Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier: mG4IjsESJ2p8BHrlR2N6MU2FaI1MVWVy1Q019cK6YwM=
Subject key identifier: 9F:E2:D4:C7:06:99:0F:BC:3E:C8:57:A6:29:48:82:2F:B2:FD:16:85
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer: /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial: 0194BCE09B8ACC52115A59D1E6DB899152A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: f1vefkOjCHBuDocFZePwXzsbWaxHRciL7aEpmovx4rA=)
2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:8a:cc:52:11:5a:59:d1:e6:db:89:91:52:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=9fe2d4c706990fbc3ec857a62948822fb2fd1685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:3b:d8:5f:27:12:71:60:5e:02:d2:de:62:
d4:c9:43:a8:9a:9d:74:15:89:5b:49:42:a8:4d:65:
e6:15:31:0f:39:43:79:7e:35:01:b8:2d:fa:e1:0c:
e7:26:f3:10:01:b3:1f:60:49:6d:2f:49:0f:08:6a:
02:04:c8:a7:03:62:39:d4:c9:a4:b1:5f:8d:4d:9a:
ea:7a:da:2d:59:03:42:57:b9:93:20:22:30:c1:59:
93:5a:eb:f5:ec:96:4f:9b:7d:5f:a3:fa:83:b0:c2:
9f:34:89:8a:d8:95:9b:1c:a8:7d:6e:77:9c:ee:6f:
bb:ce:c7:e3:b6:a8:9c:7d:ab:84:9f:fa:38:b8:1e:
32:16:62:ab:eb:c1:d2:7b:75:0a:af:74:d6:31:12:
52:28:11:3b:64:23:22:d0:12:f3:3b:2e:e7:6e:83:
2b:c0:a1:89:38:2a:68:51:a8:4d:b3:a2:f6:42:20:
dd:86:78:f9:d0:44:66:5b:c2:78:ef:0b:33:96:18:
ef:ab:46:5f:14:90:4d:d6:c4:1b:3f:df:e2:7b:3b:
39:62:1a:5d:04:29:7b:e2:69:81:e8:a6:26:32:ce:
67:8b:9a:13:c2:e5:c6:a6:9b:9a:44:cb:59:5a:50:
bc:67:43:f9:2b:e3:e8:96:67:10:d7:a2:e9:53:67:
ba:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E2:D4:C7:06:99:0F:BC:3E:C8:57:A6:29:48:82:2F:B2:FD:16:85
X509v3 Authority Key Identifier:
keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:54:31:e8:13:a0:20:84:24:0d:08:09:c8:31:9e:89:cb:
6a:ac:67:33:2e:40:5f:dd:68:96:7d:bc:55:1d:03:c5:31:cc:
20:3f:61:38:5b:be:d4:5e:df:7b:53:27:01:bb:05:a8:5e:1e:
0e:d3:c4:97:dd:63:e1:01:81:93:86:c5:74:fd:f5:f4:50:93:
cc:24:64:a1:67:65:69:6c:bd:4e:88:2d:d0:7e:92:6d:3c:c2:
62:9b:e4:a8:1d:51:db:bd:9e:5d:f7:26:86:17:8c:eb:f2:ed:
07:f7:1d:73:d2:71:a2:56:35:95:da:e0:e3:90:56:af:b9:58:
43:93:c3:a2:e3:27:2c:a2:c0:0d:8e:67:9c:15:53:ad:b8:a7:
77:56:b4:cc:46:2d:8e:15:3b:a6:23:b2:10:bd:12:b2:85:cf:
12:46:6f:55:c5:40:4d:94:65:b1:33:5f:0c:45:cc:18:a1:64:
9c:e9:13:b0:08:b5:e6:ed:06:97:e9:31:d7:c2:db:fe:66:27:
4c:0c:ff:1c:7b:65:7b:f2:b8:63:9f:ab:b5:0b:ae:48:5c:5c:
09:cb:67:bc:de:4d:10:8e:47:fe:11:b2:a7:bb:87:19:be:2b:
90:67:fe:98:9c:1a:e5:d0:0c:18:9e:d1:4b:fd:82:e1:a0:74:
c7:72:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:56 2025 by rpki-client