Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: fmb46mrEO5UIIVgF828CeM5cvImH1YR15vktKgleRbY=
Subject key identifier: B4:77:E0:C1:43:09:63:AE:2E:18:FD:58:AA:5A:60:28:C0:B2:B1:73
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 0194BC3C7593CEA961A4361A5DDFE1A29733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: yD5rbAdhHIWZSuCDA8Ej7dg/uXgMWnTjOXNP2qO2Vf4=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:75:93:ce:a9:61:a4:36:1a:5d:df:e1:a2:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=b477e0c1430963ae2e18fd58aa5a6028c0b2b173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:be:b2:32:7a:87:87:5f:b3:5e:7e:b2:17:
33:ed:6e:7f:05:ad:10:6d:2d:ef:5a:e3:df:4c:84:
16:80:c8:d4:c7:2c:3b:a2:18:33:36:89:14:8a:d6:
c6:7f:f1:75:a6:31:20:a4:63:0e:17:4c:99:07:2b:
75:8e:d7:6b:6d:14:2f:7d:9d:33:1d:31:bd:58:79:
c9:19:94:dd:5a:09:e8:99:09:1c:78:c2:80:48:16:
ef:73:95:bb:0b:ed:d6:02:35:d7:32:6c:92:10:d3:
0a:08:6e:77:fd:e6:f7:b0:c4:e6:6e:b4:38:2b:e2:
48:58:07:51:0f:2a:76:36:ea:0c:75:73:65:b8:66:
19:3a:88:f9:5e:51:dc:2c:16:d4:77:1f:dd:b8:f1:
2d:71:1a:1c:38:6c:b4:91:38:a8:58:41:e6:83:2b:
76:22:ca:2d:b3:df:19:fe:6e:f1:46:27:17:99:f9:
3b:10:c1:31:27:2d:04:ee:71:2f:d7:74:1c:07:b1:
3d:9f:56:60:64:a2:07:ee:63:ce:d5:73:12:af:68:
75:2f:77:83:23:73:e7:c6:3e:0b:2d:15:bf:5f:94:
d9:1d:69:af:55:82:d4:f0:38:70:08:59:aa:93:31:
ee:db:1f:30:e5:e1:8d:21:2d:87:b2:c2:59:33:ae:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:77:E0:C1:43:09:63:AE:2E:18:FD:58:AA:5A:60:28:C0:B2:B1:73
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:fe:72:6f:93:a0:3d:e0:b2:d4:ab:12:b0:eb:79:fd:f7:
df:cb:65:58:79:4e:00:d0:4c:b3:ac:db:1b:d4:22:b6:27:98:
2a:fc:dc:eb:04:fd:b5:35:41:2d:1b:7c:3e:2c:fa:4e:6e:51:
b4:63:c3:7f:cc:0a:09:69:16:fc:f8:95:9e:0e:9e:ab:62:af:
1f:c5:ee:8b:78:1c:95:e1:4c:5f:3b:15:ba:70:f2:56:ed:01:
e2:95:52:06:e7:d7:3d:31:2a:cd:eb:54:f4:b2:2b:40:22:ad:
06:c9:ab:c5:9b:38:04:66:10:a6:77:9b:41:49:14:aa:e7:f2:
49:b8:ae:1d:da:5f:8c:38:68:32:3d:8f:c5:42:77:c4:af:e3:
9d:a7:b6:53:de:0c:78:e5:ca:c6:8c:8c:bd:49:a5:2f:77:7a:
e8:bf:61:ed:4a:b5:2c:dc:26:52:ec:d0:78:59:8c:68:f9:d1:
da:09:67:0f:6f:6d:34:37:40:63:11:d8:e8:f7:63:27:70:f8:
27:bf:23:bb:09:8b:56:06:2b:ab:24:b0:37:d7:39:4e:78:51:
ad:b6:ca:59:6e:53:1d:1e:fb:4b:a4:ca:62:c9:74:5c:1f:50:
f0:62:d6:29:72:c5:22:36:39:fd:2e:a9:07:10:ec:fe:7a:e7:
a6:31:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:36 2025 by rpki-client