Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: EaCWZPaIEJA3g9VOhuc1eYZJ0FCWYPQlGQu2CXVAPqM=
Subject key identifier: C4:13:0E:F7:F7:26:27:00:0B:EF:BA:3E:5A:52:26:50:3E:8A:1B:07
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 0194BC050A1190AEE362FDD2ED795E1AA190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: VRgJkKb74gS8SDSIdUoi93tr2ZoqVdcbrLhPR87qAtY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0a:11:90:ae:e3:62:fd:d2:ed:79:5e:1a:a1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=c4130ef7f72627000befba3e5a5226503e8a1b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:dd:8d:79:bb:8e:5f:ed:2e:50:be:5c:29:
95:6e:2c:6c:e3:a2:90:ba:f3:92:6a:d9:fd:59:c7:
17:b2:1a:ee:24:23:9d:ed:b6:ee:c4:ae:89:a0:20:
61:5e:b0:39:53:01:7f:c9:2c:a1:d7:36:96:3f:45:
4e:12:61:8f:09:0d:d6:cf:9d:f2:87:05:4d:ae:ed:
ef:6f:60:da:5b:bc:41:83:41:c3:af:f9:e3:bc:2b:
13:6d:d5:98:c0:25:61:e9:91:84:e1:c7:79:dc:7b:
b5:96:01:5a:33:4c:ab:32:39:ae:e7:8b:ea:6a:eb:
17:f4:c4:51:23:9b:49:da:35:ca:62:fd:48:3f:95:
cc:a3:94:1a:34:ce:85:3f:d8:cd:2c:f2:22:d3:50:
19:30:07:f8:99:89:58:54:f3:ff:95:5d:c9:5c:31:
f0:42:1a:38:20:88:0b:76:46:9a:9b:52:e5:59:20:
ad:5f:bc:a2:a6:60:ec:00:39:66:b3:fa:d7:a9:9f:
b2:9c:74:2e:db:c7:22:3c:88:e1:06:ec:3e:78:c5:
5d:a3:82:32:47:5c:5c:be:a1:ff:0e:4c:b4:0b:4e:
ae:8d:bb:e5:55:73:e4:3b:e2:cb:92:91:49:ba:f1:
f0:13:cf:07:25:ea:dc:22:51:d9:6f:38:e3:1d:cd:
0d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:0E:F7:F7:26:27:00:0B:EF:BA:3E:5A:52:26:50:3E:8A:1B:07
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:84:06:fd:3f:ba:53:32:aa:1b:b2:e1:2b:63:a7:aa:7d:
1c:00:bb:ab:d7:d6:5a:32:f3:ed:45:12:76:31:78:b8:d1:86:
e1:cb:28:ab:d4:2e:83:64:e5:a5:5d:97:34:fc:56:bf:4e:2e:
83:ab:40:f1:39:3b:f8:84:4b:ce:74:41:91:00:0b:c0:e8:21:
40:0d:f6:ce:40:a2:3b:25:c3:f7:e3:d3:19:84:55:cd:f4:0a:
69:2c:7d:b3:bd:47:53:16:01:80:04:4b:88:df:e3:b2:59:60:
ce:0b:01:06:dd:3d:57:31:56:ad:7e:d8:e3:5a:37:73:f7:76:
39:dd:09:2c:59:e5:76:25:3c:a9:73:fe:2f:21:5c:db:50:5f:
92:82:9f:43:79:7b:8e:35:26:a2:73:ab:19:f5:b8:8a:c6:63:
b0:c4:cf:85:aa:ce:2c:8a:83:53:1a:b0:2f:fb:b9:49:a2:ac:
18:8d:41:fb:06:a6:4e:6a:a3:dd:bd:17:89:11:30:0a:36:2e:
65:3a:cf:d3:41:b0:16:a1:aa:ef:7a:c9:ba:48:6b:7d:e0:ed:
68:35:3c:10:cd:ca:73:a8:d0:fa:7b:26:fb:97:31:21:48:ee:
13:62:fa:2e:d4:7b:54:f6:c8:eb:e4:16:00:48:95:9e:88:7a:
46:87:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:15 2025 by rpki-client