Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
File: iBKgqAncPNH72JUaj4D2mSXhGQg.mft (raw, json)
Hash identifier: gEQZj3NlbZfB8RTL2JMrb0mrxjvlPBqY8fr80VWqxbM=
Subject key identifier: 35:A5:42:FC:9A:D6:37:B4:FB:08:8F:E4:59:A7:F1:0C:8F:47:06:3D
Authority key identifier: 88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
Certificate issuer: /CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Certificate serial: 0194BD4E5F2EB23B44664616CB48F275EB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
Manifest number: 0F0F
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: gc6g1C2J1IjiC6a4YzgHVoMBVvE.roa (hash: l0wZmz1eeJH0pgzgb/M7lMO1lTKuzQbmbwUCcga2Ghs=)
2: iBKgqAncPNH72JUaj4D2mSXhGQg.crl (hash: iuzRt4SZaDpPpsY2J6YPBQ7MPLy/ucLOm3QoSF2RYdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:2e:b2:3b:44:66:46:16:cb:48:f2:75:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8812a0a809dc3cd1fbd8951a8f80f69925e11908
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=35a542fc9ad637b4fb088fe459a7f10c8f47063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:a3:ad:49:98:39:f7:31:f4:bf:44:04:12:
9f:92:c9:81:79:71:0e:4e:69:9f:7b:be:04:8b:08:
1f:f6:af:85:29:3f:d7:8c:fb:74:88:af:e0:55:04:
34:09:73:93:7b:09:78:94:3e:54:4f:f3:08:d4:74:
38:a3:91:1d:7c:27:92:18:5d:c9:54:a2:d9:7e:83:
46:69:23:65:f7:50:c2:7a:2a:ec:af:9f:6d:35:bc:
c9:43:ae:86:26:bc:9a:d5:da:e5:0a:97:81:dd:de:
b4:30:fa:a0:b0:05:12:5c:34:f8:27:28:44:f2:1c:
65:a5:cd:c6:eb:84:45:4b:cb:73:ad:58:b0:c9:7c:
1f:f1:40:e6:52:ed:d8:36:70:ce:fa:68:ed:3f:a9:
5e:5d:72:4a:46:b8:d8:39:66:9d:af:d3:e6:0f:02:
d5:3c:b3:d8:17:2b:0f:ef:5e:4d:d5:3a:a0:fe:f3:
5f:4c:06:2e:bc:81:05:be:e4:1f:b8:0c:4c:aa:b9:
d4:91:17:e2:91:39:36:f5:66:fe:26:c8:4b:a3:76:
84:00:79:e2:54:16:ee:60:30:9b:a2:c1:90:76:28:
6f:07:56:34:77:93:bd:ef:34:bf:25:6c:d0:53:13:
33:7a:a2:cd:7e:77:b6:ce:b7:92:99:c7:d8:cf:28:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:42:FC:9A:D6:37:B4:FB:08:8F:E4:59:A7:F1:0C:8F:47:06:3D
X509v3 Authority Key Identifier:
keyid:88:12:A0:A8:09:DC:3C:D1:FB:D8:95:1A:8F:80:F6:99:25:E1:19:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBKgqAncPNH72JUaj4D2mSXhGQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c8aa09-bdfb-43ca-8522-fa75cbe9bead/1/iBKgqAncPNH72JUaj4D2mSXhGQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bc:ec:b0:46:dd:90:62:f0:3d:95:19:3d:15:a3:0e:e2:b7:
2c:1c:78:ea:13:67:53:76:8d:9c:80:4a:44:4f:99:6d:20:c5:
b3:41:13:18:fb:a7:e0:90:21:df:47:d9:df:97:ee:7e:f1:46:
c2:fb:33:9b:a8:2a:a1:a8:3d:a3:5c:39:85:bf:69:ca:dc:2a:
e6:98:90:07:44:9d:cc:de:ff:7e:4f:e1:87:e3:49:56:4e:a0:
c2:5e:5d:57:bc:8f:db:45:2e:9b:28:78:41:75:ee:79:e5:ee:
27:a8:18:ed:0b:db:e9:79:a1:ae:e8:6b:0b:bd:55:b1:a2:e5:
d2:d9:6f:a9:04:af:e8:01:88:ff:5b:27:87:56:5b:ef:b7:56:
4d:ca:3f:3a:b9:fd:ff:1b:59:53:22:7d:77:d8:76:58:4c:20:
38:d2:cd:b4:b9:0b:1a:32:5d:7b:f6:a2:a9:eb:33:c9:06:c6:
50:a3:df:0c:fe:48:59:55:96:4d:42:3b:d6:91:16:10:13:e5:
83:f8:51:9c:ca:ff:4b:95:66:8d:1a:4b:f2:fd:0f:6f:42:7e:
67:2b:5a:a9:44:05:61:3b:b8:27:1c:6c:48:e9:57:a9:fb:88:
2a:3c:e4:55:fe:84:b4:b9:1b:e0:ab:13:b7:c7:b8:81:82:e7:
f1:d9:7e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:19 2025 by rpki-client