Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
File: iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft (raw, json)
Hash identifier: geYmTv1U9R1SRBvNRUBjqYfw9XqayPn+jxiERD/HP7Y=
Subject key identifier: 36:8D:78:74:4A:BE:C8:DA:44:AF:D5:64:68:B4:E6:83:C1:70:FD:46
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 0194BC3C6D8499D6BDBAC597EAA072B6B3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
Manifest number: 4F
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl (hash: +dbkkaO1I7Uc18OqeXKiSbtxKYgOm7mDYHtA3R5WwsI=)
2: tUCrU1IYyKTeHFgwWPnOhupAFLs.roa (hash: iXh/inx+REdww29ghj8Pv8YnJ7SgvDrT4boXFVW4VlI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6d:84:99:d6:bd:ba:c5:97:ea:a0:72:b6:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=368d78744abec8da44afd56468b4e683c170fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:a1:9a:0f:dc:ff:61:5e:99:00:80:4e:06:
2d:eb:4b:04:7d:f6:ee:46:bd:78:d0:42:f8:78:cb:
bd:fd:a8:90:56:2a:aa:4d:14:61:90:bc:9a:de:ec:
e7:55:cd:df:b2:b6:4f:6f:9a:b2:9f:36:61:78:40:
11:ab:0f:b5:99:4d:3a:2a:6c:33:44:e9:06:30:0e:
ad:5c:bd:fa:49:78:0a:48:bd:25:94:46:8d:04:81:
8e:6b:93:f8:bb:9d:80:ce:10:82:ef:1c:37:06:27:
22:89:72:c9:77:58:1c:79:e2:3d:a6:c2:16:c5:0f:
a8:cd:ef:98:08:40:0b:d0:fa:8b:65:91:fe:7c:33:
56:a7:dd:c0:c2:2d:4f:2a:b0:0e:df:71:cd:58:21:
67:c4:50:15:9e:09:25:87:16:18:b6:28:58:b3:07:
76:bb:80:27:59:17:6a:da:cc:5f:80:bf:cd:bd:f7:
67:60:4c:22:12:66:2b:d7:b3:b4:d5:85:33:30:61:
e4:f3:b8:a9:6f:94:43:8e:62:17:38:63:74:3c:38:
76:dc:5a:3b:e2:a3:ae:01:e3:4c:17:f1:d2:af:2c:
41:a4:52:0f:a6:cc:e6:c1:1a:8f:76:01:69:14:62:
ec:8a:17:8e:d6:bc:9c:47:a1:87:7e:aa:ea:a2:0a:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8D:78:74:4A:BE:C8:DA:44:AF:D5:64:68:B4:E6:83:C1:70:FD:46
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:13:9e:21:99:43:3a:cf:78:06:65:23:51:61:3e:ca:99:dd:
f6:1f:c1:a6:67:d6:1e:26:69:38:0b:e5:9c:10:9f:a3:35:03:
44:2d:d0:b5:ee:69:fd:e1:46:87:e9:28:13:41:af:45:fc:66:
35:ee:43:2e:35:17:1d:b8:fa:5b:57:71:40:3f:eb:a3:e1:2e:
86:c5:be:5a:b0:4e:6c:57:f2:9f:9d:11:cf:34:49:b7:76:f4:
54:fd:6b:d4:7b:f5:c9:62:d0:e2:9d:c7:74:a5:f4:19:59:c9:
fa:dd:ed:e6:16:f3:2c:e2:0b:67:0e:7b:ce:40:17:cd:0d:9b:
3a:28:11:87:74:54:09:0c:cd:18:24:7f:ff:14:f1:63:3d:79:
78:ee:2e:26:17:fa:61:dd:33:2a:c0:22:e9:f0:a0:91:69:c9:
e7:f7:cc:02:e3:4a:33:30:91:17:af:a0:8c:41:f6:d3:e1:c6:
ae:fc:e0:a4:9e:76:27:5c:c9:87:04:4f:9d:1b:fa:6c:8b:50:
a3:9d:99:07:46:64:39:34:7d:18:ef:3b:b1:7b:2b:59:c0:27:
fd:30:96:b5:17:e8:64:57:6a:9a:60:44:b8:a6:ee:0e:cf:55:
23:31:7a:42:f2:e1:01:f9:c8:ef:55:c6:8d:0c:55:ff:f9:3f:
84:b8:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:13 2025 by rpki-client