Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
File: IYLNOsXE22fqcxprcZi31uT_EVw.mft (raw, json)
Hash identifier: 0YXEL/n0bN0x70d7ZQkNxUwiTGz6GaA+G6ua8NS+r9M=
Subject key identifier: C8:DE:21:B5:DE:41:D4:17:1E:93:C8:B0:CC:D6:68:8C:08:92:A2:0B
Authority key identifier: 21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
Certificate issuer: /CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Certificate serial: 0194BC04FD7DF8CB06CD2F220A6FFCAF4187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
Manifest number: 0E91
Signing time: Fri 31 Jan 2025 11:00:31 +0000
Manifest this update: Fri 31 Jan 2025 11:00:31 +0000
Manifest next update: Sat 01 Feb 2025 11:00:31 +0000
Files and hashes: 1: IYLNOsXE22fqcxprcZi31uT_EVw.crl (hash: gQzKinlItZ7Wncrb5rPBI7qOtOdg8YsASlLSYIjp/m0=)
2: g3nTkjVHfCtnRgD2iYnxWWRZOIk.roa (hash: 8O+KUIsUB5NmSou/PBbO/5fJhmgcsiY9mA8eGOd3AB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fd:7d:f8:cb:06:cd:2f:22:0a:6f:fc:af:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2182cd3ac5c4db67ea731a6b7198b7d6e4ff115c
Validity
Not Before: Jan 31 11:00:31 2025 GMT
Not After : Feb 1 11:00:31 2025 GMT
Subject: CN=c8de21b5de41d4171e93c8b0ccd6688c0892a20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:27:97:e5:57:dc:d5:5a:b1:b3:bf:b1:b7:fd:
42:f4:a0:7a:31:1f:ca:08:1e:f0:a7:8f:de:dc:1a:
74:91:52:e6:13:97:0d:e1:56:f8:9c:a8:e1:3b:fa:
23:16:c8:bb:b3:21:73:bc:74:e0:58:43:69:e5:16:
8e:a3:77:c6:8d:cd:17:89:e1:54:2b:1f:1a:4f:92:
f4:e0:4c:f2:18:f1:29:33:e8:98:2e:7b:c6:9e:50:
96:9b:e6:cf:49:91:7d:93:be:29:8e:0e:73:06:5e:
16:0a:4e:d6:cf:c8:d8:a1:e1:16:00:08:1a:cd:a9:
e5:a3:56:df:24:a7:6d:f8:c5:45:61:04:08:7d:ff:
fa:b1:b3:45:ef:80:9e:c6:4a:65:e6:bc:95:8d:7a:
76:ee:60:a1:7b:07:a9:8b:fc:df:93:df:91:08:71:
2c:63:41:6e:8e:6c:a0:b4:b3:a9:ee:3e:8d:6b:61:
bc:2a:d6:b6:9e:91:d1:c5:0e:82:a6:27:62:cb:49:
12:8f:95:31:74:b9:4c:98:c6:e2:9a:fa:fb:61:69:
7c:e5:b2:0c:0b:75:9f:63:d4:74:0d:11:d7:19:e4:
4d:9e:c6:80:ab:a5:a7:4c:a3:83:b3:44:eb:93:49:
9f:12:6f:3d:9a:d8:e1:b4:7f:4a:dd:c6:30:7e:0b:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:21:B5:DE:41:D4:17:1E:93:C8:B0:CC:D6:68:8C:08:92:A2:0B
X509v3 Authority Key Identifier:
keyid:21:82:CD:3A:C5:C4:DB:67:EA:73:1A:6B:71:98:B7:D6:E4:FF:11:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYLNOsXE22fqcxprcZi31uT_EVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2faeb5-6a1d-4a13-ba1f-4663bc9da964/1/IYLNOsXE22fqcxprcZi31uT_EVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:77:db:02:b2:52:5e:df:b9:b0:56:4f:98:32:91:b7:23:1e:
ae:8b:b2:5f:85:16:cc:07:a8:18:8d:da:d8:d2:bd:97:fb:50:
fc:cc:55:4c:c2:6f:b8:9e:d4:9e:4b:0d:68:ee:54:0d:e3:19:
f4:bd:64:a8:9e:53:70:ff:82:c4:73:f3:f6:ad:e6:ab:40:08:
8a:11:bd:6e:b0:19:c3:f9:4d:f5:98:fa:78:ff:df:ce:ae:3a:
6d:ac:de:b2:00:da:55:d9:64:04:ec:02:22:35:5d:e8:9d:f7:
04:ef:cb:18:61:76:f0:98:ab:d1:8b:62:35:87:e2:95:1a:7b:
f6:06:60:f1:8b:1e:6b:c2:4d:1f:8f:e6:fc:c1:06:5f:0b:65:
3c:d9:74:c3:fb:7b:7a:e3:a9:76:8d:9a:26:2a:3f:c6:1c:09:
86:42:51:59:86:e0:11:57:f3:d2:75:94:22:37:ad:2c:de:4f:
1b:3a:0c:e2:18:bf:9d:00:5d:ff:37:c6:f3:74:73:6d:2b:71:
85:49:62:9b:06:83:9b:8c:3a:de:5b:19:71:96:de:5d:b6:0f:
d5:f6:f3:e9:6f:96:d9:52:a1:c4:3d:ca:fa:b8:eb:60:97:2d:
6e:aa:0b:c1:ef:6b:fa:d7:8c:f7:db:82:c9:d6:d4:fb:f3:61:
60:bb:8b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:33 2025 by rpki-client