Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
File: IT2HNcFEzxJWWEO2nrQKTRowGqU.mft (raw, json)
Hash identifier: Q/1DlLJP72KbOqrAfLV69lD43Ujo3mWxXGjnvT+t2vI=
Subject key identifier: 4B:52:8A:1C:A0:26:4A:A0:71:D8:5F:A6:4A:98:DD:4F:2A:90:6C:A7
Authority key identifier: 21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
Certificate issuer: /CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Certificate serial: 0194BCA997C9440107C7A982E723182703ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
Manifest number: 0D9B
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: IT2HNcFEzxJWWEO2nrQKTRowGqU.crl (hash: OYLgLjvmniDo2Q9o9ZyapHtv1til439BW5twaY9JGCc=)
2: oYl1-NMXXzEXtTi3L5l80mvOKew.roa (hash: HGKJcqJks4x1KvA9MPs1IeJtaKWdWbE52yFjhD/1Aak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:97:c9:44:01:07:c7:a9:82:e7:23:18:27:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213d8735c144cf12565843b69eb40a4d1a301aa5
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=4b528a1ca0264aa071d85fa64a98dd4f2a906ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:a9:3f:2f:e0:a0:74:cc:f5:29:5a:5e:60:
6a:2d:98:92:29:e3:95:25:d7:c0:1c:21:02:d8:6d:
60:26:09:8e:83:a5:5e:54:93:e3:ee:ee:4c:c5:e1:
bf:06:ea:4f:3f:98:7f:61:90:87:cd:1d:f3:c9:64:
fd:be:8c:ec:b0:58:26:ba:fb:f2:1a:bb:9f:6b:e7:
56:99:a4:70:ca:c3:4d:19:1e:38:4e:bf:07:3f:08:
c8:d9:e2:c4:5e:74:1e:05:96:1b:b8:7a:82:15:a7:
ff:23:bd:8e:49:06:b9:e8:0e:96:ee:f1:27:95:73:
0b:56:d5:35:11:55:3a:08:44:3e:90:a1:3a:3d:5a:
d5:6a:57:13:a0:d1:46:04:be:6e:5d:e7:d4:30:3e:
8c:9d:e2:e5:72:5c:6c:36:43:73:7c:cb:f8:44:3e:
0d:91:52:44:19:2e:e7:16:db:2e:db:47:64:5c:e3:
bf:94:07:d8:24:e3:1a:57:60:a9:b9:2d:22:5c:24:
d3:31:8c:13:ee:5e:17:dc:a2:d5:3a:25:20:cd:52:
f0:e0:29:5b:db:fd:a5:1f:68:4c:26:ad:4d:91:23:
1c:b4:39:06:b4:a5:53:c5:de:e2:cf:84:a3:0c:53:
66:25:8a:51:a3:34:37:70:02:ae:07:09:38:a3:cb:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:8A:1C:A0:26:4A:A0:71:D8:5F:A6:4A:98:DD:4F:2A:90:6C:A7
X509v3 Authority Key Identifier:
keyid:21:3D:87:35:C1:44:CF:12:56:58:43:B6:9E:B4:0A:4D:1A:30:1A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT2HNcFEzxJWWEO2nrQKTRowGqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b043af-b492-4b5b-a250-301433ebe436/1/IT2HNcFEzxJWWEO2nrQKTRowGqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0c:64:5a:a6:01:f4:39:18:18:78:46:f9:b1:a6:bc:71:15:
01:cb:d5:23:ae:81:72:dc:a8:2c:9f:04:d9:59:9f:e1:f1:ed:
ee:fb:e3:0f:de:1d:50:ca:f0:bb:a3:c2:98:ca:c7:c8:d5:47:
96:c1:f3:4d:46:54:2f:c2:c4:48:06:4d:0a:cf:10:f7:54:f3:
a0:39:3e:a8:9d:df:4b:a3:21:fb:68:f8:93:74:49:87:2a:52:
3f:9d:4a:5e:40:65:73:5e:5e:75:97:74:d2:3e:1c:3e:f0:c0:
83:ab:da:57:f9:67:e5:e6:e6:cb:33:9d:a0:53:2c:9f:75:b0:
b2:84:3d:e4:14:c1:58:84:24:df:bc:98:b7:7c:c1:72:04:37:
8b:c4:7f:99:1b:c1:13:68:08:43:12:17:c9:fe:74:02:e0:e4:
aa:19:a0:47:bc:59:1e:40:95:0e:1c:bd:9e:d3:1c:1b:90:28:
6a:a0:59:8a:e9:53:a8:19:a2:fb:49:3a:83:18:01:30:3f:ed:
02:7e:03:a0:8d:de:7b:33:4d:da:77:17:b9:dd:1f:f6:93:58:
da:be:83:fd:9e:cf:5c:69:be:c9:26:e3:48:58:52:30:b8:0b:
3f:4a:49:7c:37:56:d6:7e:14:6b:64:ac:37:ac:15:01:7a:71:
4c:2c:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:45 2025 by rpki-client