Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: ZCX7zyREohRagVha6JxCI4RljHjjzql4MOjqVg7aGUI=
Subject key identifier: 41:99:CA:97:5E:99:F7:8C:21:45:B6:64:57:FE:52:79:38:02:44:85
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 0194BCAA4A0C7844C5117D83C00DF96BB07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 0A90
Signing time: Fri 31 Jan 2025 14:01:04 +0000
Manifest this update: Fri 31 Jan 2025 14:01:04 +0000
Manifest next update: Sat 01 Feb 2025 14:01:04 +0000
Files and hashes: 1: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: zawzfRJzo5YOzbTHC8vQANc2S/467l2zJ84ZmakoXJg=)
2: yvbz_UH1uJZVqDKchWjC2DbH2u0.roa (hash: A7u8f2W74RMi57K78M26+2R7Yi1xzIaztv6J4Ydr5ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:4a:0c:78:44:c5:11:7d:83:c0:0d:f9:6b:b0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Jan 31 14:01:04 2025 GMT
Not After : Feb 1 14:01:04 2025 GMT
Subject: CN=4199ca975e99f78c2145b66457fe527938024485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:a6:a8:12:e3:88:3a:fc:7c:3a:1f:2f:a4:
25:77:b5:88:ae:7d:44:f5:1a:2d:1f:9d:d5:0b:88:
a5:10:64:5f:6d:f7:1a:f4:67:ed:74:0f:22:87:34:
f0:2c:6e:a5:b0:a0:d7:08:4b:6f:60:8f:51:2f:16:
cb:c4:70:50:5c:ad:17:5e:e3:07:5e:b6:1e:71:b8:
c3:11:22:c6:4c:ef:92:d2:e5:1e:ca:7b:00:1b:47:
80:27:bb:01:b8:f1:93:70:ba:36:b5:2f:96:bf:9f:
24:88:50:d7:72:23:71:77:38:23:6f:2c:22:c8:a8:
40:ee:ac:1b:11:8b:21:9d:90:2b:31:85:06:2b:52:
c9:40:6f:c0:34:7b:1c:dc:5d:c4:7a:07:67:8f:f9:
03:13:da:ee:19:fe:26:7a:1a:37:6c:ae:4d:3c:40:
06:4c:9b:70:52:a8:30:94:52:f8:62:6f:02:d9:9a:
f4:8d:ad:65:57:a0:ae:cc:af:74:64:4e:fe:39:eb:
e6:fa:55:3a:ee:78:47:87:66:76:41:37:0f:61:70:
fe:b7:9c:e5:b9:db:f7:ab:93:db:34:77:42:cc:0b:
8b:94:65:d8:e9:5a:fc:f8:06:8f:04:4b:8f:1c:3e:
95:fc:07:2a:65:49:89:83:31:94:04:01:49:12:20:
4f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:CA:97:5E:99:F7:8C:21:45:B6:64:57:FE:52:79:38:02:44:85
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:80:bf:09:86:93:ee:df:3f:28:7a:ad:1d:3a:9f:86:65:
96:8d:44:2c:71:cf:cf:c3:46:6c:db:9f:8f:56:11:7c:66:f0:
2d:0c:5e:ba:38:93:3d:a7:f7:bd:df:a2:41:83:9a:ee:b9:4f:
83:47:04:65:af:1b:94:23:54:03:9a:b8:7b:8d:de:07:c3:80:
3a:83:00:de:a0:fe:d1:43:ea:66:9c:a9:59:18:a8:76:ac:0c:
d9:5d:a0:f2:85:16:0c:10:71:9c:14:78:74:d3:72:31:5b:04:
9f:60:85:85:77:50:99:7d:f2:19:f6:7a:8a:e5:cc:9e:60:b5:
10:3f:d5:77:8a:a9:ba:64:60:c3:ca:5e:e0:4b:d2:31:5e:f4:
de:79:70:bb:71:4c:3c:db:60:d9:82:87:47:a4:25:3b:26:e7:
52:51:99:c0:a3:92:66:24:4f:26:53:fd:4c:98:2d:3e:7d:7f:
a9:ed:e9:34:74:94:a6:61:b1:b7:e9:92:42:93:11:5b:31:88:
ac:cd:41:1c:40:8f:a9:1c:74:03:23:fb:39:06:f8:23:90:75:
45:33:4e:21:94:8c:31:54:5f:32:74:75:6b:5b:44:59:60:16:
0c:ee:f7:79:82:3c:d7:da:d2:8b:04:23:18:87:ad:16:20:3d:
f1:dd:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:33 2025 by rpki-client