Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
File: iqaY-D40KcieNMjy77WxIBoY_Pc.mft (raw, json)
Hash identifier: F087BHdLOUH7zv6Vvh7Qa8bjEoS6yKke9PZgQU9PiZk=
Subject key identifier: 84:09:D6:B0:C8:AE:FB:C7:06:21:BF:13:9D:1D:3E:43:86:23:6C:08
Authority key identifier: 8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
Certificate issuer: /CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Certificate serial: 0194BD177911B9E7DC9E03B06B7515B9AED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: Eklv5iMrpdIb57nofb-2LDtZiMo.roa (hash: yKALUmc+NQQTzWDEWN3x1mf1BWmjZYZaxlqX1YAmy08=)
2: iqaY-D40KcieNMjy77WxIBoY_Pc.crl (hash: Hgk/tdw4yjhVKpyD2Sk1a83Tyk14cW7vgtFp8lGsyX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:79:11:b9:e7:dc:9e:03:b0:6b:75:15:b9:ae:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa698f83e3429c89e34c8f2efb5b1201a18fcf7
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=8409d6b0c8aefbc70621bf139d1d3e4386236c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:88:3c:e8:93:7b:16:1e:5c:79:46:1c:a8:
fc:c4:83:52:2d:21:b0:6b:a0:e6:3b:70:c9:53:4a:
23:5c:da:d3:e1:1a:fd:2f:34:c8:07:fd:dd:e6:56:
9d:ab:d8:44:16:f8:bf:69:82:66:19:dd:03:ad:c0:
cf:bf:61:07:90:4c:6c:4f:9c:4a:11:c8:1d:d8:bd:
ad:97:eb:6d:70:cd:de:8c:31:88:eb:5a:ce:a7:2d:
c7:1c:7b:23:32:ab:de:43:30:85:11:a6:7b:f8:87:
5f:e7:61:28:73:fa:7f:4a:d7:92:af:1e:c5:97:cd:
27:fb:2f:78:c3:c0:29:65:f6:19:93:72:41:73:2b:
1b:07:6e:14:3f:dd:45:5c:1a:90:26:e5:d2:2a:e6:
34:42:8b:b2:50:77:09:15:40:77:6e:fc:a4:9e:6d:
e6:78:b9:4f:0a:11:35:23:1d:8a:5a:77:09:9b:25:
5d:9d:31:ce:5c:43:99:6d:7b:80:a9:e0:22:34:99:
3f:e7:32:91:89:0b:a5:3b:92:64:df:1f:88:2d:8b:
41:54:be:49:31:aa:53:99:4e:72:03:41:f5:58:f0:
9a:b5:60:e0:38:5d:ca:af:7f:ce:d1:d3:87:4a:c6:
20:7d:f5:8f:72:97:75:7e:86:89:48:d2:b7:72:d0:
df:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:09:D6:B0:C8:AE:FB:C7:06:21:BF:13:9D:1D:3E:43:86:23:6C:08
X509v3 Authority Key Identifier:
keyid:8A:A6:98:F8:3E:34:29:C8:9E:34:C8:F2:EF:B5:B1:20:1A:18:FC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqaY-D40KcieNMjy77WxIBoY_Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d704f2-6ed4-44c1-8e4f-4d7a84babbde/1/iqaY-D40KcieNMjy77WxIBoY_Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e3:4f:34:6c:0e:27:43:01:08:99:9a:75:69:5f:40:d9:7c:
91:74:b5:4f:0f:bb:64:31:ac:ca:99:7a:bf:d6:2e:79:e7:db:
25:d7:da:66:14:67:ed:e6:07:da:c2:cd:0f:6d:74:fc:44:3a:
53:2d:78:0b:9c:10:76:38:c7:01:e8:6f:81:f9:94:74:a4:b7:
01:59:29:63:5c:80:3f:9e:25:d4:29:e1:0f:51:6d:03:dc:c9:
32:93:72:c9:b7:a1:86:41:5b:2c:7e:b3:13:23:69:dd:cc:a8:
57:79:0c:39:ba:98:93:bc:01:fd:78:27:f7:d1:0c:28:63:10:
ee:34:0c:15:5e:14:b4:94:ae:da:f8:f8:e0:b3:4e:00:7a:02:
e7:5d:7d:b3:81:1c:b6:07:36:58:0f:fc:36:68:87:47:ee:0c:
7b:e6:cf:1f:da:0b:e9:20:85:95:a7:27:ee:17:bc:4f:7f:43:
f5:fc:0b:0f:3d:89:4c:6a:c0:01:03:c3:33:4e:27:28:69:f0:
be:38:fb:2a:4b:4a:59:89:4f:b4:ce:2a:da:a5:38:f9:50:cf:
5c:79:21:7c:e5:94:7d:9b:73:b0:d5:f4:13:34:28:c6:41:58:
22:2d:be:11:0e:30:84:53:19:95:c0:51:91:8b:e6:ea:ba:fe:
43:0d:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:38 2025 by rpki-client