Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: xdFzcLLxPKnUWag0LWgm7goKfcbo10kq+VIyjfeSq1k=
Subject key identifier: 9F:D3:8B:09:BD:9F:43:58:D6:41:16:00:8C:FE:6A:3B:BD:52:47:74
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0194BC3C23A9FE67833CA1C357947755D920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: AXHyNg3XK0ypgZkYAjwGRT5i9QWrqmu/VL22M8syb7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:23:a9:fe:67:83:3c:a1:c3:57:94:77:55:d9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=9fd38b09bd9f4358d64116008cfe6a3bbd524774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:f3:5d:c7:de:ba:93:25:ca:fb:81:94:4f:
1c:5a:21:20:97:4e:33:a8:e7:e9:df:57:e2:d1:dc:
12:e9:eb:d6:d4:3a:49:d8:11:5e:4c:4f:d0:06:53:
e3:0c:9b:70:3a:fa:69:fc:98:dd:21:c2:ac:b7:04:
f0:66:80:85:a2:37:6f:38:f5:fe:8c:84:b2:22:8c:
f8:58:9e:d5:f1:15:f9:c3:48:37:4f:e2:c1:7f:bc:
a0:15:4a:b5:6b:73:6b:48:68:8a:20:92:54:f5:87:
bf:58:61:d5:06:44:7b:40:6e:d2:45:b8:20:23:3e:
fd:19:0f:81:f9:c6:eb:b3:ec:a9:b6:09:4c:a0:ff:
98:33:fa:59:1b:42:b5:1b:5c:b2:a9:57:be:6d:57:
c4:74:bc:31:ee:08:f7:d5:47:a7:5e:7b:52:25:8b:
d9:f5:3c:f4:bd:de:5b:2e:83:37:c3:5b:cf:72:07:
23:da:c2:9f:b2:24:6f:7c:ba:76:33:2f:32:d7:42:
2c:0a:b3:c5:b2:e6:db:63:dc:a3:18:40:56:6a:47:
5e:0b:10:00:86:17:ec:6f:b1:45:9f:9c:9a:5c:1b:
ac:82:7f:89:95:28:9c:5a:ad:92:88:dd:f6:e4:b9:
05:1c:cc:ce:79:c6:e5:ab:8f:aa:c0:b9:60:0c:66:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D3:8B:09:BD:9F:43:58:D6:41:16:00:8C:FE:6A:3B:BD:52:47:74
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:21:88:6d:6a:3b:16:e8:dc:f4:45:6e:39:47:68:d4:77:ad:
7e:b8:be:97:98:e2:73:6b:0c:fc:b3:ce:db:ab:44:89:ce:72:
fd:86:8e:9d:7d:b7:3f:86:41:4e:8f:4b:b3:78:7b:98:15:c2:
e9:30:7f:1c:97:00:9d:1f:fa:8e:93:88:a0:0b:a1:02:f3:2e:
84:1a:45:93:6b:9f:01:02:73:84:12:53:a2:fd:ba:96:59:a6:
51:85:f9:8e:16:ad:9f:8f:8c:f5:0e:81:c2:64:47:bf:23:44:
63:f6:a4:ac:4f:f5:ab:60:c9:4a:69:37:16:73:78:0a:62:d0:
30:8e:3b:b1:3d:e5:1b:ee:8a:fc:a5:89:92:b7:50:c3:40:b4:
31:44:48:e7:b8:31:d5:22:24:4a:41:df:71:f8:f4:88:1e:a6:
91:26:62:8c:39:52:26:77:e3:a3:3b:b7:2c:e3:01:89:b8:2e:
fa:2e:7e:a6:bc:9d:ff:b1:a4:e1:6d:3e:e3:8d:17:ec:06:33:
ac:cb:ba:52:c5:51:d0:1b:b9:1f:bf:31:00:5e:ee:90:41:89:
4c:86:39:02:34:62:38:92:47:80:c8:0f:b5:ba:1f:4c:b5:66:
16:91:5a:e9:02:1a:c5:cf:d7:2a:cc:b8:50:00:59:f6:df:4a:
3e:46:e5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:40 2025 by rpki-client