Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: +J7GmAu2KmORqYMPUn1sEhca4O6ca0hWzsqaxr54vEI=
Subject key identifier: 0F:AC:D6:60:1B:2B:35:CF:61:99:96:50:B9:92:9E:78:B8:D6:E3:33
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 0194BC3C3DFBCF84A739E524BA08AC50F7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 11D5
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: zxSUhc3ljC0OKgwKjGKdOQzpRpmUQatGoUjCfdD5tTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:fb:cf:84:a7:39:e5:24:ba:08:ac:50:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=0facd6601b2b35cf61999650b9929e78b8d6e333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:ac:ef:9d:37:66:ea:0b:24:99:80:33:c4:
b2:56:b6:c5:2e:d2:ca:58:c5:ee:d3:81:91:9a:63:
e6:e8:46:98:34:2d:e8:56:b6:37:50:d4:32:97:07:
a8:5c:08:2d:c5:52:77:29:3b:59:a8:4e:da:fc:b5:
03:08:a9:e7:77:70:93:8c:48:8c:56:34:6b:42:9e:
50:49:cd:e5:e0:02:aa:a8:53:a2:dc:49:ff:d5:96:
a0:94:c5:b4:45:ce:28:eb:d2:89:43:74:5a:36:c6:
9d:73:d6:24:b2:04:8f:5c:57:c6:bb:5d:08:76:e3:
63:12:7c:af:93:22:17:12:4b:e3:22:ea:f2:d2:01:
ed:63:2a:ce:a0:93:4f:2d:70:3c:57:e5:b6:d0:fb:
c2:8b:bf:94:b2:d7:8d:fb:2f:9a:c2:3a:7e:98:68:
1b:b6:b8:56:e2:ec:ab:5c:bd:fe:87:61:c7:75:5a:
e3:9b:a6:23:19:8a:82:84:ed:12:64:85:fd:df:89:
a6:ad:54:20:4d:f8:3c:c1:a7:87:41:e0:19:a0:02:
9a:d9:eb:40:14:1a:d4:25:38:58:1d:e0:8a:84:cc:
6a:b8:49:3f:4b:09:51:b2:40:86:26:fb:04:6f:49:
57:b1:9e:d7:85:aa:38:af:b6:b0:3e:d4:d4:ab:6d:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AC:D6:60:1B:2B:35:CF:61:99:96:50:B9:92:9E:78:B8:D6:E3:33
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b7:b7:be:83:b5:57:e4:dd:a9:81:f7:20:f4:f3:00:1d:d4:
78:00:1d:02:4f:7f:81:59:01:d9:7a:18:e2:cc:29:16:5f:a3:
d8:9a:91:3a:82:18:b1:10:cb:fe:8f:46:5b:e8:d1:2a:c7:c8:
39:5e:2e:76:3c:3d:88:48:3c:73:e9:da:18:7d:3e:06:90:27:
45:33:b5:b2:5a:db:9b:b5:92:6f:24:83:fb:9a:df:77:e0:28:
b1:06:56:87:8a:f5:2d:96:65:1c:ac:99:37:d1:74:e7:b5:77:
d3:71:20:02:c9:d0:b2:b0:bb:6c:24:85:a0:f6:ee:bc:8c:5e:
a6:b3:fa:02:14:16:d0:e4:1e:27:82:f5:66:a5:3e:39:3b:bd:
6b:c3:3f:a1:a9:42:13:d3:c1:36:4f:6e:6d:46:b0:60:36:e1:
8d:47:19:65:91:dc:d9:32:9a:be:2a:7b:8c:f7:ef:58:9f:14:
14:e0:38:5f:b0:52:48:0e:1f:2d:e4:51:d2:d1:2d:c2:38:7c:
e7:50:e3:9f:47:de:8d:7c:f3:37:90:1c:c0:9f:48:2f:d5:eb:
19:c1:8d:40:c7:3e:bf:46:e0:3a:97:08:40:a0:74:f8:d0:d5:
34:70:24:a3:8d:cb:44:5f:11:02:10:19:09:ab:97:2e:8d:8e:
dd:40:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:46 2025 by rpki-client