Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: n1j0XpD7rIgczLjyfJyJr5ii4awiNYohz2z9GCBsrRY=
Subject key identifier: DA:26:26:54:92:34:C7:A4:36:79:38:F7:62:B9:7D:7E:42:7A:F4:5C
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 0194BD17D2194B457A4E9743D12103E2C82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 024C
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: aaOiGeVUsIZbjGBXcR9Ng4ABWT+9NjGgUd14FpJiOds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:19:4b:45:7a:4e:97:43:d1:21:03:e2:c8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=da2626549234c7a4367938f762b97d7e427af45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:78:aa:48:44:08:da:c2:fc:68:cd:34:b5:
a7:d0:cb:87:ff:f6:5e:e7:95:4e:b2:36:b4:cc:fc:
c4:d4:27:a3:25:d4:be:f7:e9:f3:87:18:71:1f:70:
a6:c8:8e:e9:31:67:af:86:2e:d3:a6:0b:8e:17:7b:
e4:e8:d7:18:bb:45:f5:d2:4a:25:72:3d:c4:1c:c9:
d3:21:3c:ab:84:24:60:37:26:a7:ad:8f:91:14:3b:
c7:56:f6:9a:e7:be:3c:d8:1c:17:74:8b:0f:0a:f5:
9d:ca:25:97:a4:ea:42:f2:81:60:e1:41:a7:4b:f5:
f8:f6:d8:1a:bb:4b:07:01:82:59:77:6e:d2:2a:f1:
50:b5:ea:73:ad:c7:ed:0e:48:91:71:6d:26:db:dd:
ad:7c:6c:eb:4f:7f:58:f4:24:bc:bf:0e:1f:d7:bf:
a6:d3:3f:75:1d:05:47:e7:c4:28:f8:1e:d9:41:e9:
7f:f7:e7:2d:f5:f9:c5:8d:05:f1:a6:f1:46:aa:38:
34:58:ef:69:fe:76:a9:87:c1:d6:0f:fe:01:74:1e:
92:9a:17:26:5e:a5:a5:aa:7f:c4:57:7a:a4:5a:98:
d2:7e:12:0c:64:d0:4e:4b:f2:5a:b7:02:04:09:2d:
04:c6:53:be:99:9b:6a:d2:d0:19:18:da:1f:57:17:
62:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:26:54:92:34:C7:A4:36:79:38:F7:62:B9:7D:7E:42:7A:F4:5C
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:cf:d2:fb:47:2c:8e:84:5e:a0:7f:91:1a:0b:92:d0:5c:
99:52:78:98:ab:cb:b8:75:8d:ef:e1:47:2d:d6:be:ef:dd:19:
24:59:f8:4d:d2:a5:9d:f1:9c:76:8d:7a:ad:dc:9b:dc:98:ec:
5c:1c:d5:4f:05:1d:80:79:3e:07:5d:05:34:88:2b:85:25:d1:
04:ef:4f:82:86:23:3f:b2:d6:34:83:63:95:6c:5f:4d:8a:83:
96:74:4a:39:c0:80:80:6d:08:64:5e:dc:fd:7d:be:3b:41:9a:
16:d2:80:61:3a:cf:82:04:dd:91:60:6f:d4:25:4f:99:17:9a:
b0:6e:85:ca:7c:35:d9:85:fb:0a:dc:72:46:7b:40:0c:14:a6:
b5:54:fb:32:c5:fc:1e:31:d3:03:a0:32:66:bd:db:b1:2f:95:
69:de:8d:d4:88:ee:0d:48:7f:36:7c:58:af:93:33:3a:f2:e2:
91:0f:c4:d1:72:47:40:a5:3a:a6:c9:2a:38:6c:28:49:7f:d4:
ad:72:d8:91:9d:17:3c:f1:01:b9:71:c5:aa:41:f6:b2:85:b9:
9d:c6:22:e3:ca:be:2e:57:fa:bd:c1:ab:7c:59:10:1e:a6:ce:
b5:29:0e:95:b7:4e:3e:d7:62:2c:64:84:36:70:f7:5b:c7:8b:
45:3d:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:23 2025 by rpki-client