Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File: Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier: axItY1+rQJBh27VEZ2yryks5SzYAgOBcNFjWlRLvFfA=
Subject key identifier: 09:EF:03:F2:37:CC:23:AE:A7:39:E0:86:49:B8:16:26:EF:2D:6F:4E
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer: /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial: 0194BD176115CE492B64784E6700D1D4CB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number: 10D8
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: 76NeYgCjOTZtn5IdyptgZulnJqJDGDXTULG4yKjL41k=)
2: NCoehdmUvbF9hjrmMyI6BY_y1Tg.roa (hash: oKUbCP0RxT560oSwid+jhRboIkVkQAnDdP+HNoQNqUU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:15:ce:49:2b:64:78:4e:67:00:d1:d4:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=09ef03f237cc23aea739e08649b81626ef2d6f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:16:9c:a7:7f:0f:9c:27:1c:dd:71:0d:c6:
0b:8d:ab:b4:76:fe:e6:c9:21:cd:0d:93:87:da:c3:
0a:21:1d:b3:06:5c:7e:80:ca:6c:3f:ac:3b:2c:52:
64:08:14:bd:02:9a:ec:19:2f:0e:6c:bf:56:a9:3e:
b4:b1:50:2a:92:cb:0b:45:30:3f:f8:00:f2:c4:22:
85:90:96:74:aa:9f:9b:f4:32:45:2a:d4:e5:56:de:
5f:9e:c8:d0:cf:98:62:82:70:b3:a8:2b:ce:c1:86:
d2:c8:20:90:05:28:4b:1d:77:cc:f0:23:5f:f3:9f:
36:97:fe:5d:4f:18:e7:c5:d7:9f:fc:ba:0b:bd:3c:
ce:67:45:dd:a0:14:a7:5b:8c:e4:d7:6b:35:72:f3:
83:d9:fe:f7:80:fa:37:2c:d6:94:bb:da:ac:c3:56:
86:b9:d3:ae:a8:24:59:0c:d2:e3:03:19:ba:57:05:
4b:69:52:07:8d:14:9f:8c:4d:97:87:e9:66:23:5c:
f1:40:1e:fa:d6:31:92:ee:30:99:26:31:62:d6:1f:
3c:c1:24:b3:0f:9a:d6:63:a5:d7:a5:da:fb:1c:e9:
0a:dd:5c:73:36:0f:59:bb:6a:85:d6:94:e6:60:93:
79:8f:c9:c0:35:d4:b3:12:ad:15:96:54:5d:49:d1:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:03:F2:37:CC:23:AE:A7:39:E0:86:49:B8:16:26:EF:2D:6F:4E
X509v3 Authority Key Identifier:
keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:23:43:fd:ae:45:37:cb:e6:b3:e4:7f:78:11:18:7b:75:e9:
3a:81:8d:68:b5:1e:58:27:06:5e:92:48:5d:49:1b:02:f2:97:
02:8a:c6:1a:73:14:03:2a:5e:1f:51:e7:40:fe:35:8c:ce:3d:
7d:b0:5e:7d:0b:4d:1e:ce:6a:5e:f5:58:29:c8:68:d0:c3:a5:
13:3d:82:85:e8:f0:79:2b:43:11:a0:14:9f:74:f4:03:f1:06:
ba:a1:b4:50:47:8c:e0:48:1e:48:46:3f:e8:aa:9f:38:3b:3c:
22:75:a3:1f:bf:51:3f:0a:80:93:60:6b:b0:ce:4f:d0:77:2c:
8d:3e:04:20:11:87:a0:61:94:7e:1d:6b:38:88:a9:1b:92:7e:
c4:ee:4d:74:cd:4f:4f:67:95:90:5e:f9:76:cf:28:a9:19:c4:
38:1f:62:a8:3e:06:04:8b:93:e8:24:9f:1b:32:50:85:34:0c:
01:4d:32:b0:45:e8:e9:4b:e2:d4:50:19:8a:b7:e3:58:a0:14:
d3:25:fd:01:92:23:1b:7e:ce:ee:bd:13:f6:bf:68:9c:5f:da:
b4:e7:4f:8e:f0:42:6b:2e:65:ea:b7:df:4c:9a:79:76:69:85:
c2:3d:78:eb:37:e4:aa:84:17:db:f2:cf:76:e7:93:e1:a0:a8:
30:f9:14:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:57 2025 by rpki-client