Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.mft (raw, json)
Hash identifier: 6kg/e1IgBfqZCCFhA/R06oYIAK0rgiP0KDh/1eWTQ1E=
Subject key identifier: F6:AA:D8:A2:B6:BF:2C:82:D1:9D:74:D7:D7:36:61:20:33:0D:A9:63
Authority key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Certificate issuer: /CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Certificate serial: 0194BBCE0B59442D93E34909E1E1739D62AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: kf3kJU5iO7T2BjxJ8agaP22As0g.roa (hash: 6biDLkp/WSQoW2uWUpFKCh5FtwQ9kjocP16pC2UTYzg=)
2: m-Io1xO-xtTJq87C8Aoo6CH8J78.crl (hash: jocPqRlyUQcjrV1nHo5BU7pWjyEI2U6On8rsyRS1uUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0b:59:44:2d:93:e3:49:09:e1:e1:73:9d:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=f6aad8a2b6bf2c82d19d74d7d7366120330da963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:f6:cc:2e:c1:aa:d7:1c:69:2c:0a:6c:84:
c3:ac:8f:e0:6c:d8:2b:9c:75:1f:df:ea:5e:12:71:
e3:fb:e5:30:0c:31:7d:77:41:8e:5f:3a:1b:3d:d3:
95:1d:40:e9:64:ef:c1:6a:2a:4a:3d:45:40:12:ae:
ce:dd:48:2a:0a:58:b3:1c:0a:43:99:20:fc:32:63:
e2:01:57:ab:19:18:16:b3:dd:b0:aa:54:bc:fe:2e:
e2:5d:54:3a:f1:26:db:10:de:b7:e6:c0:bb:7a:d5:
4e:fd:14:8f:3b:54:e3:f9:30:4d:aa:fe:de:2f:14:
4d:d7:ef:2f:0f:0d:76:5d:d4:c8:de:20:40:5c:88:
2a:1d:43:5a:f5:25:67:55:3a:10:b8:88:c6:21:14:
3f:06:cb:d1:19:43:57:99:71:a7:57:bd:73:d7:3f:
bb:76:c7:53:97:3c:4c:e2:0c:3e:f5:31:3c:cf:84:
66:06:e8:3d:a7:af:87:77:b2:61:20:be:37:9d:49:
70:56:76:fd:9e:35:db:80:8c:a9:db:4e:dc:43:ab:
4c:24:a6:b7:7b:99:b6:87:df:04:95:fc:25:71:8f:
f5:48:51:de:10:d9:c3:71:c3:31:8f:81:30:29:2a:
6e:66:18:df:46:9d:2a:bd:d8:07:a2:a2:3b:ef:ee:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:D8:A2:B6:BF:2C:82:D1:9D:74:D7:D7:36:61:20:33:0D:A9:63
X509v3 Authority Key Identifier:
keyid:9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:2b:eb:00:80:e0:f2:ca:9a:f1:88:36:5a:ed:54:4f:13:
f2:c7:69:cb:8e:44:31:ca:f4:b3:17:c4:d0:40:1c:3e:11:86:
1a:18:68:47:3f:d1:b0:e6:3c:8e:2b:ba:59:ac:8c:dd:0c:48:
70:3e:2a:35:4c:10:c5:6d:fb:e8:b3:91:ff:cb:a6:4d:8b:d3:
e0:1a:1f:9f:20:79:fc:f9:34:9f:3c:5f:10:07:46:32:59:a5:
6f:a2:a0:11:88:9e:3d:07:30:6e:cf:cf:84:dd:4a:f9:a2:3f:
8c:d2:0a:dd:df:23:90:b4:f7:09:45:96:21:e5:02:a2:0a:3c:
c8:61:92:e6:82:85:a1:09:55:86:d7:00:49:c9:58:d5:32:21:
41:36:f7:f5:40:6f:35:42:72:d4:64:f1:19:8a:6a:48:2e:54:
fc:9c:c2:c8:69:56:bd:62:b7:c3:b8:c9:9a:c7:ae:bb:6b:80:
5c:02:18:d2:f9:d7:d8:b6:fc:d8:c8:ab:2b:82:20:3c:1e:68:
ac:a1:79:0a:13:49:68:2b:56:e9:28:ef:45:a8:c6:0c:ad:6f:
24:1e:a8:b7:30:db:5c:8e:d3:55:b3:fc:17:88:98:44:df:d6:
17:6b:75:fb:75:0e:b5:78:7c:82:50:92:e2:e3:79:c3:74:89:
fd:ee:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:07 2025 by rpki-client