Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
File: IYssahphoXurfAMggKo78kR4tt0.mft (raw, json)
Hash identifier: SKoAvrWusyD+WHcnCPfo9+2bKcw7wqIjxvzfuWrcYow=
Subject key identifier: 30:9E:40:7D:EA:93:7F:0A:B3:0C:67:A8:B1:76:A7:ED:36:E8:AC:2F
Authority key identifier: 21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
Certificate issuer: /CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Certificate serial: 0194BD8574BF77C33EB6316E8F3A5F66FB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
Manifest number: 0AE5
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: IYssahphoXurfAMggKo78kR4tt0.crl (hash: VOui45fGSVvkBteMRBDnh49ztgvFD2/VZyyxaZR8Mx0=)
2: wnACGaMKOrsg5i1-6PAAx8VKQ0Y.roa (hash: kxRyBHTXArEsk0qrBdKwIl2FB5x6O/p6TWut1bU4JRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:74:bf:77:c3:3e:b6:31:6e:8f:3a:5f:66:fb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218b2c6a1a61a17bab7c032080aa3bf24478b6dd
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=309e407dea937f0ab30c67a8b176a7ed36e8ac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:c3:9b:20:72:25:8e:6e:89:a3:ac:2b:ea:
7d:d3:62:24:3d:5b:f0:f7:1a:fc:87:d1:32:ce:b7:
f0:8c:33:6e:07:ff:8a:48:be:68:66:f6:52:06:43:
82:13:06:60:a6:3b:eb:e0:5f:48:80:22:1c:81:c2:
af:89:f1:d1:27:86:94:90:70:77:8a:f6:89:e1:f8:
fa:5c:7a:60:b7:d9:4a:05:96:5c:6c:77:6e:f0:ee:
20:14:69:58:be:d0:78:1f:fe:d4:d5:75:80:d2:6a:
45:93:81:08:32:57:65:f2:f3:a8:ae:df:6d:f4:47:
03:63:b0:5b:ca:f9:1f:df:2c:3f:e1:70:30:64:1e:
8e:75:7f:ef:79:41:e8:98:3e:a3:ec:48:7e:bb:d5:
b2:af:3b:5d:d8:e2:ae:1a:43:5d:51:ae:52:88:9b:
8f:e2:8e:57:92:a4:2e:ec:8d:32:32:f7:80:3d:18:
39:ee:e4:43:a3:03:75:70:cc:8e:57:e3:dc:1b:b1:
b7:fe:d5:45:69:e9:44:91:52:52:dd:4b:9c:ed:2f:
8e:d2:0e:46:60:d7:98:ee:da:cf:7a:15:2d:03:54:
c6:3f:9d:18:b4:53:83:4f:53:4e:75:c2:01:69:dd:
49:22:46:98:dc:93:0f:a8:87:b0:c6:7a:81:96:3a:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:40:7D:EA:93:7F:0A:B3:0C:67:A8:B1:76:A7:ED:36:E8:AC:2F
X509v3 Authority Key Identifier:
keyid:21:8B:2C:6A:1A:61:A1:7B:AB:7C:03:20:80:AA:3B:F2:44:78:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYssahphoXurfAMggKo78kR4tt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/849140-c853-48cd-9a84-b993168bc593/1/IYssahphoXurfAMggKo78kR4tt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:59:a3:57:90:03:11:4f:8e:4a:32:91:ca:6e:08:ad:12:25:
b2:46:4b:dd:18:fd:57:fb:fd:b2:7c:f9:20:f4:08:de:0f:fa:
60:b9:71:33:80:47:7f:c7:e5:cc:52:78:a8:80:3d:a5:04:33:
23:62:e2:d9:d8:16:39:6b:8c:a2:7b:da:26:00:86:63:49:ca:
b4:99:0b:00:2d:79:49:57:d0:25:e2:a7:9d:02:a6:a4:df:b4:
23:2b:ba:1c:af:ad:bb:a2:a9:0a:fa:be:b5:d2:da:fe:ee:cd:
1a:2a:d5:98:13:4b:bb:f2:a1:15:12:23:3a:c7:55:7b:1a:68:
a4:9f:8c:fa:ce:44:c9:8f:54:f0:5d:ac:33:93:ba:02:1d:42:
a5:a2:53:e1:a3:67:0e:d0:49:e5:9c:a3:d0:23:4c:a7:91:b9:
b1:d5:3d:f5:c2:69:2a:33:b2:ae:7d:ee:3e:b1:3c:01:01:df:
a1:9b:f6:94:4a:00:27:54:14:88:b4:f2:6f:cc:77:e3:77:b1:
ea:45:f3:d3:6f:fe:8a:d5:93:a6:c3:89:df:61:26:3b:13:85:
d2:b2:4d:da:56:db:f8:c3:bc:4a:b2:12:be:ef:01:4a:ee:03:
2e:e6:d2:da:0a:d8:99:97:e8:19:98:d2:4f:10:67:59:eb:29:
b5:84:8a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:53:17 2025 by rpki-client