Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
File: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft (raw, json)
Hash identifier: plttqiNIV/uWCp9dSqiiq4apv5Piocz3hJFfL+jbH90=
Subject key identifier: E0:76:24:19:56:1B:1F:A4:86:5F:36:9F:D0:45:D7:75:8A:E1:F5:A5
Authority key identifier: 20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
Certificate issuer: /CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Certificate serial: 0194BC04AB0B126909F73A682EACF149785F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl (hash: K798+MaXjWFp2r34z7n3nksvfgeKfgL2sKFODCrJ6Bg=)
2: LkiVXeukns_JdhONh74qaRMFBIM.roa (hash: sMLMXJ4GQAf8vdiNw4uFl/nK1+dFlOKAlp+mNZ+YliU=)
3: cd1yHX5UcqryiXUb-rkYleNrwXs.roa (hash: 6h3q+Ehg11sL4jSJjG152eGWFDBSFWsjBJ9eqGT5BtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ab:0b:12:69:09:f7:3a:68:2e:ac:f1:49:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f6808e0604697270faa3c3db159f7fe98ecdd
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=e0762419561b1fa4865f369fd045d7758ae1f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fa:0e:85:89:4a:d7:68:4b:e0:9b:5b:dd:a2:
23:2e:63:69:4f:fe:c6:a9:a5:ea:00:bd:ae:36:0a:
d0:6d:51:9f:b7:87:1c:7c:80:cf:1b:56:e1:56:c2:
87:50:25:6e:8b:2e:b0:e8:a6:25:37:e4:bd:fb:7e:
f3:ae:ce:15:06:d4:19:65:5c:11:84:e4:70:11:11:
0b:6f:ff:67:42:0b:5e:0f:5c:a5:cc:ff:f3:a4:ba:
5c:7f:77:6e:7d:67:0a:a4:55:c2:39:72:03:ea:58:
e2:e2:a7:9c:22:4d:26:ac:a8:5c:63:99:ff:36:84:
a4:f4:e5:f6:c8:6b:b2:61:4a:dc:84:11:3a:30:1a:
86:61:af:0e:9b:c1:36:f1:99:8c:fd:67:bb:18:87:
74:be:fe:3e:27:85:75:fd:b1:c6:eb:62:2f:7f:d2:
01:27:b1:cf:62:39:e0:ab:fb:4d:66:07:e0:b1:83:
64:58:f0:bd:36:31:97:10:57:53:64:e6:9c:2c:05:
6e:3e:48:96:30:e6:da:90:d9:f9:89:12:fc:61:84:
dc:ca:af:00:75:45:24:f7:a2:d5:83:21:9c:8d:a9:
68:62:37:d4:d3:64:2f:5a:03:e9:a0:f0:fb:fe:0e:
74:68:b1:bb:ee:4a:96:6b:20:4e:2e:4a:19:1f:ec:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:24:19:56:1B:1F:A4:86:5F:36:9F:D0:45:D7:75:8A:E1:F5:A5
X509v3 Authority Key Identifier:
keyid:20:6F:68:08:E0:60:46:97:27:0F:AA:3C:3D:B1:59:F7:FE:98:EC:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/265d3a-aed6-4be2-b42e-eb62e8c4dfa9/1/IG9oCOBgRpcnD6o8PbFZ9_6Y7N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:68:1e:55:99:8d:df:49:b0:c7:fb:8f:66:32:61:ed:24:a7:
a9:bb:bb:d9:d8:42:63:6f:a9:e1:3a:44:48:94:5f:5f:7c:85:
20:c5:ce:0a:cf:ee:e3:08:cc:68:79:5e:06:22:19:85:c9:b6:
94:53:be:4e:2f:be:ed:75:86:a2:67:40:46:ce:ac:0e:7c:29:
59:df:5f:bc:be:92:83:bd:3f:43:b5:48:da:3b:b6:a0:04:62:
72:92:4a:ab:7d:76:c7:77:5a:cd:57:d1:4a:66:87:cd:c4:c7:
3e:9e:76:ce:54:d8:f5:1a:d0:56:4d:8d:2a:bb:bb:81:db:fb:
6b:e0:ce:27:33:02:8e:51:02:00:45:65:f7:e5:99:eb:06:b3:
d8:c5:84:de:28:36:85:19:ec:a5:1a:f7:b4:44:75:14:31:f0:
db:12:0c:11:57:55:c5:65:cf:55:63:fd:c9:35:5e:eb:00:60:
29:2b:79:5b:69:02:a2:96:ad:10:9d:cd:d9:83:e0:b7:e0:87:
73:27:70:a5:38:aa:78:20:3f:fa:ac:2d:63:06:24:26:84:a9:
12:99:f2:39:78:5f:0f:a4:b3:0b:1b:bd:2c:2d:cf:ae:30:f3:
eb:d2:de:6e:60:df:c9:e6:8b:96:06:3b:2c:99:6e:5b:ba:a9:
d2:a7:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:19 2025 by rpki-client