Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: T2Pxsw4FEhU/IbkNOKrCmErfn59Wk8Z/ZCx8E/2mTQ0=
Subject key identifier: 01:42:7F:EF:2F:B9:6E:02:87:88:A5:C9:B1:C2:3E:DA:AE:FC:94:06
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 0194BD853149D4DCAE0B2D20DB6D345EA4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: NbDCwUi84YKI4Vr/M1VsfmqBBuoaAKcVR9W6obHaKpQ=)
3: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:31:49:d4:dc:ae:0b:2d:20:db:6d:34:5e:a4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=01427fef2fb96e028788a5c9b1c23edaaefc9406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:8e:a6:3f:97:bc:9a:55:9a:f4:8d:82:8d:
cc:16:57:68:dd:68:cb:2a:ef:d9:32:74:f0:30:a0:
6e:55:e1:36:40:74:6f:c1:a2:d6:ce:42:bd:f3:34:
4c:c4:46:75:0a:73:ba:30:e8:83:47:d8:89:8f:06:
33:cb:32:9f:e7:c4:73:6d:63:aa:e6:5b:97:75:1f:
d6:21:91:84:95:90:95:05:35:d0:46:d1:ab:0e:ed:
ea:83:20:cc:bb:cd:2e:ba:49:b7:aa:1c:af:f3:df:
e4:14:75:5c:1b:2c:10:30:04:ee:a7:b3:f3:63:fa:
d6:5c:83:f2:da:1c:fd:c7:a2:25:b1:3a:8e:e8:d8:
44:b1:f1:72:f9:9f:f0:d8:b6:4e:02:57:9b:b0:3b:
60:8d:95:45:6a:13:37:50:8d:95:b2:9f:fe:20:61:
68:92:e4:46:e3:7e:02:a0:41:19:13:5c:5d:32:7f:
8d:c1:14:eb:39:59:e5:c2:f1:06:ff:ad:e5:f7:8d:
44:4b:56:bb:dd:34:e6:53:2c:bb:76:58:ec:86:d1:
2d:99:1a:dc:0f:ca:79:3b:b5:29:f4:25:be:65:7c:
55:92:61:39:60:b4:05:43:2c:4e:dd:c7:99:b5:93:
aa:75:38:c4:d3:25:7a:91:b7:d4:d4:ff:7c:68:b7:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:7F:EF:2F:B9:6E:02:87:88:A5:C9:B1:C2:3E:DA:AE:FC:94:06
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:65:2e:e4:08:7b:ba:45:2a:f0:8f:97:2c:bc:69:20:dd:13:
da:60:47:ba:a4:40:94:e4:c1:47:f0:8f:c2:f8:7d:0e:62:61:
3d:5f:e7:65:b0:cb:c0:e6:4f:7e:49:37:06:4a:9a:b8:33:80:
b2:80:9d:9a:6a:52:3d:b2:3c:94:a0:03:8f:ef:f9:73:2d:4b:
0d:b4:e4:04:e2:53:0d:df:a4:fa:52:51:82:2e:ac:4c:2d:b1:
b7:2e:02:a3:51:4e:88:72:37:e9:c5:8b:a9:dc:57:7e:a9:bd:
df:bf:63:0d:65:89:b9:e1:c1:72:73:33:0b:2c:69:32:93:f9:
51:f1:31:1d:b5:79:3d:31:ee:d9:15:da:8b:89:ac:5f:f3:97:
59:c1:5a:d4:c7:4d:ac:f5:00:58:9f:7b:45:50:d5:66:b6:06:
e6:1a:a5:c2:97:e2:33:94:dc:85:91:9f:2d:1f:1a:f4:00:93:
0f:dc:db:99:7e:c5:d0:71:8a:66:51:ac:95:0b:4b:e8:12:53:
d6:84:23:d0:62:a3:c3:e5:26:70:b9:9e:9e:80:04:1e:aa:7d:
d4:21:ed:b0:a2:d6:6f:91:20:25:a1:61:7f:96:6b:7a:21:5e:
ea:6f:ba:48:d7:2f:05:11:34:fb:ea:d1:94:07:1e:28:91:b9:
e0:0f:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:18 2025 by rpki-client