Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: 2BHVHJLU96zvO0aM9DPxFkYi0vSFJhBv72YrnIt/EvE=
Subject key identifier: F2:7C:F2:F1:9E:38:3C:8A:8C:E6:65:B3:CB:B3:B9:48:C5:1A:B1:30
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0194BC04DD8EC0DCB83B1D498D7FE65B041D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: t/IRDz/U57TnUtmEpqRwA7PoSwAgdruO1OCx1OtEpvI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dd:8e:c0:dc:b8:3b:1d:49:8d:7f:e6:5b:04:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=f27cf2f19e383c8a8ce665b3cbb3b948c51ab130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:1f:17:70:88:e5:09:49:5d:f3:d6:5b:a9:
1c:67:d3:a6:64:ab:87:8d:d9:f4:c3:96:16:b1:fa:
30:dd:5e:1d:d8:b3:e3:7b:68:b6:e5:e7:11:8a:ad:
3b:c0:fe:42:62:bc:85:8f:ba:7b:01:55:6f:a2:ed:
72:0a:ee:5d:b5:a0:00:45:cf:a2:81:e8:6f:9a:60:
78:e9:f0:aa:55:2d:ca:e4:dd:fc:34:04:a5:c6:7c:
85:5c:40:41:54:df:cc:e0:d5:59:3b:9a:37:f4:77:
1f:eb:de:c0:44:b2:1b:5c:38:c0:1c:41:b9:ac:17:
4a:51:c6:e5:85:5a:51:b6:00:2a:d6:0f:ec:27:d7:
e9:7c:3a:c3:0a:30:ee:84:79:b2:6a:b4:a6:76:6d:
07:aa:9e:fa:c8:47:7e:4f:e0:a5:b3:09:fe:e8:4f:
6d:48:dd:d6:16:2e:ca:71:3c:17:eb:ec:d8:ec:7d:
6b:fb:9e:64:8c:71:68:15:8d:27:c6:c6:5a:84:43:
88:3b:9a:db:17:d8:20:4a:f1:3c:f1:86:26:c5:21:
ed:f6:bb:fe:f8:18:89:f8:cf:ca:ff:97:88:cc:e1:
33:a9:92:bb:ad:79:d3:51:ea:0b:9e:d8:15:72:59:
48:ab:ac:78:aa:60:99:ca:d9:3f:f3:6a:23:e1:ba:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7C:F2:F1:9E:38:3C:8A:8C:E6:65:B3:CB:B3:B9:48:C5:1A:B1:30
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b9:d1:82:e8:5c:78:40:d3:2a:3f:c7:22:58:2c:94:a4:55:
d4:9a:f3:9a:7b:d7:69:74:b1:7d:9b:c3:ed:ef:34:3f:0e:7d:
ce:86:d3:1b:f6:ea:5d:aa:1a:47:73:a7:da:77:e5:1c:1e:15:
08:db:00:7b:86:37:00:1d:51:2d:42:29:89:6f:dc:a8:85:fb:
df:7c:81:db:d0:33:48:83:3f:e3:31:0a:d5:fa:4f:44:d3:f2:
4a:5c:9e:d9:6b:64:df:58:db:fc:dc:d8:7b:f4:4d:7d:2a:38:
ba:87:48:8d:9d:05:0e:a9:8e:9e:97:5f:82:7b:ca:e4:1e:46:
67:8c:de:a2:82:3a:95:e3:76:33:c6:1e:82:bd:69:77:c4:8c:
09:2e:69:cc:80:9c:d4:64:6f:db:d9:2b:15:73:35:8e:b3:c4:
5d:06:38:aa:3b:88:bc:b9:df:79:b6:d4:9d:16:ca:a2:69:35:
6f:35:ae:1f:8a:16:d0:f4:72:da:f2:83:c6:80:34:3f:ec:b4:
4d:84:e7:6d:fd:ac:bd:8e:10:18:a8:d6:99:42:a1:70:d7:7b:
69:5f:eb:32:7f:49:f3:b4:22:fc:6d:17:31:09:48:7a:0b:6f:
5a:9c:76:e1:04:8b:07:99:2e:a3:41:ad:ad:b0:50:83:b7:a3:
3a:d7:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:11 2025 by rpki-client