Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: QxPpwugMOWmXc6u1HUMv4Q1oaMPUeCo3GqkrKmvaZ/g=
Subject key identifier: 02:4A:64:5D:0E:3A:A0:5D:9A:D7:E8:BB:34:4D:85:3E:C2:61:1D:0A
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0194BCA9E77685CA7380BCB59FB451233F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 0E65
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: X0+qOAFviA2BBg6WGRwTNgXzcE/HfzHB0trJhFOILO0=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e7:76:85:ca:73:80:bc:b5:9f:b4:51:23:3f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=024a645d0e3aa05d9ad7e8bb344d853ec2611d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:1b:2c:ae:9c:97:d4:83:c9:61:0b:34:b5:
26:1b:28:cc:45:50:63:39:10:88:f3:63:d8:d9:e6:
9b:c6:f8:09:90:74:07:ce:ba:c8:04:ba:33:3e:12:
55:03:82:36:87:5e:b2:94:ce:8a:26:ff:61:a1:49:
87:c4:97:3f:b1:09:4b:51:65:a9:6c:a8:95:62:4d:
f6:c8:b1:12:db:c3:cb:cb:f0:e0:e1:1e:95:0d:ad:
cf:e7:9f:a0:b2:a9:40:32:07:a7:ff:fe:00:52:03:
f2:91:8f:e6:d7:e3:1b:5e:22:cc:76:69:d3:eb:59:
7f:79:b7:cf:49:9b:7e:47:c3:c1:4a:f2:28:27:db:
1f:4f:dc:fb:34:cc:c6:e7:b9:dc:ab:1b:ad:6d:ee:
f9:23:d0:63:48:14:66:87:12:e1:85:bd:1d:da:de:
8a:88:d4:c5:15:ac:6a:ae:b6:55:0e:c5:1f:ab:ff:
d3:89:8a:b1:84:cd:6b:ac:d1:f0:70:fe:89:49:37:
7f:69:33:11:9e:9f:6e:52:1d:5e:5c:8f:19:ef:65:
68:d9:c2:32:48:a3:39:99:7b:96:00:1a:4e:ce:08:
85:50:39:af:36:fb:c7:e1:d2:24:71:62:37:f8:20:
70:8b:d7:d0:15:77:1c:28:63:f0:17:2e:34:42:69:
f1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4A:64:5D:0E:3A:A0:5D:9A:D7:E8:BB:34:4D:85:3E:C2:61:1D:0A
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f5:48:1d:13:41:04:1b:11:62:e4:93:ce:5c:2d:8e:c1:66:
c3:8c:82:30:45:90:5c:b8:14:96:d0:d1:17:70:d3:b2:4b:4d:
ed:08:93:97:6e:10:bf:5b:79:ca:cf:f8:f3:a2:9c:c5:83:0f:
57:51:80:cf:18:b3:b9:67:47:23:d3:e9:24:bf:8a:5f:b4:87:
07:33:39:db:c3:20:97:50:15:58:a9:81:5d:b6:0f:f0:d5:54:
d9:af:37:d3:0f:ca:6a:5b:71:13:d1:a4:b3:a2:9d:62:e5:5e:
c0:68:05:4d:ff:ad:7e:19:24:eb:08:1a:67:54:34:4b:5b:d0:
6b:1f:df:0d:cd:f7:40:90:29:9e:2e:55:74:6e:94:36:2f:15:
05:ac:e6:2f:b8:be:71:df:83:33:f7:ec:b5:60:af:96:54:d1:
a3:c1:a0:13:ed:4e:ac:c3:2e:c1:18:f3:d3:23:c4:f9:a3:0c:
fd:36:31:c7:f5:a2:32:7a:fe:33:a5:dd:ef:d3:52:24:db:b2:
33:21:a0:7d:68:63:0c:cf:1b:9b:6c:45:79:53:ff:59:39:17:
b5:73:7d:b4:1c:db:be:cc:6c:28:b8:8d:80:de:46:27:86:36:
62:05:97:8d:fe:0e:24:64:02:11:61:b7:53:4e:e7:e5:c6:67:
c1:f5:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:56 2025 by rpki-client