Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
File: iij_MQ2n34MJz6tNz5ojWEK2CHI.mft (raw, json)
Hash identifier: /20UnXO+l1KgDPVaShXNnaJqzNLQKwrnld12vOEuktM=
Subject key identifier: E1:88:08:64:49:E9:7C:CE:23:C8:8F:83:B7:95:E9:8E:A9:0A:FE:DE
Authority key identifier: 8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
Certificate issuer: /CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Certificate serial: 0194BC72BFD721C06E6CD9B58FDD609AA6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
Manifest number: 0218
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 2jBpGTk2ogY4V-pzJnCImL6EwNA.roa (hash: YyHHsV3O+5v5axtSYHO7phMGXdaESVAHbKKQJf3jg5c=)
2: iij_MQ2n34MJz6tNz5ojWEK2CHI.crl (hash: YH0+MQjdzMHfsQeC6tx55LvdNwIYA/n+uLwUfyOSopk=)
3: wGH7RXqHeAFJhSqqiUIKLWLMppk.roa (hash: U9kx/pm8Ri8hF/pstRPu9ajTlV//o1HJNh3HJey1hVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:d7:21:c0:6e:6c:d9:b5:8f:dd:60:9a:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a28ff310da7df8309cfab4dcf9a235842b60872
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=e188086449e97cce23c88f83b795e98ea90afede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:6f:aa:65:e3:80:18:ef:23:72:9b:7e:0e:
86:18:8b:2c:28:ba:7f:1a:2f:04:94:b6:94:a1:14:
60:64:6a:5f:18:37:63:de:56:20:35:21:a4:2d:eb:
b1:a5:30:68:cd:ff:be:41:c4:29:5b:1c:7a:2b:b8:
7c:70:8f:09:c6:dc:88:cc:a1:f6:80:9a:65:19:bd:
fe:59:64:fa:2e:71:46:51:75:f3:e8:f2:df:a6:5b:
63:5e:a3:52:53:2f:0b:42:9a:63:d8:9e:d2:ff:fa:
5c:5f:1c:a1:5e:9c:10:81:e5:9d:b0:68:bd:9b:c3:
54:95:41:f0:7a:1e:9b:31:af:d1:53:d8:85:98:de:
76:22:5f:d6:7a:86:fa:84:e9:45:9c:5b:3f:a5:28:
6e:c0:7f:15:79:79:37:2f:bf:a3:6b:a0:0a:a3:a6:
87:e5:4b:3c:4c:3f:3b:62:ff:1c:0f:aa:44:b6:92:
d8:89:d1:d8:f9:63:cd:a2:95:ae:aa:d9:da:46:04:
83:e2:2a:ce:16:04:6f:03:c2:37:b7:94:71:5e:fd:
25:03:75:f6:04:6f:4a:8a:62:a9:62:d7:db:20:14:
3f:41:31:ee:da:c6:57:38:34:de:34:c0:a2:97:a7:
44:46:2e:b2:3b:3b:03:f8:1e:ff:ef:a8:10:60:f2:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:08:64:49:E9:7C:CE:23:C8:8F:83:B7:95:E9:8E:A9:0A:FE:DE
X509v3 Authority Key Identifier:
keyid:8A:28:FF:31:0D:A7:DF:83:09:CF:AB:4D:CF:9A:23:58:42:B6:08:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iij_MQ2n34MJz6tNz5ojWEK2CHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a5d286-8670-47e4-97b4-24cf8a61d7e8/1/iij_MQ2n34MJz6tNz5ojWEK2CHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6c:dc:b3:70:79:21:47:be:ea:cb:14:b9:98:09:0f:2f:eb:
15:c5:6c:8d:72:2f:4e:83:4f:fa:7c:e3:1b:ea:1d:c4:49:c7:
7b:4a:da:af:8c:34:a1:9a:cc:f7:f8:74:06:07:9b:92:70:ab:
7b:68:65:87:e7:89:0b:af:e7:e5:56:a2:ec:51:15:ea:f4:58:
a1:e3:e8:82:c5:e0:24:0f:f2:97:f8:d6:b9:e9:1d:91:30:cf:
43:ae:39:82:25:3d:19:c9:9b:39:dc:63:4a:cb:51:53:22:e1:
7c:97:eb:d5:96:d7:dc:5e:f1:7c:66:27:6d:5f:d8:fa:d6:97:
77:39:99:bb:d6:7b:fa:6e:88:72:c8:b8:cb:21:64:d5:e5:6b:
24:30:71:13:f8:b7:51:86:28:42:32:b0:67:05:52:fd:65:83:
e2:dd:80:eb:fe:60:26:92:50:76:05:8f:87:55:99:2c:45:2e:
cc:f6:cd:cb:42:b0:2b:09:93:1a:96:5a:28:9f:21:5f:f6:0b:
c4:c1:8f:9b:cf:26:7b:38:1c:1c:e8:93:88:d2:0b:38:04:60:
3e:7b:95:a7:7a:48:17:f0:e4:31:33:77:15:dc:3f:63:3c:6f:
d2:bf:75:6f:c8:e7:14:4d:4f:29:4a:77:46:6e:f0:c3:1e:65:
9f:a6:7e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:14 2025 by rpki-client