Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File: igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier: y6iM0NuU72mZ49gCQLkEcyHkrab5luuhsNP1WU099X8=
Subject key identifier: 00:13:44:06:E8:0C:E3:6B:BF:0D:60:78:FA:FC:75:5A:FC:5F:24:F4
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer: /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial: 0194BCA99C42DC927DA6D249A4B88F8B8AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:19 +0000
Manifest this update: Fri 31 Jan 2025 14:00:19 +0000
Manifest next update: Sat 01 Feb 2025 14:00:19 +0000
Files and hashes: 1: 4qVVqmmqA7OspRA_VRFwRBkyv9o.roa (hash: v13MYpWF4w6556nbUyMzn5zdKadLhTn87Mtg6y+99Gg=)
2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: jsuH0jgBsPpArLvCOBklnnXIIO4bliyUMyuyPsJ36ms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9c:42:dc:92:7d:a6:d2:49:a4:b8:8f:8b:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Validity
Not Before: Jan 31 14:00:19 2025 GMT
Not After : Feb 1 14:00:19 2025 GMT
Subject: CN=00134406e80ce36bbf0d6078fafc755afc5f24f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:70:54:6f:1d:5c:d8:0c:69:90:59:34:fa:
37:af:d1:e7:4a:9e:d6:3f:65:a0:1a:da:84:59:c5:
9c:55:9e:24:24:88:34:09:f5:21:b5:cc:6b:f0:33:
82:3c:67:bb:05:7c:03:48:ac:e3:0b:63:0f:a6:fe:
14:3c:a9:13:58:1e:5d:2e:8f:33:04:c1:b1:63:88:
75:69:0d:da:bf:18:c2:f7:57:5f:bc:b2:d8:19:9c:
2f:3c:24:fd:67:51:57:d4:30:1e:13:a7:00:71:c5:
3a:96:af:98:8f:14:6a:09:9f:2f:50:59:66:ab:6c:
4a:e8:74:3d:36:2c:24:a5:62:88:68:4c:14:b7:03:
ca:fa:9d:b0:1d:2a:a8:c1:2f:a3:63:ae:9b:2e:e6:
f5:6b:35:8b:a2:1f:71:49:e7:b2:ee:ad:28:d1:93:
e2:d8:32:57:10:7f:cb:2b:2c:1a:bd:e0:ac:2e:a2:
fb:b7:a7:97:69:8a:d9:28:17:d8:68:10:c3:54:16:
c0:1d:3e:3b:6a:c8:47:36:73:18:10:28:76:df:d7:
7c:20:c8:e7:11:c9:7b:18:76:0c:aa:76:d5:24:77:
54:d0:7b:e3:1a:49:ca:b4:f8:74:42:d5:1d:e7:7b:
68:04:0e:df:fd:c4:4e:39:0e:67:6f:e2:e3:5b:ee:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:44:06:E8:0C:E3:6B:BF:0D:60:78:FA:FC:75:5A:FC:5F:24:F4
X509v3 Authority Key Identifier:
keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:18:40:6c:e2:50:37:cf:3d:2c:e8:34:0b:52:5b:3c:74:43:
44:06:13:8b:2a:b3:0f:04:ca:ef:d4:f3:d3:46:b9:01:de:21:
16:52:45:76:82:c9:a2:9c:1f:a1:22:40:2f:a3:5d:5e:f8:9f:
32:45:ee:28:03:fc:b8:53:93:f8:ef:e9:a0:a5:47:0d:99:1e:
ee:12:9f:e1:07:e6:06:e1:19:7c:a6:44:95:48:c7:a4:ff:f9:
70:84:54:84:08:93:4d:e1:ae:67:f9:0a:c6:6e:8f:cb:b8:0d:
cf:35:f2:ec:ba:64:9c:a3:6e:3c:69:3e:62:9f:e3:bf:e5:7a:
d3:03:62:f9:ce:7c:67:e7:b0:f0:df:0e:80:ba:7f:0f:c8:3c:
e7:98:63:e8:8a:9e:90:bb:74:ef:fb:4d:42:fe:42:7d:06:ad:
b1:73:fa:9f:8c:26:0a:99:30:c9:1d:6c:e3:58:3d:f4:4a:69:
92:41:1a:e8:1b:22:5f:b5:b3:28:0a:cc:8c:65:33:53:38:4f:
fd:c1:0d:da:29:7c:4f:d9:81:5b:7e:d7:9f:68:6a:f1:a8:1f:
6b:9c:11:60:ef:3b:36:16:10:28:ba:ea:7b:37:3d:69:92:b2:
33:d8:bc:c5:4b:fe:a9:fa:b5:79:06:7f:c6:6b:68:1d:3c:8e:
e4:e0:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:09 2025 by rpki-client