Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: LQzqFZMMuisXqf/0a4zwWp5pPgW00QkSozYYDPvAkq4=
Subject key identifier: 30:B2:8C:5B:FF:A4:8E:61:19:D4:FC:0F:12:3B:CA:E3:01:E2:FC:79
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 0194BC3C4733B86A6605E7CA7DBF81B47539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=)
2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: 0JiCy9RdU5frpzQTp9rN7ORsj62rbwk3USasGZ0fXoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:47:33:b8:6a:66:05:e7:ca:7d:bf:81:b4:75:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=30b28c5bffa48e6119d4fc0f123bcae301e2fc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:d8:7d:1c:f2:fd:4e:80:28:4a:91:45:c3:
6c:ec:ca:92:68:f2:ad:5c:be:79:a5:62:7d:fe:0b:
fd:f2:3b:88:ea:4c:4d:65:04:99:42:ae:5e:10:9d:
f8:a5:22:b3:26:70:e6:7b:d7:2a:2d:02:03:14:c4:
4a:23:3d:40:a3:81:fd:51:35:29:25:d6:a6:14:25:
64:34:5c:fc:e5:dc:15:ff:b4:1b:07:aa:ea:0a:5b:
b1:4a:1e:8c:3f:a3:b3:33:f8:9b:52:7c:ad:a3:51:
03:d3:68:01:b0:74:d9:af:90:21:48:cf:20:6d:6e:
1e:a0:48:68:fb:49:ad:81:84:f9:07:ab:4c:e9:e3:
6e:67:e0:25:68:25:4d:ac:cc:49:15:94:d3:27:96:
fb:d8:d7:a8:7d:06:1b:35:f5:fa:65:02:08:fb:90:
77:65:92:f0:99:16:08:ea:f4:15:bb:08:7e:a7:ce:
d8:3e:a4:74:99:ff:91:87:a9:9a:97:c5:80:7f:7d:
50:0a:ec:84:a3:35:b1:b8:42:c4:e1:6e:95:93:77:
75:eb:61:42:da:23:4a:84:27:12:d2:84:e7:fa:b3:
9d:57:ee:60:e0:85:f7:37:a2:c3:11:a4:57:1c:3c:
17:3c:2b:96:57:67:d7:ce:1e:10:fb:ed:7e:01:ab:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:8C:5B:FF:A4:8E:61:19:D4:FC:0F:12:3B:CA:E3:01:E2:FC:79
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:cc:dc:d5:1a:b8:98:4e:c3:8f:3c:13:e3:4e:96:19:c6:fa:
ac:85:24:cf:9f:a0:88:56:7c:fe:61:e6:a6:9b:09:52:1c:15:
48:af:0c:40:7c:d6:d4:d6:c9:b8:9c:4b:fe:17:2e:82:03:0c:
f8:13:db:bb:a0:b3:44:49:09:14:9d:25:33:3d:d2:0e:e9:c4:
ca:7f:d2:66:de:75:db:c0:de:51:57:33:d5:42:5c:fc:e5:ae:
26:97:0f:68:38:d1:2d:1f:ae:e3:ec:e8:fa:17:98:d3:a8:02:
4d:13:e9:cd:58:3c:4c:02:6b:b1:06:14:5a:bf:8e:ec:64:19:
e1:db:d8:17:93:d5:16:74:8f:ee:72:41:a6:15:ce:1d:cd:e6:
a7:0a:b0:94:95:2b:08:ff:12:18:7f:3f:fc:0f:b3:83:07:2d:
be:79:79:5f:a8:34:72:f6:62:22:9b:2b:55:9e:00:91:36:47:
46:67:1d:9f:35:64:de:91:d5:ea:8b:08:4a:6a:c8:b2:29:87:
8e:b2:89:2e:a9:ec:4f:21:4e:b5:78:85:a1:64:e3:1f:d4:4f:
73:db:a9:3c:46:ed:5d:d2:f3:e1:ca:1a:a4:dd:7a:06:58:31:
2e:4e:f1:6d:3f:b2:99:25:5f:dd:cf:18:18:76:7c:93:72:d0:
65:71:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client