Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File: IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier: GU2AlCxG9+rzZBogGUEBMaIatbRXL9hX8x13jm9uwhc=
Subject key identifier: BC:B3:D4:55:71:2C:87:6C:B2:6F:80:1C:B3:BF:13:9A:82:D9:BC:09
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 0194BC72B06514818E056F34BDAFBBBD3712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: wzpo3PmngPeFa0uhcwcH4e23t6a7babFvG8d0Ujkb1c=)
2: gxfPyS5KakpFEwmfLQLrUMtzDuA.roa (hash: rxllc4raZ48lNaZN0VdX0i2mHb0wFctajLKxvoGGQes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:65:14:81:8e:05:6f:34:bd:af:bb:bd:37:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=bcb3d455712c876cb26f801cb3bf139a82d9bc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:c2:64:d3:64:de:60:f4:c0:d3:4c:f8:83:
fc:d8:a0:03:18:a5:ac:10:75:20:6c:ee:8c:7d:08:
e8:ce:e9:cb:79:51:02:52:6b:ca:4b:04:14:01:6e:
ab:ba:1f:81:55:3e:b1:da:82:59:86:8b:b5:33:2d:
26:7d:7b:9e:d6:d0:fa:d2:81:b5:ba:72:f2:15:b8:
5a:90:1c:f8:89:13:94:d6:a3:33:66:d2:93:d6:c9:
24:9f:cc:56:12:f5:45:ff:00:b8:e5:23:63:e6:91:
d1:d3:f5:90:2d:64:de:2a:7d:51:ba:9f:0a:67:ff:
52:0d:a3:1c:e1:0b:7b:f0:35:9d:ea:bf:45:73:5b:
45:11:38:4c:96:ed:97:aa:f6:33:03:03:a9:b5:b8:
03:21:2b:27:b9:05:a4:d4:5e:a3:ca:e7:90:b4:78:
0b:81:00:f6:27:ba:6f:8b:49:31:c2:90:57:d9:d5:
bf:30:17:96:d2:ce:b1:30:a6:7f:7b:41:52:e6:bb:
a3:7c:a1:68:4b:c1:d2:9c:5d:90:e5:0d:15:7f:21:
ea:db:2f:c4:b6:0c:ff:e6:bf:49:b4:18:9c:ad:27:
35:95:2d:0e:61:3a:86:4f:d5:50:b3:70:3f:d3:22:
a5:73:ea:07:88:e3:72:97:1a:be:d5:f8:8a:46:97:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:D4:55:71:2C:87:6C:B2:6F:80:1C:B3:BF:13:9A:82:D9:BC:09
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:53:5e:0a:f1:ae:3d:5c:4c:6f:ac:e4:07:1d:0d:3f:1d:3b:
bc:66:69:96:ec:99:d6:88:f1:5d:a9:32:cf:9c:1f:29:39:7d:
5f:f8:05:62:a5:cf:79:ff:9f:91:e6:67:02:9c:62:38:35:f3:
14:d3:5d:e3:9f:ff:1b:1f:46:4d:c1:31:85:53:79:10:3e:6f:
35:45:55:87:63:9e:80:c2:f4:76:df:27:71:f4:97:fc:3a:23:
12:12:0b:e0:70:bb:69:f5:8b:34:48:c4:72:6e:a8:ca:aa:b8:
85:50:a7:30:95:37:af:88:9b:e0:2a:99:96:a8:70:74:b5:c6:
6b:74:bf:f6:70:fa:11:0c:c0:cb:21:40:3b:87:20:06:d3:a4:
74:be:08:f4:6d:13:10:ec:d4:e7:26:57:18:66:89:39:a0:74:
26:f0:e3:df:38:5f:b8:9e:bb:d5:11:2f:fd:d2:a6:d6:8e:55:
7b:67:e5:95:c0:26:6a:51:ce:43:fa:72:b8:3f:30:e3:5f:23:
9c:b5:2f:fd:65:5d:92:4c:61:1b:ad:21:5e:ea:7e:7a:e4:d3:
4d:be:4f:38:ce:71:94:47:73:33:92:5f:2a:08:0c:28:5f:84:
16:b8:cb:b3:f1:e0:aa:44:ad:f4:97:e9:82:f6:ff:58:98:ec:
47:08:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:51 2025 by rpki-client