Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: 2W/NMZlcsEaD/4SoFVqBfu4l0wXORTdNd3FlL9DFB2I=
Subject key identifier: 51:24:F6:D8:73:12:1D:B4:A7:70:46:CA:24:0D:2F:BE:57:90:53:DD
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 0194BD854F4272E7A2B79A9A81F2C6C72543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: htA6X+WWRPP0wD+KQAgF/HjtdCTkndhpW5iTTKKtn2I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:42:72:e7:a2:b7:9a:9a:81:f2:c6:c7:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=5124f6d873121db4a77046ca240d2fbe579053dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:b0:04:ba:8b:58:ea:f5:b4:2b:89:2b:ea:
9d:a7:03:2f:c3:34:c1:6e:6d:46:b2:85:ad:64:de:
f9:44:d5:db:26:b1:d8:fa:96:c3:a3:56:ca:5d:50:
57:29:1f:dd:7b:ba:b7:d1:3c:2e:d9:48:da:12:a0:
8d:1d:80:58:c3:8e:c9:0d:17:80:4f:80:74:8e:a8:
f7:c6:db:6b:18:c1:61:9f:8c:05:24:64:ed:49:1b:
f2:14:d7:50:89:84:a1:79:73:69:75:f7:2a:1b:49:
9f:db:f1:5c:d3:6b:e0:44:5c:0b:87:29:ab:d4:18:
76:a0:3b:e0:2c:be:f8:b1:cc:7f:df:e2:3d:73:53:
7a:cb:dc:3d:36:7e:dd:db:6f:f8:49:1c:d3:d1:f1:
8d:47:46:86:ef:08:85:bb:3a:d3:d3:b9:4c:db:f2:
c7:76:d7:d5:45:43:4e:aa:c0:1f:b0:47:c2:34:a9:
29:2a:3e:3c:dc:64:2d:00:7d:c9:ef:77:1a:b9:48:
83:24:b3:4e:02:54:42:cc:a3:0c:67:1c:c4:d1:fb:
e4:ac:af:12:a3:5d:19:70:7d:a0:4d:59:a5:c8:b1:
c0:f2:42:e6:ae:e3:b3:9d:d8:9f:a8:34:83:4b:ac:
cb:f5:9e:7a:89:1d:9c:96:13:1e:46:cc:21:8f:53:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:F6:D8:73:12:1D:B4:A7:70:46:CA:24:0D:2F:BE:57:90:53:DD
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:08:20:26:ce:96:db:31:4c:db:d8:46:88:58:a5:e2:83:f3:
25:f8:53:48:f7:c4:e7:17:3c:e8:9a:5b:c6:8e:45:e3:e4:0f:
51:33:87:d0:c4:1f:06:8a:35:ea:e3:ab:48:36:44:38:47:dd:
bb:44:4a:0a:87:64:b7:91:3c:e2:1a:46:2c:52:41:65:9d:ab:
67:8a:e7:24:19:b8:29:b1:80:7d:38:22:93:c2:d1:a9:b8:e3:
fc:66:c9:15:b3:31:10:d5:c3:bf:6f:6d:80:68:86:04:41:64:
90:a2:4e:82:87:bb:c0:65:55:cc:26:04:64:ad:7e:f6:5a:24:
72:9f:bc:33:ac:74:63:d2:c1:f7:c7:99:3f:59:4d:9a:5f:2a:
d4:49:80:ce:2c:96:63:ad:ca:c9:13:3e:9b:55:22:ee:85:7b:
de:82:64:bb:38:78:ff:ea:27:39:ef:b9:fd:20:4b:d0:32:a4:
70:76:47:82:90:aa:10:6d:02:1b:cb:8a:a1:27:9a:0f:56:68:
c9:aa:17:e7:01:cb:75:c5:41:f4:54:55:8b:5b:a5:b5:3a:32:
dd:fe:af:55:06:67:bf:2a:2e:f5:8e:89:55:b3:fb:b7:b7:6c:
0d:47:16:cb:52:72:1b:00:de:84:5c:8b:9d:a4:fe:c4:db:01:
3b:b3:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:17 2025 by rpki-client