Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
File: IwbLbMzQnnXtGfwG-1kkzyejmMM.mft (raw, json)
Hash identifier: pPLXqjymmbZk10+tQgSBIDobqLqNoEqH6f9xscHJo/U=
Subject key identifier: 15:34:FE:D0:4C:65:0C:C3:4D:23:4D:5F:A4:20:80:11:5A:CB:D1:A4
Authority key identifier: 23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
Certificate issuer: /CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Certificate serial: 0194BD4E783AD700A01EFAA2AF5DDEA4334D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
Manifest number: 01A6
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: IwbLbMzQnnXtGfwG-1kkzyejmMM.crl (hash: poGCUKZbOQkZXirrsswFivXuOziJDWRZmDh6Qk2DNxE=)
2: YYev6Pek4prQk97zPtNDo2u2KRU.roa (hash: wJZbyHz8STJ6eKcT9ZVX0wVCLZZb2WUlXYfMJ35kaXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:3a:d7:00:a0:1e:fa:a2:af:5d:de:a4:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2306cb6cccd09e75ed19fc06fb5924cf27a398c3
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=1534fed04c650cc34d234d5fa42080115acbd1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b6:65:b5:c9:05:1d:cb:af:5a:97:c5:b9:70:
17:16:3b:e3:ad:f6:a4:0f:5e:0a:f2:6c:32:80:b1:
9d:65:1c:9c:95:da:79:8a:54:e9:97:0f:c7:de:95:
0b:a5:e4:16:87:36:1d:ec:d6:52:5a:23:ca:91:d2:
78:ad:65:64:12:22:88:50:e2:d6:40:74:a1:4a:d2:
f9:c4:b1:ce:a2:20:55:da:b7:8b:8d:d6:48:6d:f2:
6f:a7:67:07:a0:e5:ba:07:6d:24:d2:4f:1a:cf:50:
9c:4e:6c:e4:21:66:0e:0b:66:a1:a3:01:27:ce:f4:
dc:b2:b8:03:30:e8:2f:5b:ea:5e:53:3b:8f:67:74:
40:9b:88:92:64:46:8d:40:ab:8a:8b:2c:73:f1:55:
dc:d3:59:71:54:1e:07:11:27:71:aa:d2:90:cc:8d:
6c:99:32:9a:58:ae:98:b3:ac:a9:ee:5a:78:b9:45:
49:b2:75:9f:e0:3e:9b:f6:c2:99:95:91:ec:b9:dd:
02:bb:2f:4b:5d:b2:44:95:18:00:43:f8:1d:f1:d3:
30:91:9b:db:95:14:e2:9e:af:b2:ec:4b:73:59:1c:
16:ba:27:fb:ac:79:f2:f3:2b:88:0b:4d:09:64:7d:
0d:79:d3:af:81:79:0f:12:8a:f7:47:3a:ba:4c:4e:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:34:FE:D0:4C:65:0C:C3:4D:23:4D:5F:A4:20:80:11:5A:CB:D1:A4
X509v3 Authority Key Identifier:
keyid:23:06:CB:6C:CC:D0:9E:75:ED:19:FC:06:FB:59:24:CF:27:A3:98:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwbLbMzQnnXtGfwG-1kkzyejmMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d9dd82-9bb9-484c-81cb-83bdcad02047/1/IwbLbMzQnnXtGfwG-1kkzyejmMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:52:1b:a9:56:eb:c9:31:a6:8a:b6:b0:c1:7c:9d:8c:13:4d:
ae:d8:51:0d:b3:eb:68:d5:90:e0:79:e1:c8:fc:78:ff:7a:5c:
58:fd:af:6e:e0:ae:31:ad:86:17:d4:35:2a:71:28:a5:15:c7:
b1:4a:b2:9a:42:03:30:d7:10:68:06:20:90:a0:b1:9d:08:8c:
7e:b7:7e:30:8d:b3:09:12:34:2c:dd:14:0a:d6:86:00:72:ab:
73:91:66:37:51:7f:2b:6b:74:8a:24:75:04:2a:f8:33:64:2e:
f8:93:ea:f5:04:02:be:85:2c:0c:8f:da:72:0c:c5:4c:d4:c0:
89:39:7c:b7:f6:e4:07:6f:91:34:ed:1d:75:34:b7:ec:48:ee:
c5:97:3e:a4:92:9e:66:88:b7:85:f2:2a:3d:ce:ef:0e:46:af:
b5:41:a4:9c:99:cd:6a:6b:c4:fe:40:dc:bb:a2:05:34:65:00:
11:d7:5f:a7:d8:18:f4:19:29:12:f4:96:c8:f5:ea:7e:d0:36:
3e:ea:e7:7b:d3:4a:35:1c:1c:5d:35:37:a5:64:fc:4e:ca:ef:
53:a2:6c:e0:ca:ea:ba:fc:fe:61:50:ab:56:dc:15:2a:99:d3:
5c:78:34:8b:97:66:02:b5:17:4b:1b:ee:97:ae:01:42:24:2a:
44:56:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:34 2025 by rpki-client