Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File: itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier: Yx3mLv5pmWOWxxWYj9kHfJwZVWhroRjI4dq/LQSQd1Y=
Subject key identifier: 1A:1C:5C:10:91:FE:03:90:E3:73:20:1F:89:C7:31:5A:18:94:35:B2
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer: /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial: 0194BC3C67B6DC42A3F1C20D8ABD71E3B3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number: 1370
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 6LoGTUsxl6ngR0px_QWDZqMrDqY.roa (hash: +ceUAHPEc+ox8TyB65QxlBTF9+xyruiKTwNKbUkFhfY=)
2: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: GIFa6EMveXxwlty8Iekjm2jDhHw2NHJXDo1irm3JpW8=)
3: kOrxmXRMoh0iVhgCI3h3ap9gzjY.roa (hash: UuZBkN7yMoGzAAanQfroluxDy9hZk4vWUEry2ogeBOM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:b6:dc:42:a3:f1:c2:0d:8a:bd:71:e3:b3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=1a1c5c1091fe0390e373201f89c7315a189435b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:a2:de:11:3c:bf:e7:fa:ae:bc:f7:51:d4:
97:b5:43:02:c9:0e:ee:25:13:74:31:e5:01:07:88:
66:fc:f9:d4:44:3f:c9:ec:39:a8:a4:84:7d:4e:73:
5b:bc:2d:84:64:33:e2:e8:d1:59:8e:25:28:1c:16:
51:8b:3c:fa:0f:ba:88:4e:c4:fe:04:8c:13:cc:66:
a6:89:36:97:ab:fb:ca:53:3b:0b:60:a3:56:e7:1b:
57:b1:62:cc:a1:28:1e:96:67:7e:91:95:6c:61:0e:
39:6e:8a:71:54:f3:ef:a9:7f:2f:9a:4b:0a:b1:54:
72:0a:fb:db:2b:f0:92:84:b7:5b:a8:d3:9f:73:ab:
5d:26:28:0b:36:ec:4e:bd:78:6b:2a:75:30:55:c6:
3d:f5:a8:0d:e3:c3:7c:71:e4:c7:28:e5:5a:e4:fd:
9d:ff:33:1e:84:02:43:e7:44:90:2d:07:a6:7c:02:
71:8b:e2:74:e2:1e:8e:bb:eb:10:ad:e7:f0:ee:0e:
f6:1e:4b:ff:db:91:77:f8:ce:e1:ab:19:b5:4e:59:
e9:70:6a:e8:9e:30:d3:d9:f6:81:04:c6:4e:19:7c:
ab:13:86:aa:75:68:06:51:c4:6d:c8:df:ff:8e:ef:
3d:f4:18:ea:ef:3d:3a:de:7a:b6:56:6f:bf:5a:1d:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1C:5C:10:91:FE:03:90:E3:73:20:1F:89:C7:31:5A:18:94:35:B2
X509v3 Authority Key Identifier:
keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:33:c7:36:d9:f7:37:dc:92:a5:5e:76:bb:41:1f:b2:43:0a:
e1:26:39:94:5c:60:72:ca:aa:8e:7d:85:0a:84:d2:a7:d9:a2:
52:31:c3:a4:50:05:d1:16:0d:49:b1:ec:c4:90:78:46:b7:15:
8d:47:f9:c7:57:6f:37:e3:9d:37:cd:35:06:65:92:c3:7f:33:
d3:fa:ba:c9:63:10:78:47:76:24:c5:29:94:8c:3a:35:7c:de:
e9:02:70:40:6c:4a:42:e8:99:96:22:0f:1d:57:25:6c:f8:b4:
02:28:27:b8:ab:27:71:42:a8:f8:32:e8:37:15:f3:ed:5a:f8:
3d:40:51:e5:6c:c2:20:40:98:b5:c4:ef:e3:4d:e7:db:89:a0:
72:2f:87:a7:a3:c2:8e:53:1d:e9:94:b7:fa:ca:a9:4a:a9:6e:
f9:21:72:fc:27:ca:8f:14:47:61:ac:a4:2c:d2:a8:b2:19:cd:
6b:17:fa:5b:ab:44:de:74:ed:35:f0:d6:f4:07:13:dd:a0:78:
35:6a:e0:e7:96:9e:aa:e9:e7:d9:8f:af:5c:0c:d8:a7:5b:1c:
f6:95:d7:99:13:9f:af:02:7f:d0:38:e5:5f:ff:4d:b9:36:af:
2a:1b:5f:e6:f1:4c:b2:43:07:2e:a6:66:b9:4d:59:26:fe:15:
ba:e6:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:43 2025 by rpki-client