30:50:0B
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 0194BD85966A102DA79E760F77A3EFEBF603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: dsViUGDNncs2QKJMXPgOTO14VLH0PwWS5ZSP64xHwX0=)
2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:6a:10:2d:a7:9e:76:0f:77:a3:ef:eb:f6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=66ae8296da0bb60b7ab139d29273eb204830500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:d2:48:0a:85:61:f3:d8:bf:7f:0f:7b:57:
2c:82:64:78:ce:66:df:2a:f0:b5:83:49:ec:24:88:
f5:e6:c6:58:c2:d5:95:f6:fb:8d:b5:fd:6d:d2:43:
7d:c9:c8:3e:66:6e:43:13:c4:fb:08:1c:21:e9:82:
4d:f1:f6:91:d8:f2:9e:4a:72:b5:a5:42:28:23:94:
0f:0c:19:7e:9b:d5:4f:b0:e0:84:d7:e5:97:b3:e8:
77:18:33:ef:5b:c8:dc:9d:ef:86:4b:39:dc:f1:04:
26:b5:e0:fe:17:1b:7a:d8:b7:28:ff:28:d0:4c:a6:
f8:6b:0f:42:34:eb:ee:ca:8f:7e:fa:2b:cc:47:49:
07:46:37:8a:17:84:dd:d5:4e:b2:52:ec:5e:1d:e6:
1c:f0:c1:14:29:1f:6b:c6:10:d1:1c:ba:06:e8:a7:
23:27:19:6a:e8:fb:4b:a0:47:01:c2:89:f2:c2:6b:
b7:bd:ba:9a:43:76:9d:a2:3d:5d:58:40:d4:a9:5f:
3a:a3:ef:2d:25:0b:ce:a0:db:f8:53:97:a0:c2:d4:
7d:82:13:3c:a6:c2:6d:c8:51:39:47:57:07:51:c7:
6f:ee:0d:1a:9b:c1:d6:ff:9c:00:b8:28:e5:99:47:
38:c8:5f:98:47:ab:ba:cd:37:0f:61:12:c5:65:31:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:82:96:DA:0B:B6:0B:7A:B1:39:D2:92:73:EB:20:48:30:50:0B
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:01:2d:6e:16:af:55:f5:73:ab:48:ca:89:f7:e1:a2:0e:
17:80:d4:0e:67:df:55:22:d7:e1:2c:6f:44:44:a1:99:c0:a5:
16:66:0c:7a:6c:3f:08:72:89:11:53:6e:70:89:3b:29:a1:54:
0f:84:57:24:01:10:a2:6b:fd:2f:8c:d2:07:03:1d:84:73:eb:
e8:20:7c:8b:59:cb:63:12:71:89:90:7c:d3:6a:fd:be:d3:82:
12:ba:94:ef:7c:21:32:36:01:39:8f:00:be:b3:95:1e:11:4f:
42:1b:37:c6:33:04:cc:26:c5:c6:fc:f6:37:c1:e4:3b:4c:1a:
54:f5:26:00:27:53:d7:12:e2:29:3d:6e:9f:1c:b6:b6:a5:98:
d5:cc:cf:94:71:39:90:7f:e4:fb:6a:2c:3b:24:0d:b4:68:cc:
1a:e5:50:88:c8:9a:7c:1e:98:4c:2e:0f:c2:fe:1e:20:c5:21:
fb:1b:b0:5e:fe:54:a0:14:e9:12:87:7a:a9:35:d1:f9:db:df:
d5:6f:12:54:79:cc:92:06:f2:72:c8:1c:1c:06:35:12:22:f0:
42:2b:39:bf:da:6d:49:62:a7:c8:14:93:aa:cf:7c:3b:bd:fc:
f0:6d:ca:c6:b2:04:4e:44:2c:38:8f:90:92:de:08:b1:57:6f:
65:2a:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:36 2025 by rpki-client