Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
File: IfwUL311pxS5rMZT0LXO0zfKRJU.mft (raw, json)
Hash identifier: acGK6FtD99Y0+p3m6cyX/icCVbnuld2PIWN/4o5Cr04=
Subject key identifier: 3F:9A:16:C5:B0:AE:CB:1B:8E:38:80:D5:06:8C:E8:D3:04:B7:3B:55
Authority key identifier: 21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
Certificate issuer: /CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Certificate serial: 0194BC72F01193C32D0B27739D0BEB217137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: IfwUL311pxS5rMZT0LXO0zfKRJU.crl (hash: VHMElZg1NLcxuNIZs+pH9uMgr2Q7sMGNCtbuCWzEpsA=)
2: UipKreH4zZ-JKObDVFkMEdQTy8E.roa (hash: 2lFb7AbIOkpByp+mzj8V6olwzUC3cjME2INFe+siQFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f0:11:93:c3:2d:0b:27:73:9d:0b:eb:21:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21fc142f7d75a714b9acc653d0b5ced337ca4495
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=3f9a16c5b0aecb1b8e3880d5068ce8d304b73b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4e:81:44:0a:8f:65:c1:24:cc:dd:3c:ff:85:
3b:b4:ba:82:6f:23:a6:7d:0c:fa:59:83:ff:fa:be:
6a:1c:a7:35:ba:00:d3:0b:84:9d:1d:8c:5f:53:f8:
d9:17:02:99:53:30:bd:79:f9:e7:e7:dd:62:2b:6b:
fa:d4:3c:cf:fe:d0:44:4a:ec:67:fb:56:73:31:f0:
3e:d3:72:c5:46:51:a9:2f:83:f5:b3:d3:49:44:52:
ee:a4:ae:5b:b3:d2:38:4d:18:e9:13:8e:e2:79:b4:
2a:59:c7:a2:3a:3a:92:81:3d:42:66:ce:23:c6:d3:
df:19:12:b6:58:8f:4e:30:71:bc:8a:ee:02:1a:6e:
13:c5:76:62:57:c7:01:53:8e:e4:7d:be:30:09:99:
de:61:37:01:3b:8e:f1:1d:8b:e4:cc:84:6d:ed:29:
f6:7f:11:25:da:d8:fc:75:b0:6f:57:15:e2:40:39:
54:50:dc:95:ea:9e:5f:85:d9:e9:54:6e:40:73:82:
b5:90:fa:8a:2a:0c:e2:8b:52:c8:7d:39:8d:fe:1a:
08:0b:97:c6:e1:df:e3:5f:11:08:b6:dc:3e:65:1c:
87:f8:b8:52:bf:8b:7f:0c:e2:72:ff:31:2e:a6:87:
62:c0:c2:5d:cb:86:e5:39:1b:39:83:cd:17:cf:77:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:16:C5:B0:AE:CB:1B:8E:38:80:D5:06:8C:E8:D3:04:B7:3B:55
X509v3 Authority Key Identifier:
keyid:21:FC:14:2F:7D:75:A7:14:B9:AC:C6:53:D0:B5:CE:D3:37:CA:44:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfwUL311pxS5rMZT0LXO0zfKRJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/490c50-6c07-4646-9bd2-8cf115aa2cc3/1/IfwUL311pxS5rMZT0LXO0zfKRJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:72:74:03:70:eb:b4:b0:d9:da:38:60:5c:1c:d7:f8:ff:
5f:ff:40:0e:25:41:4a:f9:09:3d:bd:cb:25:70:3d:e7:57:e4:
65:74:6f:7e:81:1f:d2:f7:8e:c9:01:7f:d7:36:01:1a:69:8f:
f6:25:06:57:b8:5f:6b:f8:f3:9b:9d:77:8f:9a:50:04:39:43:
ce:0d:4a:e4:e4:34:70:aa:95:a5:6b:67:15:ff:75:c7:21:ee:
44:da:f9:62:dd:fb:67:36:30:cd:c6:39:89:04:82:ce:4e:f1:
09:cc:d6:1a:4c:91:a7:84:25:ce:a5:33:ea:a4:20:99:ea:e4:
25:8b:c5:b9:02:01:29:b5:94:5b:c6:d6:09:3b:0f:b1:60:aa:
23:97:45:c8:18:c5:ab:ae:77:63:66:6c:2d:96:6a:eb:71:2a:
8c:e9:c4:74:60:ab:57:62:93:50:1d:43:5f:1a:5d:53:c9:da:
de:85:a0:c2:82:ca:e0:4a:58:42:52:e5:e5:26:7c:34:b7:4f:
e4:c1:1c:7f:7a:a2:a7:b3:9a:8e:36:88:c0:4e:58:df:47:c0:
2b:b3:41:ea:82:3e:e6:49:b1:10:00:23:d2:b8:ae:b1:67:c1:
47:8d:8f:fc:40:eb:2c:af:55:10:ea:96:ab:75:46:76:ab:01:
f4:65:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:59 2025 by rpki-client