Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File: IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier: ePCp5p0UuOYTW1LVgKUVo9JqIqcu2XVcDKf0oeTUBx4=
Subject key identifier: 1F:82:5A:7E:E0:AF:BA:D0:48:1C:B8:C1:DC:09:5A:D9:39:DA:DD:16
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 0194BC050982D0EF8C84704D846EC50EFBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: J1D/zDZa6ZmOSLQlzpS8j5xvPtQkXyjBjLtf+Ig/3KQ=)
4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:09:82:d0:ef:8c:84:70:4d:84:6e:c5:0e:fb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=1f825a7ee0afbad0481cb8c1dc095ad939dadd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:e1:03:19:df:e3:2f:ce:ed:d0:19:03:5b:
5c:1c:e9:29:89:45:17:a8:ca:ba:c1:a7:37:13:5e:
f4:06:9c:2f:73:da:d2:f6:0f:00:8f:91:96:d6:83:
21:92:4e:f0:42:cb:3d:53:8d:be:e9:78:9d:f0:c7:
63:77:6a:75:ce:3e:7b:dc:66:56:f5:15:9b:6b:f1:
6c:7b:53:82:82:ba:87:3c:d0:59:f2:af:96:ba:98:
ac:0c:a4:0b:6d:54:4b:ec:fb:b7:0f:ae:52:fc:62:
58:dc:70:ca:b8:af:d6:ad:f8:75:56:3e:d1:92:3d:
a5:6e:49:ca:40:dc:a3:3d:14:6e:14:55:66:8c:b4:
5b:fa:59:01:fa:31:d2:52:b4:3b:09:00:30:4e:4d:
22:22:2a:b1:f5:6d:3c:56:bc:d8:41:fe:49:33:52:
9d:e4:3a:13:c9:5c:fb:24:82:8f:06:ee:f3:b4:ed:
b9:68:2e:e2:eb:fc:7b:cd:6d:d8:2e:16:9a:d8:6f:
4b:c8:03:64:cd:5b:39:9e:09:3b:aa:04:cd:0a:3c:
d1:c9:ad:43:76:5a:9f:ba:71:d6:51:74:d6:21:0b:
75:fb:02:66:9a:1a:6d:f2:32:ce:27:5c:97:65:b0:
9e:5a:c2:dc:da:f9:c0:e1:a4:46:6e:68:5f:21:ec:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:5A:7E:E0:AF:BA:D0:48:1C:B8:C1:DC:09:5A:D9:39:DA:DD:16
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1c:16:c5:7f:6c:89:83:56:90:2a:94:e6:e2:6d:49:0d:ef:
a8:89:10:3b:23:0d:54:7d:15:21:de:84:99:e8:5b:c2:8c:68:
a3:50:28:64:a6:37:99:85:b2:35:5d:f5:a9:77:9a:57:37:d2:
dc:b8:5c:02:40:12:48:83:00:8b:f9:9b:80:52:5d:35:d1:12:
1d:d0:4d:8e:47:71:a3:a3:12:e6:4e:0b:89:f3:8e:93:be:7b:
e3:a9:cd:e8:1c:de:c6:9c:d5:57:09:e2:bf:39:71:1d:54:de:
6b:93:4a:d8:e3:92:8e:bb:fe:4b:3b:75:e0:7c:b3:17:1f:00:
da:48:0e:c8:85:e3:3a:23:3b:ad:93:59:b2:61:f0:79:46:f8:
4b:46:6b:92:97:ee:40:21:3d:0e:5c:c3:15:03:d2:57:ca:fe:
8e:28:bc:42:60:bd:8a:31:79:3f:13:87:d7:ff:6f:be:06:32:
33:be:3a:ec:d6:98:3f:31:ed:d4:18:8e:b0:5e:3b:b6:df:60:
cb:db:52:6b:c2:4d:d1:2f:65:06:be:aa:fe:29:6b:2d:a2:2c:
f4:a3:e0:12:37:60:c3:03:b4:f3:b1:d2:65:81:c0:72:57:54:
99:45:34:3e:5c:fc:f6:d9:a2:6b:31:51:3e:70:04:f8:f5:94:
e0:d9:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:37 2025 by rpki-client