Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: PzRwmtSeGIdaduN2LUhDF6PgSlRrminHyUBbOCV614s=
Subject key identifier: 9A:18:05:8B:1A:29:61:3D:0A:8C:42:70:1C:82:32:AE:58:6C:DE:0B
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 0194BBCED1AABE5EAB3CECED39EACC480537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0466
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: YsbyCZ7zRaf5USOHkizM1pV6K/O+IEOjiS1asB5hUe0=)
2: v5LwLHwuCUZrT_0G6r3v0bfLSQs.roa (hash: +ztaiH2S/aHDtgvKfj/YkXPsW58SyJ9uS27Ej7psyFg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d1:aa:be:5e:ab:3c:ec:ed:39:ea:cc:48:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=9a18058b1a29613d0a8c42701c8232ae586cde0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:de:09:cb:02:3e:67:44:1b:ec:46:ae:50:
4a:24:96:98:bc:5e:80:75:e7:37:44:b8:c0:c0:7a:
02:c6:22:3c:31:71:be:e4:5c:4f:62:87:03:42:b9:
7b:68:ee:62:85:be:54:bb:b7:5f:66:31:f0:cd:46:
d0:79:c2:40:69:96:cd:25:cb:d4:ee:ff:07:2e:e8:
4f:77:f5:82:0e:7d:70:84:3a:a6:6d:9e:92:73:59:
6e:e4:19:2a:20:89:14:cc:da:61:c4:4e:e7:40:fa:
e7:ee:9f:6e:15:92:a1:ba:51:b9:89:90:52:fa:e2:
31:d4:cb:27:78:9a:f4:df:59:0a:27:ab:4e:a2:ae:
af:81:b0:f7:22:a6:0d:9f:73:33:08:76:9a:a3:bb:
ea:ef:07:b3:db:f2:4c:89:79:27:ad:7f:54:d3:e9:
98:65:e1:53:4a:2f:1e:24:47:16:b7:45:b4:6b:8b:
c4:4e:33:81:56:da:b3:ec:cd:4c:fb:ee:2f:40:f6:
49:7f:33:9a:80:52:8c:8e:5c:25:32:a5:1c:53:03:
a7:bb:0e:83:8f:12:2e:93:70:19:0c:f1:1b:8c:57:
9f:52:5f:46:bb:cc:09:0f:91:d3:be:4e:15:bd:9c:
a9:ad:95:91:d5:6a:78:30:db:d4:32:e2:3d:ea:0f:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:18:05:8B:1A:29:61:3D:0A:8C:42:70:1C:82:32:AE:58:6C:DE:0B
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d2:c5:b8:d5:41:3a:b0:e4:ea:b2:2a:a3:dc:6b:ff:c5:a0:
3d:96:32:ed:50:5e:ea:04:d5:44:6e:19:29:48:b4:08:57:84:
5d:de:2a:90:17:72:0c:97:cc:5c:a1:86:e3:bd:cb:9d:ab:5f:
e8:ec:5d:4b:fa:82:39:6f:d8:a7:c0:f7:e6:a3:d3:1f:23:f3:
62:b1:0b:15:63:6a:36:ef:35:ab:00:2a:8e:20:55:21:f5:36:
00:75:73:38:60:2b:15:c2:7c:06:69:5e:c7:b7:3a:2b:ce:0d:
c4:1e:16:59:06:33:d5:69:2d:9b:0e:e7:e0:1c:78:64:c6:66:
fc:65:fd:83:7c:fd:8a:5b:49:af:ed:9f:e6:00:e5:17:ee:3a:
04:b7:86:ff:77:7e:45:b5:5c:81:e3:a1:26:e9:df:48:58:c5:
49:a1:1b:e0:26:a8:f6:70:58:ea:a1:68:d9:95:89:18:e1:43:
b1:26:4f:2c:9c:6c:c1:28:dd:6d:0c:95:8d:af:56:0a:4d:15:
1e:7f:81:7b:17:08:39:08:f2:34:d1:6d:a1:eb:b8:8d:e3:57:
13:40:e3:d7:5d:07:e8:6a:b5:bc:bc:be:b5:65:c9:6b:b7:3e:
d8:7e:b9:f0:03:25:fa:d8:e9:3f:94:2b:01:1f:0b:f2:86:e0:
7b:1f:df:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:14 2025 by rpki-client