Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: EJsdxspPViTiJArcdqJdr8f4YfjHwlz+yZROKAolAKc=
Subject key identifier: 94:0D:FB:36:B1:F1:D6:56:72:0C:CA:13:FD:BF:65:A9:B6:4C:4A:C1
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0194BCE0BEBDA17874301623D7128AA8BC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0259
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: NEmBcT7B0n0DboZPPCi1m7Kq5rJODVF0IgOpEf6dgFw=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:be:bd:a1:78:74:30:16:23:d7:12:8a:a8:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=940dfb36b1f1d656720cca13fdbf65a9b64c4ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:f2:ce:1d:8f:7d:1c:f1:b8:9a:f0:0e:d7:
ed:25:d6:9b:c3:ea:88:9d:a1:9d:f4:fc:0c:a6:3d:
ef:0a:55:42:ef:c5:e9:d4:7f:f6:8a:cb:de:95:33:
33:91:5d:22:2b:62:90:53:dd:df:65:d3:53:0f:d9:
b7:ae:a6:38:f3:3f:d6:72:46:ca:f2:00:78:eb:43:
3c:01:cc:9c:3d:d4:a1:87:79:85:9d:18:04:db:18:
2a:8c:a1:1d:67:1a:70:5e:78:d3:54:7d:b8:38:8b:
db:b9:4b:78:7f:9c:eb:3a:d5:54:b8:b2:0e:88:d9:
89:02:be:fc:f7:e9:9b:60:30:c0:d7:82:c6:04:94:
0c:87:60:5a:2f:c8:d5:50:9f:15:df:ce:04:a0:d4:
a4:8a:08:cb:eb:b5:c7:1c:35:e1:4b:20:bb:81:79:
69:70:73:4b:6b:e2:16:a1:74:70:25:cc:f6:76:75:
71:66:8e:2f:4f:2b:65:ea:d5:17:2b:e5:fa:d7:dd:
b6:ed:e7:fb:96:66:2e:4c:5e:f2:82:1e:71:ff:77:
71:7e:5c:02:e0:81:65:86:af:5e:36:d7:78:63:13:
69:26:92:82:35:ac:b3:aa:96:7a:56:06:ea:87:e5:
15:ee:40:0a:0d:c2:e5:5c:10:81:12:50:cc:cb:bb:
c4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0D:FB:36:B1:F1:D6:56:72:0C:CA:13:FD:BF:65:A9:B6:4C:4A:C1
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a5:fb:10:03:dd:33:35:b4:f4:0c:0e:25:68:88:01:4c:cc:
84:11:a3:be:be:3a:08:f5:2d:bf:83:f6:0e:46:14:0f:07:61:
58:53:8a:8e:09:6c:e6:e4:39:41:e5:43:f6:f8:80:42:eb:3c:
c6:4d:c7:7d:bf:c5:ea:9f:b1:07:d3:49:ca:38:3f:1d:b7:00:
b9:f7:ce:2e:96:6f:ac:02:aa:24:21:f3:42:0a:0e:6d:19:40:
07:27:d8:70:98:b9:80:c5:b7:eb:b1:86:56:81:ef:f5:07:e5:
c5:1e:e0:60:30:49:65:3d:46:52:87:f3:85:1e:34:a7:69:76:
b2:2e:7c:d5:29:20:cf:85:5e:08:c3:51:a9:1e:44:97:d2:05:
37:92:45:4b:55:31:02:41:1d:9c:d5:65:76:b9:7d:21:60:51:
89:67:91:58:76:0e:72:e1:91:84:b8:e9:14:1b:74:fc:68:81:
9a:49:94:8e:b9:19:9c:5c:8c:45:97:b4:5a:84:78:5b:4c:1b:
c9:50:fc:32:8f:81:69:ac:5e:4b:f0:af:3b:2f:85:d5:87:2c:
bb:30:e5:f7:bb:8a:d7:ee:29:13:bf:40:b4:00:e4:50:70:71:
e7:30:cc:77:b5:bd:aa:b4:4a:24:75:7b:18:24:6d:1c:ed:7e:
05:4c:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:43 2025 by rpki-client