Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
File: IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft (raw, json)
Hash identifier: IMlT0wdwKbgaZVgeKja9GBrAuwLEb5X+2EqQFpzY4N0=
Subject key identifier: B3:45:3C:D0:A5:24:84:8E:63:EC:A7:A3:94:D1:81:27:E6:10:72:9A
Authority key identifier: 20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
Certificate issuer: /CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Certificate serial: 0194BC04C3163387C9E91909CD10D7AFBE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:16 +0000
Manifest this update: Fri 31 Jan 2025 11:00:16 +0000
Manifest next update: Sat 01 Feb 2025 11:00:16 +0000
Files and hashes: 1: IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl (hash: ITWydsSb7p07olpMRR0fXk3MIAMpFCwYuNSe/fjhD28=)
2: J46kuUmF_sgE0zFOUz0hgWBo52M.roa (hash: jPrLPvaHVRm/LYCKQXvlkQimqCpYkjCK3g37WDkRjQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c3:16:33:87:c9:e9:19:09:cd:10:d7:af:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2031bc7f71bb0d1a8566fd4604214507c0d4711b
Validity
Not Before: Jan 31 11:00:16 2025 GMT
Not After : Feb 1 11:00:16 2025 GMT
Subject: CN=b3453cd0a524848e63eca7a394d18127e610729a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:6c:07:56:ee:25:30:86:e2:64:e8:97:4e:
68:d2:cf:41:07:8b:7e:43:17:2e:f4:4e:17:df:17:
2a:35:4b:7b:fa:5a:ca:22:eb:d5:4c:76:a0:7f:57:
3f:bd:0d:f5:eb:e6:81:38:0e:c7:b2:64:c8:8e:ce:
40:91:b1:d0:2e:12:1d:3c:68:ed:69:0a:38:a7:3c:
09:da:20:a2:f7:81:8c:69:d1:73:37:3c:50:54:04:
91:d1:cd:5e:03:cf:69:7a:87:b2:c7:9d:77:63:0a:
cb:a9:8b:66:f5:3f:41:19:7c:da:bb:8d:1a:4a:12:
75:2b:ee:c7:72:46:a9:bc:cf:0d:1c:98:f4:74:ca:
65:d8:1d:ad:e1:86:7a:9d:1f:40:ca:31:a5:10:98:
f7:5c:89:67:95:15:73:26:10:6c:58:78:a6:3c:02:
89:f5:13:f4:a6:eb:d8:19:d5:ca:9e:37:da:0a:cf:
c8:74:97:7a:6a:2b:5d:97:c8:48:c8:34:f7:c0:d7:
18:f1:cb:29:a3:0f:dc:dc:bc:32:d9:48:1c:75:1d:
19:96:93:19:11:b8:c2:62:d6:d6:a4:fc:a7:c2:7e:
2f:3d:f9:ca:8b:6e:93:00:f3:cb:ff:2b:a8:96:b1:
6f:ff:d1:ef:b1:6c:e7:df:9d:76:35:00:f7:a0:5f:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:45:3C:D0:A5:24:84:8E:63:EC:A7:A3:94:D1:81:27:E6:10:72:9A
X509v3 Authority Key Identifier:
keyid:20:31:BC:7F:71:BB:0D:1A:85:66:FD:46:04:21:45:07:C0:D4:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDG8f3G7DRqFZv1GBCFFB8DUcRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b41519-46fc-44da-a9af-e3f4bbcbbbd7/1/IDG8f3G7DRqFZv1GBCFFB8DUcRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:1f:fa:91:7c:ce:8a:37:e9:93:31:3d:51:c6:21:27:38:
66:e2:5f:5d:d9:18:c8:89:4b:ef:8e:3e:82:9c:47:ba:34:1b:
c8:7b:d9:5b:cb:45:04:7f:33:1d:47:53:09:ca:f5:e7:84:92:
54:5d:e3:30:c9:f7:ba:52:bc:ca:f4:4f:33:c3:c9:15:af:94:
11:4f:10:7b:87:e7:37:68:b4:f4:96:f6:be:a7:c1:c1:28:6d:
59:10:ff:3e:92:e4:09:3b:b9:51:06:0c:2c:70:44:5d:61:79:
0e:df:55:c7:fb:83:e5:bf:4a:c3:3a:d5:2e:71:bb:77:49:6c:
9a:f5:cc:1d:18:f6:03:49:76:b0:23:b9:4a:98:be:9c:48:8b:
6c:a9:75:a7:23:56:55:fb:b9:c0:2d:8e:62:8b:22:0d:5d:67:
f2:10:b7:cd:cd:7b:ab:dc:a9:0e:a0:c0:5a:0e:b0:38:64:fa:
09:82:97:c8:c1:6b:1e:e5:41:3c:64:43:3a:6c:c8:11:1a:eb:
a2:1f:a0:8d:f1:a4:a4:40:5a:fc:d2:1a:81:87:2a:75:52:b9:
7b:a1:78:2f:97:e3:16:d7:f6:7d:21:8b:61:a1:6b:7f:0e:b2:
dd:11:03:88:d9:97:41:e4:e4:7a:dc:c4:f5:87:39:f2:1a:c6:
2b:96:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:07 2025 by rpki-client