Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: ydZIFbZX+14RDKPdV4iFN5lvkEWTtdGmGh5D1uAl9wo=
Subject key identifier: 43:78:49:27:C5:6B:BC:3B:76:CE:2A:9A:6C:B1:54:DA:23:EB:ED:C0
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 0194BC3C5DD6BA0873ECCEFA3C7558BD61A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: x3rcg6QSoHYoxchag0vm2ZCt3+FDDdbQGTZRVJo4lEA=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5d:d6:ba:08:73:ec:ce:fa:3c:75:58:bd:61:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=43784927c56bbc3b76ce2a9a6cb154da23ebedc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:24:0e:61:82:e7:2d:07:01:92:07:87:9a:
4c:c4:9a:3e:c0:c3:5f:96:51:6e:71:00:70:95:36:
cd:69:35:b8:6a:3c:ce:81:7c:3d:58:3f:f3:24:0b:
b3:72:bd:ef:84:04:0f:0e:61:bb:e2:cb:cd:10:8c:
e0:d3:d4:1e:2b:3a:c7:31:1d:92:0c:a0:30:7f:a9:
c0:20:98:d4:0c:cf:d9:7b:09:42:fb:9f:18:34:0a:
e4:c3:51:47:3b:38:89:41:b2:30:88:06:6e:e8:81:
4f:4a:f6:71:58:de:7a:bd:33:b8:d2:51:19:fe:a1:
8b:26:f9:15:3c:91:38:8a:7d:06:4b:21:7f:2f:1c:
55:32:20:c3:94:58:6f:86:10:7b:c3:6e:56:43:f2:
40:5a:1e:b6:8e:e6:51:55:ec:c8:f5:58:c2:8e:53:
2b:2d:f1:bb:b1:38:24:5e:e9:b7:0e:3d:30:70:93:
da:c5:a8:c7:73:2b:a2:57:71:70:03:9e:b0:82:e6:
a1:cc:af:6f:c8:7e:ab:25:5e:1f:c2:ad:7a:49:66:
ce:c6:41:e4:49:2b:1c:88:d4:f0:46:56:5b:fc:c8:
e4:24:54:f8:74:46:bd:9e:5c:21:fb:01:ac:0d:ea:
f9:11:db:be:68:da:75:84:b4:8e:02:d8:57:ea:f8:
4b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:78:49:27:C5:6B:BC:3B:76:CE:2A:9A:6C:B1:54:DA:23:EB:ED:C0
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e1:cc:58:db:63:b0:f1:53:56:da:52:9d:f1:09:d4:f3:cf:
df:13:dd:68:00:bc:4c:58:24:aa:5b:bd:75:92:b5:7e:65:21:
f1:67:84:10:11:10:ef:8b:da:d6:c1:56:fa:5c:cf:a8:48:3e:
d9:1f:af:24:e3:2a:77:dc:7c:3a:3d:f4:81:4d:46:e1:ec:a8:
2e:3a:d0:67:a7:f2:44:dd:01:f7:4c:78:c1:fe:a2:76:d1:d0:
29:8d:72:85:36:83:44:74:12:47:94:b9:5c:9b:1b:c0:bb:cb:
bc:34:90:25:f0:1f:dc:0f:41:6e:9f:4b:72:0a:04:04:bc:2c:
d0:f8:5e:e2:76:81:b1:1a:27:18:ff:c3:04:6e:94:33:97:75:
fd:34:7b:55:bf:7c:27:47:95:01:cf:2b:cc:e2:4e:08:fb:48:
b8:e8:8b:b9:21:68:6c:2b:49:1f:d7:93:7c:90:30:37:91:31:
03:ff:83:20:68:4c:25:d2:a5:a4:03:6a:c1:b2:c7:33:89:1d:
52:88:bc:31:13:17:2c:d0:12:f3:44:fa:04:3e:70:6b:9e:eb:
4d:7f:2e:9a:c9:3a:db:07:52:d5:04:79:e8:ca:99:57:9a:09:
35:81:9f:7b:d3:81:4c:eb:67:28:ac:3d:c2:d5:00:f7:6f:8e:
4b:aa:31:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:13 2025 by rpki-client