Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: DLXtbpHvSxHIqIbKspBxrqoHALrRDA68uKs4eyBZlg8=
Subject key identifier: F1:C4:72:68:3B:31:1E:3D:86:9B:76:71:EE:32:4D:18:3A:43:79:2F
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 0194BD4E5914E59EBBD3A01C5916220A9637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 0F5B
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: 4rP5qUfZZdEzi31v/KbxufeFLeNeoqlB15vmWrtpM48=)
2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:14:e5:9e:bb:d3:a0:1c:59:16:22:0a:96:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=f1c472683b311e3d869b7671ee324d183a43792f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:fd:22:2c:6d:99:f5:bd:1a:0d:eb:b5:66:
f8:31:3a:75:06:e7:50:1f:1e:a9:e3:94:84:76:07:
9e:5f:26:42:a7:09:da:f4:f4:94:4e:5e:5f:5e:a6:
ed:05:62:6e:ee:4a:c7:9b:28:52:4a:2b:fe:1e:ac:
70:47:3d:87:0e:0e:78:62:ed:67:ea:3a:8a:1c:61:
19:e2:dd:fe:07:53:14:a2:e4:7b:06:4e:8a:d3:1e:
35:5e:82:22:2c:13:09:01:51:ab:76:f8:3c:6a:75:
e3:6c:7f:7b:80:04:6b:4c:aa:11:14:05:1a:55:d3:
8f:47:7d:ec:29:90:7e:b4:40:3f:db:24:17:23:5f:
cf:57:ad:76:68:de:f8:2f:bc:6a:cf:e7:a0:50:bd:
b5:d0:ce:dd:9e:0a:48:ed:d7:75:91:14:8c:85:f7:
13:9f:63:d0:6d:36:b4:fd:f1:a1:c2:b2:d8:5b:c3:
4f:5f:8e:47:4d:57:5f:b9:dc:b4:2a:02:90:f2:36:
2a:84:34:ea:73:20:51:0c:eb:77:1c:08:94:fe:7f:
4a:52:97:86:c9:10:3d:b6:25:94:38:ac:41:71:4c:
46:38:52:6e:df:30:e3:03:67:07:ba:05:27:ed:35:
ba:0b:49:52:1a:27:38:f1:50:5b:68:43:86:01:ac:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:72:68:3B:31:1E:3D:86:9B:76:71:EE:32:4D:18:3A:43:79:2F
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2c:28:e5:d6:b7:bd:b5:fe:aa:e0:e6:0b:07:8d:e7:5d:82:
b2:79:35:63:73:c4:c7:10:ef:09:08:36:86:6e:db:57:20:c6:
a6:1c:d7:d2:c4:29:ab:7b:30:9e:7d:f1:7d:73:b3:a8:d3:34:
76:59:57:9f:51:12:a8:55:af:ed:12:8e:b1:0a:f9:d9:95:e9:
2f:5d:e2:da:04:d0:c7:e5:f8:82:31:2a:7b:f2:3c:a2:ba:e0:
db:cf:4d:2d:e1:d4:a2:6a:b2:ee:e2:c4:cb:3e:da:4f:d5:6b:
16:df:eb:3c:de:52:e2:6c:fa:05:a1:88:12:0e:dd:08:71:5f:
20:cf:fe:0c:36:7f:bd:c0:1a:2f:9d:b4:65:a4:b0:1f:8a:e6:
f2:76:bc:8b:0c:7f:e6:f7:67:29:83:fb:94:4d:00:17:d2:aa:
6f:14:1f:c8:5b:6a:6a:5d:31:7c:8c:33:07:1e:33:cf:86:2d:
9f:bd:f0:70:a7:cb:73:43:c9:5f:44:40:ca:f4:58:a8:49:d6:
d0:f5:80:5f:1c:1a:6b:8c:a3:f9:83:4e:cf:97:e4:61:62:1e:
b0:9b:e1:a0:c9:33:46:d7:f5:09:90:90:bb:bc:a9:0d:a4:a2:
c0:2e:54:d7:2d:ec:70:cb:2a:4c:cc:bd:a8:d7:26:a4:fb:83:
df:d9:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:10 2025 by rpki-client