Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File: I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier: xRXYCgW42d3fKGyyWU7MXqVKpuGuxnIdSC0F6lDfLOc=
Subject key identifier: 97:B5:4C:D0:60:B1:20:B9:3D:3B:E3:64:7F:F5:F2:45:96:56:ED:58
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer: /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial: 0194BC04B74DE64CFA8AAEB593C3E69092E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: hZ8rorUl149iTjag7e/XIU0p1lQr/iT+YGTHS1HLSQo=)
2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b7:4d:e6:4c:fa:8a:ae:b5:93:c3:e6:90:92:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=97b54cd060b120b93d3be3647ff5f2459656ed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:9d:b9:b9:8a:4c:d3:92:7e:56:90:bc:9d:
70:f3:c1:71:81:1d:e6:a4:79:ea:91:50:51:9c:c3:
c0:fc:55:ce:eb:d5:03:bb:6d:1c:49:01:e4:1b:9e:
95:76:b2:2f:74:af:53:c4:4f:0f:f8:b2:6e:97:dd:
eb:25:36:c7:2f:21:30:0c:5a:ab:e4:b0:7d:b0:76:
03:24:ad:94:94:2a:08:51:03:76:ef:e7:cd:69:6c:
e5:c5:4b:15:71:a8:8c:f6:d2:79:1a:92:75:85:19:
de:09:91:b0:9b:06:4c:1b:97:0b:90:bc:db:5c:b3:
d6:26:43:ba:a7:f1:45:57:3a:fa:15:f4:5d:80:07:
fa:d7:e5:c4:f9:a6:dd:cb:46:31:8d:85:72:13:b5:
d1:2c:ad:17:03:c1:55:a8:0e:63:5d:f4:be:5f:22:
d8:8b:3c:e7:13:39:2d:63:90:fd:66:23:6c:2c:48:
85:fc:16:38:fb:65:d5:f3:15:6e:98:9b:87:a7:66:
04:ef:c7:10:85:ac:2a:91:f6:a8:f4:e5:a2:8f:07:
da:b6:fa:5b:2e:10:68:1d:1f:94:42:78:37:d3:1c:
4f:cc:43:b3:39:a5:8b:c1:bf:b4:e1:95:59:3a:10:
7a:cb:04:73:04:48:3f:31:68:7a:0e:c3:0f:f0:3a:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B5:4C:D0:60:B1:20:B9:3D:3B:E3:64:7F:F5:F2:45:96:56:ED:58
X509v3 Authority Key Identifier:
keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:94:98:ff:94:a0:2f:2e:0d:7d:3f:82:bb:74:34:64:f6:ad:
08:23:bb:98:c1:cd:bd:3e:26:78:89:1d:1d:3d:ec:17:e8:66:
a6:ec:6a:f7:22:62:8b:ba:49:b4:81:ad:85:c2:f9:77:90:ea:
81:e6:6d:67:74:24:86:0c:fc:b4:2f:e2:1b:68:a0:58:57:e5:
96:98:24:0b:97:6c:97:20:22:8e:44:27:b0:22:4b:49:2b:4c:
75:34:4d:a3:0c:79:b7:53:36:ea:8d:13:c2:73:86:f1:12:19:
c3:58:84:11:92:78:66:70:59:b6:1a:44:94:ab:00:6d:f2:4c:
b1:e0:99:50:4d:30:28:b4:3d:ab:0f:df:0a:31:f4:7b:b1:57:
d7:47:8d:89:69:07:2f:4f:35:84:93:67:aa:78:a1:7e:ae:50:
67:aa:f7:41:a6:e5:73:81:92:2a:88:b7:f0:c6:06:5d:60:be:
ca:4d:cd:b9:86:9a:6f:4b:90:fe:52:c3:a3:77:db:09:ab:3f:
2f:d2:30:fe:53:1f:5b:5a:43:b8:1e:ac:d0:be:75:bd:d2:26:
38:15:47:b6:79:7b:fe:54:68:4d:23:77:31:2d:03:b2:54:01:
a5:fd:57:a0:33:4f:d7:8b:67:8f:7f:c6:42:ab:a1:15:ca:03:
05:3f:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:57 2025 by rpki-client