Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File: iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier: 05Qf8F83NWXafh/K4MfxX4N4EHZSldyJM0s9n3xgRkY=
Subject key identifier: D4:C3:B8:DE:96:9D:1C:C7:59:20:2F:F5:10:E4:D0:C1:5C:05:22:19
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer: /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial: 0194BBCE07B8D373E05F1E089028C6E234DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number: 105E
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: YR9oUfcPn7hi-EfIp0zPWNgdoLI.roa (hash: gZUlOd3rhYgj7y7iYiifqKrTqOs4vDy8o9fKugEnj2M=)
2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: gOXRENCvj5EdSm7nn4iF0XDdl2Xx+945wvcelHvnXic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:07:b8:d3:73:e0:5f:1e:08:90:28:c6:e2:34:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=d4c3b8de969d1cc759202ff510e4d0c15c052219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:34:79:77:ad:79:6a:0f:3d:e9:96:1e:cd:
9a:9f:6a:f5:d9:ae:5b:aa:76:57:a4:30:c0:e2:d7:
25:69:9d:38:2e:4e:33:6c:61:f6:17:87:b3:24:46:
12:5f:0e:c1:4d:51:91:d7:7f:c5:46:bd:c9:9f:ef:
e9:50:f2:7b:4c:bf:c9:c3:37:2a:f0:6a:12:f0:bf:
74:f5:76:04:85:4c:75:1a:28:d6:42:4f:32:7a:db:
e4:94:16:d8:2a:50:58:f7:83:1f:82:f8:d9:00:74:
e1:bd:0d:a2:72:9c:58:35:aa:81:5d:65:00:80:d2:
f7:20:7f:3d:2f:f4:a5:d1:9c:5c:90:bd:9a:14:af:
91:34:cc:3f:f2:7a:54:36:31:88:0b:c6:1c:e6:17:
de:27:14:3c:2e:5a:b9:9c:33:e3:dc:eb:f2:08:57:
b3:93:46:64:f2:25:a0:bf:d8:c3:8a:b5:50:70:1d:
13:94:a8:c3:c8:c1:26:81:d5:b1:6a:05:cd:29:de:
e2:93:72:89:c6:6a:62:60:e3:ba:48:bc:e2:45:7e:
1a:56:68:4b:ee:c5:a4:fe:52:d9:b6:e7:5a:dd:ae:
f6:50:2f:11:73:fe:3c:d9:9c:cc:e8:18:10:4c:5a:
24:9d:50:12:c0:cd:95:e3:b6:82:41:ca:3a:50:18:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:B8:DE:96:9D:1C:C7:59:20:2F:F5:10:E4:D0:C1:5C:05:22:19
X509v3 Authority Key Identifier:
keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9e:4c:dd:ad:e0:ac:be:70:b7:50:2c:31:8f:d1:a6:7c:0e:
dc:08:48:0f:2b:a1:42:1a:66:cf:bc:13:e5:a3:12:51:51:db:
4b:64:cc:da:fc:af:44:72:ee:47:3b:fa:98:1d:8c:41:d5:60:
0a:aa:d2:83:98:2f:c3:88:a2:b0:b7:3c:1b:70:67:65:36:c7:
8d:1a:aa:47:24:b1:31:f3:97:85:e4:6c:6b:be:55:73:0a:11:
fa:11:24:06:a7:aa:c7:7f:50:de:f2:58:ea:ce:a3:4c:0c:2c:
ae:4f:fe:19:60:3e:57:05:9b:66:6f:79:8e:68:7e:e6:07:2f:
b4:18:d5:89:f1:af:3f:c3:73:01:f4:70:1f:b7:78:e8:ea:0d:
8a:86:0c:8b:1b:5e:e9:19:3c:fb:1b:15:09:61:3f:6c:9c:19:
40:7d:e8:22:32:c7:7f:84:0d:49:45:11:e8:f2:67:39:e3:c2:
dc:64:99:26:30:51:8b:e7:38:6e:97:79:77:44:23:93:65:92:
fa:4b:b4:ab:5f:61:b1:f3:bc:65:d5:6a:f4:d0:8b:3a:d7:7e:
9e:6f:d4:9d:21:a7:90:8f:7d:e2:73:71:0a:17:1c:92:ff:18:
0f:87:f7:7f:20:1f:51:82:0a:77:13:d8:28:07:58:1b:c3:f4:
e1:19:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:33 2025 by rpki-client