Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
File: izTw-SddmAZir7tsr__k25ycnUc.mft (raw, json)
Hash identifier: RNNvejgpnISdVZctjYQXjGy5vYSSUep6yNXEuy8lZhY=
Subject key identifier: 18:D8:13:6B:9F:3D:01:87:C7:7C:BA:10:FD:5B:42:82:D7:4A:71:DC
Authority key identifier: 8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
Certificate issuer: /CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Certificate serial: 0194BCE05C2FDB2BE68A6CBE4F57024DC6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: hJAJ_2fxLLSusp_yruUvCu2AhDE.roa (hash: 9Kpyn4uPgVd5tG1Jy8HfdjJb9f0PP8lWG2o85Fi6t4g=)
2: izTw-SddmAZir7tsr__k25ycnUc.crl (hash: dFkqUZA9VAIEL1kI4D4Xp6271Zg10g2wOGW8CaCq8/A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:2f:db:2b:e6:8a:6c:be:4f:57:02:4d:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b34f0f9275d980662afbb6cafffe4db9c9c9d47
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=18d8136b9f3d0187c77cba10fd5b4282d74a71dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:4b:6d:b7:db:24:75:58:da:68:eb:ab:b2:
f6:86:d3:f5:36:5e:43:69:20:e8:56:59:84:c8:86:
e3:bc:ac:24:22:b3:86:37:9b:9b:fe:99:14:91:4e:
c6:7c:d5:aa:38:3a:52:b8:ee:de:f3:7e:3b:77:35:
0e:4c:f7:b2:b4:2f:fd:62:7d:7f:45:4e:c9:46:8f:
e2:23:4b:2e:2e:3f:16:5f:6c:6f:79:54:2a:11:7d:
14:d4:58:db:3b:92:ff:b6:96:1e:11:e2:34:f8:40:
c3:c0:7a:b4:74:18:4a:cb:5c:a1:ba:dd:b4:38:c7:
ce:90:bc:11:10:3b:0d:2b:7e:57:51:b5:7c:6e:d7:
5b:cb:59:9a:eb:77:97:19:98:8d:81:d3:74:81:ab:
58:c4:c2:3b:31:8f:09:cf:65:de:dc:79:fc:79:31:
6c:45:7b:a6:b2:fd:e5:8b:91:fb:34:43:45:74:58:
e3:17:b3:a4:b6:13:6c:10:b8:70:7b:f8:63:cb:a4:
ea:c4:e7:64:72:59:62:2f:8c:1f:bb:c9:84:c2:c5:
16:37:9c:ae:f2:56:75:34:d4:5f:28:02:f4:e3:da:
4c:0d:6a:d6:9e:fc:f3:9c:76:23:67:65:3d:e1:3e:
ab:56:4a:f4:83:44:c7:a7:e7:a1:58:77:91:d5:de:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:13:6B:9F:3D:01:87:C7:7C:BA:10:FD:5B:42:82:D7:4A:71:DC
X509v3 Authority Key Identifier:
keyid:8B:34:F0:F9:27:5D:98:06:62:AF:BB:6C:AF:FF:E4:DB:9C:9C:9D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izTw-SddmAZir7tsr__k25ycnUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/dc9309-ca08-418e-b518-1aa0166e37e4/1/izTw-SddmAZir7tsr__k25ycnUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:03:49:bc:26:52:22:18:55:9b:31:a4:d7:2d:3d:d1:42:
06:d9:7f:d0:2b:30:6c:32:1e:d0:d7:73:53:3d:63:09:6e:0c:
1f:0d:0c:7d:c1:1d:8d:fe:e9:f7:36:76:10:67:55:14:0e:42:
a4:94:76:bc:f6:c6:d7:12:bb:1a:f4:68:2b:da:56:40:93:dd:
f4:4a:82:31:5b:17:cf:45:16:65:12:1f:3e:a5:33:ad:49:26:
9e:04:6a:98:59:07:13:6f:0a:12:06:d4:41:aa:3e:27:e8:54:
22:72:5b:41:6c:8c:89:01:8a:79:4b:45:60:bc:6b:2f:22:75:
49:cd:76:ac:e4:c6:fa:7a:83:9b:b6:4d:5d:dd:a5:7f:63:11:
a5:0b:25:3f:b7:2f:35:8d:99:cd:c3:98:7c:a5:cc:5c:5e:15:
b0:60:1c:5b:28:6f:d9:86:3b:42:dc:fb:10:59:97:bf:b4:53:
9a:b0:95:13:61:9e:f7:81:d6:7e:0d:21:43:f2:28:2e:02:10:
d8:00:c9:3d:9e:9d:76:16:f1:7d:60:4e:0c:16:a2:81:78:1c:
3d:f8:f5:f0:b8:cd:c9:8d:65:0c:a3:5f:20:cb:2f:be:cd:74:
aa:8e:f4:a4:9e:22:6c:d6:7b:ac:fb:81:b2:48:96:5b:8c:2e:
ce:f6:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:25 2025 by rpki-client