Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
File: iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft (raw, json)
Hash identifier: DGgmXNRe3/m5WZGlxqUuNORZ6Ov+NJfPVmYJkLeCgP8=
Subject key identifier: 41:6C:FB:0E:8D:4A:3C:D1:46:76:BB:D7:10:06:FD:85:78:E1:0E:DD
Authority key identifier: 89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
Certificate issuer: /CN=896d5866c35093352e7b9e0762c591e08e50f967
Certificate serial: 0194BC3BCE969D79780B23ABE318445A9806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: f3yhbMEZs7I1gQ_x-WS9JokM5lk.roa (hash: xqftVmU39BBrdEog4IYR5U/f0pT7cwZITaktIflO1FQ=)
2: iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl (hash: HB7uzUEK8DKHtU3moI/kEtysTyjgVAxtrZTVqMvz03M=)
3: t3t-pfr4z9GKajIg-Z7_EPV6sNk.roa (hash: uoY/pW5jXoKIZBICE3itvMsyp7LXbbd5XR575s2v/qM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ce:96:9d:79:78:0b:23:ab:e3:18:44:5a:98:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896d5866c35093352e7b9e0762c591e08e50f967
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=416cfb0e8d4a3cd14676bbd71006fd8578e10edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9c:4a:c5:2e:b4:64:fb:c2:86:d3:23:10:24:
3a:7d:b5:fb:d3:e8:f7:35:be:eb:71:3d:bd:e8:79:
05:45:01:2b:b4:95:52:13:14:f9:5f:25:22:f1:33:
0f:72:36:33:5b:16:a5:46:61:6a:32:bc:94:19:80:
f4:58:16:8e:82:58:31:ea:db:3f:2c:b9:5c:c4:3b:
df:81:bc:25:44:4f:c9:30:a8:6b:76:8b:6b:74:11:
ea:7a:10:67:d2:bf:26:5d:e5:d9:d2:50:a5:4a:47:
a1:eb:b5:81:56:b9:53:c1:1c:e1:7e:38:8f:28:b8:
96:b7:b2:2a:15:7c:39:89:51:36:ac:e4:d9:5e:59:
79:96:b0:2e:a6:12:23:b8:6f:27:79:d2:bd:47:06:
37:e9:9a:37:43:4e:c0:13:eb:48:c4:6a:9e:1f:85:
b3:01:d8:d7:e6:27:2f:5a:d1:fb:de:c0:ed:ae:ea:
c8:b4:62:7a:3c:72:7f:a5:66:ba:89:48:2b:07:08:
58:11:26:95:1d:e5:78:ae:7e:8e:39:70:ab:d3:bd:
c2:c7:a0:80:00:c9:9b:86:6f:69:03:4a:f0:ae:0b:
f4:f0:64:c3:48:55:f7:c5:96:50:4b:3d:f8:84:4c:
66:08:d3:90:1e:15:f6:a1:5c:38:59:6d:f3:78:a1:
5a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6C:FB:0E:8D:4A:3C:D1:46:76:BB:D7:10:06:FD:85:78:E1:0E:DD
X509v3 Authority Key Identifier:
keyid:89:6D:58:66:C3:50:93:35:2E:7B:9E:07:62:C5:91:E0:8E:50:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW1YZsNQkzUue54HYsWR4I5Q-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9d8f21-b27f-435d-a7b5-784624a7b47e/1/iW1YZsNQkzUue54HYsWR4I5Q-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:80:ac:0d:ef:49:ad:8d:d3:c5:f6:12:cc:cb:13:10:d7:69:
6c:2b:28:a4:f4:dc:c4:88:11:f5:f7:7f:81:3d:e8:6f:f8:a5:
8a:6a:aa:aa:71:6d:53:73:27:b8:ba:93:f9:1d:28:e7:12:a5:
51:54:b1:53:98:22:aa:4a:24:43:ee:33:8f:7a:c8:c7:26:d5:
85:ce:ff:53:43:1a:2d:bf:e8:6d:4c:be:82:20:0c:96:33:10:
ed:58:da:e9:19:6f:3b:aa:a2:11:20:5a:d7:f7:39:76:cc:f9:
af:b8:49:2b:5d:94:60:5d:d5:7f:3e:17:1a:fd:02:92:fa:6e:
45:2c:71:08:7b:8c:84:81:10:ec:ca:18:3f:19:98:eb:dd:93:
53:c9:e8:95:b0:6a:b9:5a:3d:df:47:2a:42:f0:54:8d:9d:79:
9a:81:c1:e0:1a:18:f9:31:bf:60:9f:50:b9:24:2e:62:00:36:
6f:bf:dc:e8:af:3c:e9:b3:e4:61:c2:ef:5a:34:7d:c3:6c:09:
fe:cf:3f:64:8d:f8:f2:05:27:de:4b:dd:f7:fc:6e:8c:9c:bc:
17:3f:fa:92:5c:99:66:06:5f:e1:8d:7a:5f:d2:46:c3:e3:4e:
2d:c5:f1:f5:83:c4:2b:f4:88:cf:3c:6a:b3:77:93:df:d2:cf:
8b:3b:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:45 2025 by rpki-client