Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
File: INJjO_-xbaLXXtr0m8ghGHz7iO8.mft (raw, json)
Hash identifier: Q9VHm6+hWanLrqljLGToCm+ckPoxnEqSgcHURfx4Uq0=
Subject key identifier: 5C:90:CC:CD:C1:2D:18:85:2E:29:69:40:B8:45:69:60:DF:30:21:64
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 0194BC72BEDC0B6D5560F583A95590ADFA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 5OMr3xKs8jvtoFSwFc24Cwr8qm0.roa (hash: yTyBz+xUzE60EnbY56LmeruhsoeDG36ww4aSRH8th0I=)
2: INJjO_-xbaLXXtr0m8ghGHz7iO8.crl (hash: 3i2JdJMpHlPTh3Z0V54SUmgHGur478s8SgpsIH2iVZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:be:dc:0b:6d:55:60:f5:83:a9:55:90:ad:fa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=5c90cccdc12d18852e296940b8456960df302164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:ec:93:e9:4f:06:cb:a6:bc:cf:e7:12:2f:
72:a2:b5:f6:a0:e4:ac:2e:39:8e:fa:72:43:6b:fd:
5d:69:37:df:62:bb:7c:61:b4:27:0f:e6:70:11:3c:
4a:f7:f4:c8:b9:ec:31:e6:22:ca:50:63:1d:9c:7e:
f4:38:a0:3b:3e:46:76:64:6a:d7:90:c8:90:c7:a1:
7b:8f:1d:b8:64:6c:a2:b5:1d:d6:89:e0:10:a4:a7:
d1:c9:39:3c:c9:49:da:1e:a0:57:8a:a4:9f:47:b2:
d8:75:87:dd:bc:60:16:d3:e6:b8:27:ee:e8:4b:a8:
43:41:3c:f3:dc:d3:29:97:86:2b:dc:e2:31:cd:d7:
20:36:29:04:69:01:9f:9e:e4:d7:92:f8:c7:12:22:
d5:aa:39:23:59:68:9c:17:7f:2c:c7:63:26:62:4a:
ae:d4:1d:e9:1f:5b:44:1c:73:48:b1:2f:fd:cb:8a:
53:c1:d3:a7:c6:ea:aa:2b:c9:67:d3:14:94:5b:a6:
fc:a2:a1:b9:1d:c6:fa:33:fb:6a:e9:8c:21:85:d9:
f1:8a:d4:45:48:0a:2e:ed:18:36:01:e3:1f:6b:b6:
93:7d:cc:77:1c:59:20:74:69:ca:a7:23:99:4b:51:
1e:4d:97:0d:8a:d7:45:7d:b0:c9:de:c7:04:67:99:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:CC:CD:C1:2D:18:85:2E:29:69:40:B8:45:69:60:DF:30:21:64
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:30:54:89:e3:5c:2b:81:cf:ba:ad:f5:f9:e1:45:96:e2:
8d:a7:1f:95:bc:78:ce:7b:8a:57:01:38:ea:93:e1:7b:64:e6:
86:cc:b1:f8:74:be:14:77:45:f1:74:05:16:a1:cc:d5:99:ef:
96:21:f2:16:10:53:70:df:d5:41:f5:31:fd:85:f9:5b:c5:29:
cf:34:4b:de:42:85:af:b3:22:dc:a7:a0:93:d8:45:c9:9c:72:
25:38:31:80:85:7e:1b:b5:5e:38:2f:71:eb:65:57:22:a6:3a:
7c:5c:1d:64:23:d6:7f:d1:e6:3f:24:4b:f6:85:66:b6:f5:00:
7e:28:eb:3e:1e:b9:03:40:9d:79:c5:11:5e:1a:dc:2c:ad:3a:
39:ee:aa:06:29:b6:12:0b:79:13:0b:84:d0:84:49:d3:f5:8b:
c4:27:6d:59:f9:1a:96:47:63:28:f1:a8:5b:22:94:18:99:05:
69:a1:98:96:cf:ec:7e:6a:b5:73:f6:d7:a8:63:1e:6a:1c:35:
9e:24:b9:9b:01:40:0e:7e:2b:92:97:37:d6:57:bc:bc:22:2c:
73:80:b0:ad:e4:27:be:15:d4:18:ce:1c:5b:b5:d4:d0:9b:d4:
99:02:8b:44:6a:cd:db:31:a4:79:a3:9c:0f:3c:fd:7e:b9:e0:
70:3f:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:01 2025 by rpki-client