Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: AZ3vjLE2Oxm+vxt4/vX7bKJZiYEzTguPVX6m8ArxkHY=
Subject key identifier: 4B:9E:84:8B:CC:21:8D:56:6B:47:42:5E:BD:2F:F4:A5:CA:58:2D:D3
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 0194BD1763E47021D98DE0FAA822DB9931D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0B26
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: 2YEYqrCLbbvA8rTA7vAO1Eb10G+C+7gsG0Qqjt8rLLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:63:e4:70:21:d9:8d:e0:fa:a8:22:db:99:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=4b9e848bcc218d566b47425ebd2ff4a5ca582dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:50:ab:d3:c8:c6:fd:3c:7b:0c:5a:ec:e0:
57:ac:1b:92:a3:e6:7d:6c:18:d1:4e:d5:81:56:ae:
48:ed:ab:45:7e:95:75:b6:8d:e2:e6:6f:b0:4a:e5:
74:0f:61:92:e7:cf:da:d4:a9:80:c6:83:78:36:f8:
52:ba:c0:42:bd:0c:b7:db:e8:60:a1:f3:80:14:c0:
04:78:e9:90:0d:9b:4a:24:61:16:29:6f:48:51:e1:
12:ee:85:53:d9:78:19:b4:92:a0:a8:c3:10:3e:a3:
00:94:52:28:03:db:2e:e1:90:3d:cf:16:48:fa:72:
1f:04:bd:04:68:5c:2b:62:27:21:fd:8e:92:0f:7b:
c2:2c:8a:f0:9f:e9:98:a7:57:96:95:2f:5f:10:dc:
47:4e:4d:b7:08:94:10:b9:0a:b6:aa:cd:2e:50:0a:
4c:37:8e:89:49:b7:f2:87:b8:05:a7:fd:f8:17:8b:
df:89:f6:60:5c:1f:ad:e3:5e:08:7d:19:7f:0f:76:
89:5d:3f:de:79:ef:52:db:ab:6f:06:67:dc:17:2f:
e3:da:ee:14:5d:70:b9:de:91:6c:37:b7:12:7f:6f:
e1:46:d1:3c:d1:00:b6:e5:14:8b:68:1a:7e:df:05:
59:3c:0d:71:62:19:04:5c:dc:71:1b:11:fc:32:e9:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:84:8B:CC:21:8D:56:6B:47:42:5E:BD:2F:F4:A5:CA:58:2D:D3
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:b6:75:51:87:d7:49:48:e8:57:9a:64:1e:b3:6c:04:aa:
97:7d:a3:9c:27:43:7b:0c:9b:e0:02:49:2d:b5:e1:1d:1c:cf:
1a:a7:15:20:3f:59:ea:73:62:d9:d0:a7:bf:15:df:f6:bc:a2:
fa:a7:51:6c:01:9b:54:e7:b9:7f:aa:20:97:ab:45:a4:c1:4f:
df:b6:2e:11:89:5c:0c:35:7d:2f:bd:4d:cb:8d:58:87:e5:bf:
5e:63:92:2d:cd:d7:68:4c:f8:48:24:32:66:ab:96:f3:f1:3d:
ed:d9:aa:0d:67:be:87:34:5c:6b:96:f7:ab:98:f7:10:05:3a:
b7:41:13:f3:b7:be:49:96:98:ba:e8:9c:b5:2c:c3:71:6f:01:
1c:8d:34:d1:a2:d1:09:e7:51:5d:88:a9:b9:71:ba:de:82:ab:
5b:0a:5b:1a:24:92:7e:5f:72:94:16:24:03:e7:5e:0b:6c:a7:
a5:ac:9c:57:63:0d:53:a5:24:3b:dc:6a:d0:2c:d5:30:54:7e:
41:ff:38:ec:63:8e:f1:d8:5b:96:66:5d:fb:25:ea:51:84:30:
b2:3a:65:2c:07:ef:91:5c:84:f8:37:0a:f0:fd:95:b0:c4:a5:
74:7f:33:bb:20:65:2f:8f:66:84:90:20:a8:03:90:c5:a9:16:
e6:3b:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client