Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: UKmAZVlQjqpeki6jdNiWkEM1dqTb/Aj3Wi61xdRv7JA=
Subject key identifier: 74:FF:0D:D7:3D:D8:44:E7:7C:61:5F:30:72:49:3C:BC:2F:86:5B:73
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0194BC3C6BCC4E90C8D3326602F15938A663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1437
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: JaZNhOsEOXmZQSE0e/ekazgV6tOlHX5X9H0zV4HafRE=)
3: PxoTHEdjjpKU7nFnIp_dVD-FKVs.roa (hash: qS6lJqb4wx7qjtbMuBVvEV9SkrI1ddneyAf2i6qSLdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6b:cc:4e:90:c8:d3:32:66:02:f1:59:38:a6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=74ff0dd73dd844e77c615f3072493cbc2f865b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:46:56:3d:da:bf:59:5d:10:e6:b9:ba:ce:fb:
3a:47:b1:f7:5e:0f:cc:6d:00:15:e9:42:29:bd:fd:
d8:17:62:f9:fe:28:92:d0:52:ae:ee:2d:37:1b:72:
25:10:67:dd:8c:02:83:74:11:4e:a7:4e:a4:d2:e0:
48:ce:04:3a:f2:e4:b0:74:4d:20:a6:39:6b:18:e6:
65:20:b1:b1:67:50:6e:b1:56:05:f0:3d:c5:79:46:
bd:13:f2:4c:d3:5d:b6:86:c5:c7:19:e3:ce:bc:bb:
78:55:a4:0c:c1:85:25:c6:85:c2:63:a9:a3:a7:97:
a4:59:a5:40:18:52:01:a7:01:b9:29:7e:b1:55:05:
32:9c:0b:b5:e5:89:01:9f:b9:38:3d:53:65:1f:b9:
2a:76:ca:6d:23:bc:12:e1:e4:b7:b2:39:4f:eb:1e:
9b:db:1e:6f:70:f4:2d:92:22:26:47:97:a5:7f:4d:
9d:ba:c5:10:7d:57:b3:e2:28:34:ef:96:ee:75:49:
86:3e:d0:ad:4e:20:c6:cc:bb:c2:43:99:36:5b:33:
20:80:b8:3f:f6:95:81:fe:e4:e3:81:8b:36:54:fb:
46:6d:de:7d:bd:9a:17:09:61:9b:b7:39:eb:3a:cf:
1a:42:34:05:52:01:87:97:5c:c0:19:46:e2:43:d2:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:0D:D7:3D:D8:44:E7:7C:61:5F:30:72:49:3C:BC:2F:86:5B:73
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e8:f1:c4:1f:9d:a4:bf:79:19:5e:be:f0:ca:7c:82:4b:76:
d2:9c:50:83:74:01:f9:0a:6f:9b:7e:fa:de:82:c6:27:3f:95:
56:18:be:0d:65:f9:a6:a1:35:40:94:d8:82:fe:05:b4:f9:cc:
44:1b:41:99:8d:19:71:fc:4f:46:fb:d6:e2:06:0e:e1:9d:4d:
2a:ee:1e:e0:98:ed:34:9b:05:43:c9:db:5e:36:8c:7b:b7:49:
be:96:3e:d1:80:86:f8:e1:fe:32:51:12:0f:ab:17:ac:e2:76:
af:94:d3:e2:85:69:a7:5f:4d:6d:2b:a5:9d:c3:31:4e:ad:a2:
20:a7:5f:59:3f:af:bc:5b:3e:64:83:48:70:70:4c:e5:e2:48:
bc:31:cd:0d:3d:15:2f:ff:6f:31:9a:0f:09:cb:65:c3:bc:c2:
da:4a:0a:e9:78:cd:e6:37:96:c4:55:82:5d:0b:f1:fc:20:12:
b7:81:95:cb:ab:86:a4:76:97:80:fc:26:84:99:a1:8c:d8:d4:
86:cf:8b:6c:3d:62:2d:2f:5e:63:9e:16:7c:71:1b:3a:a7:7c:
49:3c:9a:fa:93:eb:6d:a7:e6:12:7a:9f:41:b4:c8:1c:03:b4:
47:22:85:78:4f:15:f3:eb:61:e1:28:18:b3:25:42:a7:c1:e5:
9e:52:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:28 2025 by rpki-client