Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: quQ7EDnj32PtznHt6OnJvAUR6JCEYU2EwNuFa0dOQVI=
Subject key identifier: D7:FF:C9:36:1D:01:8A:C5:DB:B9:22:85:5A:08:4E:62:97:79:A5:47
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 0194BC3C8AA21D2EAD1C9C6D15B7454BAAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: YwAGbtTQZXfe8blVDxMDsYm8UNY.roa (hash: A+07MBH15e8To3URRuyPmW0pFMg83UuaLyIprSu/vsM=)
2: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: b2LvcdRmXPy9jLk674iWz34clvXqjYykp3DoEgAaq0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:a2:1d:2e:ad:1c:9c:6d:15:b7:45:4b:aa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=d7ffc9361d018ac5dbb922855a084e629779a547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:40:66:08:ad:ba:bf:74:e2:18:7b:ee:27:
37:57:fe:eb:8d:2f:ff:b0:f5:25:9d:11:8a:48:b0:
22:b4:bc:92:81:1a:07:d0:52:86:19:ce:10:1d:23:
f7:7c:05:1e:93:70:f3:81:b4:7f:51:3a:51:3e:a6:
85:cf:5c:26:6b:b8:d1:5a:be:ec:8e:de:62:2c:98:
c3:7d:b2:ec:08:e6:ae:ef:8c:b2:80:ee:cf:c2:5c:
64:db:23:89:9e:9b:ea:b6:5a:30:86:de:54:e3:a4:
13:cd:8d:75:e4:ce:19:9a:4a:49:d3:e8:17:7c:4a:
dc:ea:ca:76:8e:91:d6:a4:e8:5d:6f:cd:ed:b9:f0:
68:86:3f:aa:3e:20:91:fe:ed:97:be:b1:b7:91:6e:
19:b6:c5:fb:9c:63:a0:cc:ce:1e:26:e3:6a:08:c7:
cf:fb:42:a5:9e:1f:71:79:c3:a2:61:b6:8e:44:4d:
8f:fb:32:61:fc:ac:3a:d3:57:32:d7:22:ec:ed:e7:
7b:a9:d8:1c:1f:a2:8e:ac:5b:1d:3e:d9:85:1a:50:
b9:62:ce:bc:f7:71:0a:b2:6f:96:55:08:4e:b3:49:
ac:de:32:8d:6f:05:58:9d:55:ad:63:a6:6a:9f:a6:
c2:3f:35:d2:5e:b5:1c:ef:51:90:6f:a6:b9:02:cf:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FF:C9:36:1D:01:8A:C5:DB:B9:22:85:5A:08:4E:62:97:79:A5:47
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:8a:5f:aa:72:db:29:2c:22:bf:6e:fa:c3:03:e9:f4:4d:
d1:88:b1:d5:d6:c3:44:d1:36:1c:ea:b2:3c:23:13:33:a1:03:
14:ff:b6:6c:64:8f:38:c8:9b:cd:78:45:b1:9f:95:26:ad:11:
2a:ce:2c:8d:f3:85:16:37:0f:65:11:8c:3c:bd:51:cf:88:13:
d4:38:e2:da:0c:31:00:10:ea:3d:48:d8:ad:b8:85:8c:2f:35:
a6:26:fe:b2:51:10:5f:d7:ba:28:21:2f:a8:c4:28:df:aa:8c:
96:98:56:e3:0a:a7:a8:51:f3:26:69:d4:fd:dc:68:5a:cc:e6:
a1:9b:80:81:26:37:31:e6:44:d9:e1:08:da:ee:15:8e:46:fd:
cb:36:27:f9:9e:27:41:a5:2e:16:95:9b:2d:2d:05:30:d5:f9:
33:ed:5a:56:af:81:60:3f:74:82:29:d4:b5:87:74:7d:55:cf:
6b:70:fc:d4:35:34:7e:2c:7d:da:49:c7:55:d2:50:7c:bc:35:
8d:24:2c:4c:8d:31:81:e6:25:e6:ad:e9:6f:6e:b5:c3:c1:1f:
04:e5:8a:15:8b:f0:c4:23:85:d9:93:ae:70:37:79:c4:ad:6f:
de:f8:2a:3c:72:4a:7d:e3:ea:94:5e:da:49:d5:89:cf:40:dd:
40:b9:68:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:01:52 2025 by rpki-client