Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: YeA6LHBZho5eq+NIyx9YVC37CSzoAs6jilE1GE01l2Q=
Subject key identifier: 99:B2:62:C2:08:7A:62:F9:73:9A:1E:4F:40:AD:CA:04:08:83:80:62
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 0194BBCDEB8676D1F85EE5FB073443F30044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: orRYekRpecRaqfgxrPAszLeQlzzFbIweW9npcto6kWE=)
2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:86:76:d1:f8:5e:e5:fb:07:34:43:f3:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=99b262c2087a62f9739a1e4f40adca0408838062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:5e:f2:c6:94:45:e2:ca:a8:a3:1c:fd:52:
b3:f4:46:e2:d0:96:43:9c:ed:8a:24:f9:fe:f9:45:
71:1f:cb:4d:16:4c:6b:b4:f1:e3:1f:7e:49:c5:33:
66:ed:9a:68:c2:06:20:de:d6:cb:36:47:9f:10:8c:
2b:76:d8:9d:0e:11:2f:2a:0d:77:00:bd:ce:62:76:
bc:2c:fd:57:79:85:5a:4e:a7:d8:d4:12:11:28:e1:
7a:ac:cb:2d:fb:96:07:cd:22:11:9a:5e:58:6e:00:
6c:76:1e:dc:6e:53:18:04:8c:50:43:4b:cf:57:b4:
ef:0a:98:fe:d5:04:32:68:93:92:69:d5:59:5a:09:
64:ad:3a:ba:32:32:2f:a7:4a:59:53:d3:75:25:4f:
04:f9:f7:5d:2b:28:c6:33:7f:ee:2e:88:b7:9d:c3:
fb:bc:a8:e7:db:7d:d6:6f:d5:ce:0c:4b:8c:a9:30:
b9:e4:2f:51:e6:8a:e7:9c:d2:db:8f:fa:9d:54:ea:
cc:b4:f3:d3:4f:6b:8b:99:49:24:fa:c1:01:73:3f:
57:d1:73:a3:fa:a8:94:d0:ad:21:bd:d5:a3:0d:91:
38:55:37:b6:ec:89:ef:7d:43:08:47:db:28:9e:d0:
91:29:8a:b6:2a:27:6a:ad:94:d3:4b:fa:5e:08:eb:
71:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B2:62:C2:08:7A:62:F9:73:9A:1E:4F:40:AD:CA:04:08:83:80:62
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:68:7a:da:56:20:7c:da:5c:25:71:2b:b9:2b:8a:25:26:
85:30:53:cb:67:10:d8:cd:c0:ad:b1:5a:03:d9:87:9e:a6:93:
d8:96:64:d2:25:a7:68:94:b9:1f:83:c4:70:0d:13:f2:5a:a2:
0d:9e:8d:cb:cf:70:06:e3:bd:e5:97:af:fd:bc:84:3a:ba:45:
83:37:48:0c:64:2b:1e:5d:ff:af:fc:07:f0:16:a2:f7:da:9c:
c4:d9:01:36:d9:f6:14:1e:cf:f3:0f:32:52:05:fd:50:02:03:
94:52:6f:3a:1c:0c:5e:9d:43:e4:7b:24:57:86:eb:fa:13:f7:
1d:28:4a:03:0d:d0:ba:26:bc:97:ed:99:8f:e5:82:d1:16:cf:
57:d0:80:a7:b2:1f:03:a6:fb:20:af:57:e1:33:e7:40:ab:37:
8d:c6:76:26:39:4b:3b:1e:53:10:25:aa:aa:82:e5:73:1a:52:
5c:92:20:76:db:75:e2:e9:de:82:b6:d8:99:97:11:a5:de:1f:
d4:25:83:d9:cb:c7:b9:fe:3d:18:70:ae:05:05:b8:1f:04:87:
a6:a7:dc:94:0e:9d:d7:cd:8f:77:92:35:a0:36:fd:f0:0b:22:
e0:f1:9f:54:0b:72:cd:ad:99:91:57:6c:29:b9:fd:0a:15:ee:
27:50:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:12 2025 by rpki-client