Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
File: IPUwckL-PJUyezIgodpb_9ElJP4.mft (raw, json)
Hash identifier: k8zgNTXbDmzeAt6UXQRKng1M+mFJ7zS0K8itNeWUjR8=
Subject key identifier: 10:E0:25:5F:C2:88:19:81:D1:14:4A:50:C2:E4:B6:7E:AE:E4:4E:B8
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 0194BCA9B4E26E68952B1B5B736D1388E144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: IPUwckL-PJUyezIgodpb_9ElJP4.crl (hash: uQb+2VieGMUeaYknopUpBMW5sDHzACHsXyA2Cx9W6Bw=)
2: Qa4JMIgPu5wL8OC2dk4UB5DnRYo.roa (hash: X6xGAAT5bKpyoabeTbBzbbLe23OVwiADFdpeDzqtwqo=)
3: tdTzvtLmLzsGpDsb_-eId6PoDIw.roa (hash: egeKGNdydr92Gcv38VGJLrGB08MiJTSLDukje+DoTiM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:e2:6e:68:95:2b:1b:5b:73:6d:13:88:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=10e0255fc2881981d1144a50c2e4b67eaee44eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:1f:df:f6:6d:da:15:88:ff:b9:d0:51:a6:
63:29:2c:47:6e:aa:06:07:48:b4:ba:92:64:a1:41:
96:b9:cf:be:fb:9d:ed:d7:6c:69:03:95:fa:c8:1d:
bf:e4:7a:25:b1:dc:87:f6:f5:23:d1:58:be:a8:13:
57:e1:af:7d:77:b1:69:0b:08:05:bb:cc:fd:0b:7a:
c5:24:8e:cf:f4:0b:23:33:47:47:43:ee:e2:6b:44:
c5:1c:1e:49:3e:1f:d3:09:f8:ff:3a:73:a5:5c:0b:
96:cb:90:29:4f:64:20:90:75:73:d4:d7:0a:7a:ba:
bd:c7:1e:86:38:30:d1:9d:b4:19:eb:b0:d5:d5:02:
c7:e7:34:30:57:91:94:75:0b:4d:3f:52:e3:e7:5f:
0b:d8:c7:9a:6f:bd:19:0f:6b:6d:e7:6e:18:2e:0c:
a9:71:bb:07:47:e7:80:9c:b7:02:8e:ad:6c:09:ac:
d3:26:d5:f3:d9:6e:57:88:fb:24:e2:dd:03:fd:e5:
94:0a:e8:a1:7c:88:82:af:d9:e4:90:80:2a:bf:cf:
d6:fc:42:a7:d1:2c:b8:4e:80:fa:dc:8c:c7:aa:0c:
f6:4c:bb:7e:e1:30:f4:c4:16:a7:82:ee:9a:d7:00:
e4:cc:c4:c8:06:b3:3c:01:a0:1d:7d:90:a5:7e:95:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E0:25:5F:C2:88:19:81:D1:14:4A:50:C2:E4:B6:7E:AE:E4:4E:B8
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:af:f7:98:ab:4c:29:1f:c5:dc:b3:4e:ba:d3:f6:00:b5:0b:
05:15:10:7e:f3:0a:e2:37:53:ac:94:00:0d:7b:00:12:85:4d:
1f:2d:4b:0a:7e:60:05:41:59:8b:51:81:c7:e1:54:13:4b:e6:
6f:56:32:0e:67:cc:f9:2e:36:e0:54:98:d5:26:25:1c:b7:e9:
f8:db:6d:24:9a:f6:75:1f:06:7d:16:57:9c:27:1d:6b:7d:7e:
43:5d:af:2f:e8:64:8c:de:6d:92:f3:2e:5d:4a:b7:9d:49:0a:
75:80:e9:58:a8:73:a8:fd:bf:da:be:f1:b3:69:35:a8:ef:48:
92:59:94:e6:36:9d:3b:36:8e:2f:39:8c:77:f2:d4:58:e2:e7:
73:80:cc:50:04:3b:1c:6b:48:e5:b0:66:91:18:56:99:a7:92:
6c:80:0e:32:bd:23:3f:2e:ed:9b:95:01:16:65:61:3f:cb:cb:
cd:d3:b8:c6:37:80:60:d4:b4:5a:c3:4b:c7:02:14:83:55:26:
6a:e1:95:41:86:24:f5:4f:0c:21:cd:f1:e6:39:bb:0e:d2:d7:
54:69:c1:a6:71:15:65:44:50:35:99:a4:c9:24:88:91:07:cc:
3d:9c:17:cc:61:d3:fa:30:f0:fc:52:c2:3e:16:47:fc:02:75:
3a:59:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:46 2025 by rpki-client