Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: U6jvTCJG9hyP8kguP+xjHB7/Px2kWAowUL+iyFTgq+c=
Subject key identifier: EF:6D:29:CA:7A:67:B2:9E:74:CD:0D:00:B4:8A:09:C5:CD:A2:DB:E2
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 0194BBCE236FD00D33D2ACF82CE30CF1135E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 1178
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: xBzesr2xt4emIxmprWqZ083E905M/yY2Iv09koq2x80=)
2: LWXmlZUU3ecfqvwZHXpe4N13PwE.roa (hash: 4NYVwWGAs7YF0X626zcPKU0/2BhITxR5hdojEVCb7vQ=)
3: Sb-J4R6jgDy1hu0trOifGY0aUIY.roa (hash: BnRnuIbBZBHwGOy/+XFTLzwpti+5vGhUFRVEfpqfups=)
4: XNLU8qoxsRXpQnmwz4ctSe-cqyE.roa (hash: JQ5L08jadmyYilDYeIqvPylZ8SNDZ1MGMwYpTLmwoLo=)
5: cEBx7aoqU0ILwpLn4WovM_f845U.roa (hash: J2opbMpTZpUpvX4wcx9CCjjTjdIRz3Wc8zKaGaF1BXs=)
6: caXYCCXqjYg5FcmsNZB3ePKReDk.roa (hash: XSzupsyXsQ8GmhQZJGGSHfiNeG8fCN+9mFDFmlJ4Bu4=)
7: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (hash: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:23:6f:d0:0d:33:d2:ac:f8:2c:e3:0c:f1:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=ef6d29ca7a67b29e74cd0d00b48a09c5cda2dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:21:c6:cc:a0:70:b7:49:b9:77:e8:e6:db:
11:47:0c:48:81:4d:0f:b9:7d:d3:f1:e4:d0:6d:69:
c5:32:79:b2:41:ea:bc:0a:19:1f:90:a9:52:72:d1:
4d:50:a0:bf:08:c2:d9:ae:1d:e4:3e:b5:be:49:cf:
af:5c:6d:07:6f:95:f6:4a:64:dc:9c:bc:17:fb:34:
70:b4:45:74:10:a8:78:e8:92:07:77:53:86:ac:ee:
21:38:16:e5:88:47:af:de:9d:28:fb:f6:0a:98:f6:
b5:fd:45:9f:a6:64:a3:59:10:3d:1b:55:b2:14:ca:
7c:a4:01:95:f5:82:1c:6c:68:e9:d8:31:f2:89:b1:
77:4f:d6:cd:c9:4e:c4:31:02:1c:2d:67:ef:f1:d2:
ce:ff:43:e6:be:71:b0:04:21:35:9a:b6:b8:f9:65:
08:be:26:f0:50:83:9c:4b:64:b5:14:d3:ab:22:1b:
48:dc:04:38:de:5c:88:5a:ff:53:ed:91:1b:3e:db:
70:28:23:17:ce:79:ee:60:9e:61:ad:aa:81:0c:90:
98:96:78:6a:73:8c:28:2d:24:ab:34:d6:bd:a6:67:
f7:c4:49:6f:15:ec:a9:cf:b5:6e:a7:82:9b:99:54:
cd:75:b5:b0:19:d9:b0:ca:1c:4d:63:a8:b4:90:93:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6D:29:CA:7A:67:B2:9E:74:CD:0D:00:B4:8A:09:C5:CD:A2:DB:E2
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:60:66:a3:d6:16:8c:ce:92:fe:f5:55:2f:80:ea:f4:4d:72:
ab:f6:a9:60:71:66:66:a6:21:4b:73:ea:b0:b5:1b:02:48:e2:
33:f1:fa:53:2a:e9:0c:71:93:58:53:82:05:a3:35:ed:70:43:
f0:a4:1d:fc:87:8b:24:ec:12:a9:87:52:a8:a0:69:a4:be:a7:
64:c7:05:43:cf:fd:b6:b5:29:51:08:b7:f0:80:9c:a4:50:d7:
77:ee:4f:2d:1d:9f:a6:42:8e:f6:00:cb:8f:10:07:31:49:be:
6a:ec:b7:5c:3f:d2:99:cd:86:40:aa:c9:aa:99:99:45:e4:d9:
28:05:af:4a:fe:d0:7f:d5:62:99:2f:10:39:7f:5d:94:8b:9b:
af:64:ee:ca:7e:c0:22:51:1f:ce:d9:46:c8:05:da:79:88:e9:
81:c9:20:2d:4f:c3:67:7d:cc:8b:1e:2a:c3:70:22:e6:43:89:
bf:04:41:35:bc:77:b9:77:49:07:ca:7b:0d:a5:d3:be:05:de:
ab:3e:ec:18:dd:f4:be:be:99:73:02:51:0a:79:77:04:3f:c4:
2b:b8:e4:5d:13:71:41:ca:a5:19:c1:6e:5a:fc:e2:10:60:9f:
67:22:9c:1e:e4:41:08:37:39:30:22:80:6c:25:ac:c7:cc:cc:
90:3d:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:35 2025 by rpki-client