Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
File: iqtMDPIcGj1upBBoy-kIvjiORQo.mft (raw, json)
Hash identifier: Y/fbayjd8WWmSBAvjJddm82vYR3XtNkKScPuwLvbgEs=
Subject key identifier: 62:2A:0C:26:33:A4:BC:F2:75:C3:F2:29:28:7F:50:73:14:74:F7:A9
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 0194BCA9A4847233A27AB7F1A3928F5F91DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
Manifest number: 0165
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: KNoplKbnalbBlNJ0HrGiOS5fwgk.roa (hash: 6g25L6YriR7F4NqmIjLUqgHXTaSIa9NMu6Z6ggsvzHE=)
2: alNy-myxrA734TUoeZ1JVeikh6c.roa (hash: OCkDLXElKJB9eMUhsdq5dMT5WhX6caAwH3DuhC8oZvM=)
3: iqtMDPIcGj1upBBoy-kIvjiORQo.crl (hash: xqI9AMd/JWCFXTNHqtciXoh71f/P2e5AeCHUsMuE394=)
4: udTVd1o8oDHSaSNRBJy6whYewAQ.roa (hash: qk7UOUQTx/LsRWpITTU11KtTbgMf7KAs+HC5NtaiASo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a4:84:72:33:a2:7a:b7:f1:a3:92:8f:5f:91:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=622a0c2633a4bcf275c3f229287f50731474f7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:7e:4a:34:98:f3:25:4d:c2:65:e3:3f:1d:
e1:f3:f4:14:12:91:3e:bb:ff:41:8b:ac:2f:51:d3:
77:4d:a6:bd:59:38:0e:77:77:23:b0:24:42:2c:c2:
53:a4:64:ff:64:54:0a:78:07:91:a7:d7:6f:28:26:
52:05:3e:0e:9c:f5:8c:e1:52:ad:31:8f:78:39:b9:
f8:a2:66:7b:dd:71:b4:76:7e:71:eb:33:19:d9:c0:
14:1b:ff:97:70:23:da:7a:e3:bd:6d:5b:fd:53:ac:
4f:26:d7:f5:d5:72:52:88:19:93:7b:28:83:91:de:
3c:ef:4c:ff:73:18:31:09:2a:41:f6:c2:35:c9:4d:
9e:e3:02:27:39:8f:20:42:d6:8c:0e:6d:95:82:b0:
fe:95:b3:ef:55:2c:be:a6:85:f0:07:22:44:24:54:
67:4f:7b:2c:63:c5:81:ec:41:7c:82:ae:27:ba:f5:
2b:6c:45:c8:b2:72:2d:81:9b:99:97:f6:14:4c:e6:
5b:7e:69:08:e7:e8:4b:f9:7f:25:87:55:53:b6:48:
f1:80:30:df:b0:d3:f4:49:c1:b0:db:22:8d:3e:79:
6d:0d:37:d2:89:be:85:fb:0b:54:3a:1e:f3:2b:63:
b0:49:70:a5:db:20:27:47:fd:30:4a:57:7d:e1:a0:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:0C:26:33:A4:BC:F2:75:C3:F2:29:28:7F:50:73:14:74:F7:A9
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:03:33:b5:a1:21:f3:1e:b3:fd:15:5b:3b:f6:c1:19:db:49:
11:6e:f5:ba:e4:d8:e5:3c:aa:1c:49:aa:d4:08:ab:83:be:05:
1b:bf:67:86:27:65:fc:05:50:fe:27:f9:f7:d6:6d:9b:4d:07:
43:8c:7c:86:ed:35:4a:11:e8:54:b4:30:60:d1:70:d9:23:94:
05:7b:b7:87:a5:f5:5a:de:0e:65:1a:26:d9:3f:54:e6:70:0a:
7d:d7:0e:1b:31:bc:68:b2:94:33:e1:66:fb:66:ae:d0:ed:df:
20:f7:ce:d4:10:f6:bb:cd:f0:d1:00:ad:93:99:50:ab:eb:22:
6a:01:b8:dd:0d:d8:45:0d:18:67:bc:45:d0:ad:93:32:49:bb:
85:ed:1b:95:15:7d:46:52:17:76:fc:85:a9:03:f6:e3:04:c7:
d6:ba:b2:1a:d1:4b:a0:32:44:84:e4:0f:07:e4:3c:b7:de:6f:
33:f1:7e:8a:e8:d8:90:cb:78:d7:39:56:45:7c:0c:dc:5c:08:
79:af:75:25:96:b0:e5:97:31:c4:50:e3:ca:70:28:04:7a:9a:
fe:a5:3d:10:bb:58:ae:f0:ce:8a:69:f7:f4:16:15:52:d2:7e:
a8:1f:99:90:d5:d4:78:f0:47:15:72:c1:bb:49:75:77:86:d7:
13:7e:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:27 2025 by rpki-client