Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
File: IysXeNY2I3Q-2JyH3oDCpkCToGI.mft (raw, json)
Hash identifier: FLxT7lDdxgQlI87FeEaxOq6pCVHwvDE7M9IHH+1ytbY=
Subject key identifier: 6D:52:A7:39:84:5F:7E:4B:7F:DB:B2:00:50:8D:89:E7:F2:46:FF:DB
Authority key identifier: 23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
Certificate issuer: /CN=232b1778d63623743ed89c87de80c2a64093a062
Certificate serial: 0194BD1789EFBB452FF8A3C8538EF2281520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
Manifest number: 0563
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: IysXeNY2I3Q-2JyH3oDCpkCToGI.crl (hash: Tn8zKHGSzY4wrw2g0hL8FgnA7EeY9BqFD0Wh6nvs0es=)
2: Ljs9MQhWok74BFhLvX5tnc2erSo.roa (hash: +v8jaS8N6bSTt1OSxaSBvN/IEBx5vNtqPM0L9If78cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:ef:bb:45:2f:f8:a3:c8:53:8e:f2:28:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232b1778d63623743ed89c87de80c2a64093a062
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=6d52a739845f7e4b7fdbb200508d89e7f246ffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:0e:d7:d8:ac:91:a9:98:18:2b:97:cd:73:
ac:f2:00:fa:b8:5b:cc:42:6e:53:df:9c:6f:6b:6f:
22:95:31:e9:87:fb:ca:28:c5:c6:71:f5:44:89:a3:
dc:cc:21:48:ed:8c:1d:8f:86:5b:0a:3a:89:d5:33:
8d:cb:cd:9c:7b:91:24:13:11:e6:12:04:4b:45:2d:
ea:bc:dd:e9:b8:b7:9f:59:91:99:83:b6:16:0e:34:
b9:b3:22:e6:9d:6e:09:c6:35:47:6e:d3:7d:14:4e:
b6:d4:6c:12:2f:f1:ad:c0:2e:82:0c:b8:99:bb:03:
bb:7d:bb:26:f9:93:19:f8:52:0e:56:02:49:42:ca:
42:54:1a:a4:16:dd:71:6d:c0:66:d1:5f:71:d3:fc:
11:f0:eb:74:49:10:8b:17:22:ee:1e:9b:6a:9d:99:
18:24:11:37:15:c5:bb:5e:ac:96:71:20:38:73:43:
91:0f:6c:1c:ac:59:a4:8d:a6:90:f8:6a:ae:cd:46:
fc:40:3c:8f:a5:2e:23:a3:57:46:6a:8d:04:97:ac:
92:da:ac:48:d1:22:4c:a0:d9:f8:bb:9a:f6:ea:f1:
8a:31:a6:e3:87:08:1b:8a:ad:5f:e8:10:b2:f7:6d:
a6:f1:b4:64:e7:26:0f:70:7a:de:46:12:cc:c6:61:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:52:A7:39:84:5F:7E:4B:7F:DB:B2:00:50:8D:89:E7:F2:46:FF:DB
X509v3 Authority Key Identifier:
keyid:23:2B:17:78:D6:36:23:74:3E:D8:9C:87:DE:80:C2:A6:40:93:A0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IysXeNY2I3Q-2JyH3oDCpkCToGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/079594-e401-4ed5-98a6-90d35b245ced/1/IysXeNY2I3Q-2JyH3oDCpkCToGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:77:af:08:34:ad:bb:d3:9e:02:65:5e:9a:fe:a5:d4:fc:af:
02:02:e3:92:21:6e:1a:ae:f9:33:d9:60:06:94:b7:df:91:17:
29:eb:66:1c:9a:cd:43:9b:43:91:63:f6:5b:08:08:07:55:3e:
8f:18:71:bf:10:d4:74:4d:66:70:fc:84:a0:53:ca:48:6b:e9:
3a:25:a7:42:94:b3:05:74:87:60:70:c7:e4:d6:fc:97:1f:d0:
71:3d:94:8d:e3:68:6c:04:03:9c:6e:a8:2b:e8:2c:c7:88:26:
5e:56:11:c7:be:57:da:67:67:27:a1:1d:d2:7b:3c:4b:6c:37:
fd:c0:8e:41:d0:0e:de:1c:74:d7:79:68:d4:23:0b:4e:71:12:
97:c5:6e:33:49:c5:10:cd:01:a1:89:2d:9c:87:e5:4b:ff:a7:
7b:10:f9:8e:78:be:3a:a7:3d:72:b1:c0:b4:a5:ef:76:0b:db:
ba:17:71:23:3d:5f:e0:a8:1e:78:40:ca:17:24:9d:eb:ee:9e:
3f:31:c7:51:15:1e:80:55:1a:b9:6b:5b:de:9a:ac:01:e1:9a:
74:b7:23:be:ee:05:df:a7:02:fb:81:04:ed:1a:dc:8f:3e:49:
7b:ae:27:ee:f0:4e:d5:fd:f3:11:3f:bf:d0:64:49:9e:1f:1b:
db:ed:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:52 2025 by rpki-client