Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
File: ieIaK4oluXG9t0GgquMlmSMEGU4.mft (raw, json)
Hash identifier: I4GTac9QZGobBmutq+ybr0tnr0F2pGUFfco+YDxZteE=
Subject key identifier: CE:B6:26:C9:36:ED:3C:F6:79:64:3B:A2:07:CB:83:45:4E:B3:9D:01
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 0194BC3C3F1B0B105E65B58E2281EC4366FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 1jV2xqilASPXHu5Grr3x0X0ICp8.roa (hash: 8Jrll8bHg095WBKUtpaKs7HT5xMgUtd6Q0GjYhqobro=)
2: JHsea8ldAse1CeGI2SumLCiOnDc.roa (hash: VKEuoq4G9HXNJupJnEjoPZw8yd6ADu3vGNugbT7oOUM=)
3: R-7dmcw3c20-6mUEaV6t8HKtYR8.roa (hash: 0JAMHSeaJgJlarzLGa/qydN1dZySJoZZ59FCJPt3tQ0=)
4: ieIaK4oluXG9t0GgquMlmSMEGU4.crl (hash: EgYpJwa3kPiiXBTurIKjw4CapvZmFZIs1NTU+NYlLH4=)
5: zV9LNmGcv52EaJiYnvcEchkoyS4.roa (hash: 7+tk5OKGsDgPRtMzzmdAb84WHEzjIJ3n9hyI8CnIig8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:1b:0b:10:5e:65:b5:8e:22:81:ec:43:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=ceb626c936ed3cf679643ba207cb83454eb39d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:a4:71:3d:cf:b3:81:a6:fa:9c:58:a0:80:
76:69:89:74:8d:e0:1b:bc:7c:fd:ce:9b:f2:1e:ee:
5e:01:b9:b7:63:37:69:52:41:37:b8:0d:11:66:52:
62:89:ba:dc:1f:08:ed:2a:20:ef:43:40:c9:03:b8:
27:0b:fe:8c:cb:1b:93:24:e5:ad:39:f3:11:29:03:
01:8a:5b:be:3d:db:f4:0b:19:ca:4c:7a:ea:e3:82:
42:09:d7:bf:ba:cf:94:9c:66:ec:48:c0:ed:26:40:
64:8c:45:4b:08:5c:34:22:9f:50:07:9b:b3:31:65:
ac:12:d3:85:d4:42:a0:2a:5c:e8:b0:1b:f3:ef:75:
32:36:11:07:0e:5d:0b:bf:c6:92:37:5c:08:82:11:
a4:0f:a3:d4:44:d3:fb:44:01:59:14:34:b6:2c:a4:
a6:ce:0b:a2:ef:e0:6d:a0:2d:92:1b:e5:b0:6d:84:
98:e9:51:5b:0c:b2:a4:ec:9c:43:7a:f2:2c:3c:6d:
8e:e8:18:02:96:ca:16:69:f4:ab:79:1a:cf:b0:a1:
0f:e5:4c:05:e7:93:bb:b5:00:ac:06:b2:76:6e:a7:
4b:a9:5e:93:d8:b8:cf:e0:73:17:90:38:7c:fd:f9:
b4:39:5c:f2:46:37:45:21:58:88:36:e4:15:ae:f0:
34:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:26:C9:36:ED:3C:F6:79:64:3B:A2:07:CB:83:45:4E:B3:9D:01
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:ee:90:40:9a:19:bf:4c:42:52:2f:1a:51:94:84:2d:ed:
8b:a6:6f:81:39:38:59:9d:9e:db:08:e2:8b:3c:13:f2:fd:09:
fa:83:13:e7:3d:2b:fd:9e:d9:58:d8:80:e5:7c:81:37:bf:d3:
85:62:02:42:eb:90:2b:be:e7:23:ad:45:35:de:cc:da:83:27:
34:a3:54:c1:0d:91:79:20:12:e1:fc:9c:e7:7f:b0:41:af:91:
29:29:90:18:e7:68:6a:16:9d:0b:2d:4a:e3:e1:4e:d3:07:fb:
95:1d:73:5c:a5:31:cb:df:9e:c6:ad:43:50:5a:12:bb:13:61:
f3:01:a5:82:3d:52:1d:0c:36:d1:d3:d1:fc:2a:60:b2:55:34:
53:a7:d4:5a:01:9c:b4:53:f8:dd:be:c6:6a:f8:36:92:32:43:
66:c3:6a:98:7e:83:22:34:ed:b1:d5:7d:4a:26:a2:04:3d:58:
a7:2c:1c:c1:c0:1a:1d:f9:14:75:30:b7:82:32:83:da:62:95:
96:3b:93:ee:52:ce:c0:48:03:8a:4f:88:ce:3b:87:c6:81:51:
f2:44:87:cf:2f:91:08:00:b4:e6:b2:c5:63:bf:41:0e:78:56:
52:2c:ab:c5:51:5c:4c:c3:95:ed:69:81:21:71:f7:35:0e:8e:
7f:b8:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:43 2025 by rpki-client