Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
File: iTr-zXEXBcR2t4XQyG71TCEkNUw.mft (raw, json)
Hash identifier: s0oMW/eDccAhbYKcbP5Q9kbrUiys8gU8y47lCP1NPn0=
Subject key identifier: 7D:78:1C:9E:2D:DB:FA:25:EA:1C:C4:92:0B:32:EF:1C:4F:16:D3:A5
Authority key identifier: 89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
Certificate issuer: /CN=893afecd711705c476b785d0c86ef54c2124354c
Certificate serial: 0194BD853E31FFBFFE3C892FF3188B97F2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:13 +0000
Manifest this update: Fri 31 Jan 2025 18:00:13 +0000
Manifest next update: Sat 01 Feb 2025 18:00:13 +0000
Files and hashes: 1: I3MDgaIPk5rQhFYqlKJ88u7QcKA.roa (hash: 9W6ILnGR89GeCDK+0ZtMLah7T+7H4VrTikrakuva5SY=)
2: iTr-zXEXBcR2t4XQyG71TCEkNUw.crl (hash: uNHftQtthitP4l3qjcEbizZs+F//iJvQQNxdgm8gqP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3e:31:ff:bf:fe:3c:89:2f:f3:18:8b:97:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afecd711705c476b785d0c86ef54c2124354c
Validity
Not Before: Jan 31 18:00:13 2025 GMT
Not After : Feb 1 18:00:13 2025 GMT
Subject: CN=7d781c9e2ddbfa25ea1cc4920b32ef1c4f16d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:7a:d5:38:72:91:46:f1:bc:3d:b4:09:ec:
f0:82:72:a2:58:d0:18:61:7c:0b:47:97:9d:25:da:
7a:fe:a4:f2:c2:3b:82:ee:06:fd:35:fc:1a:3f:cc:
99:16:3f:92:c8:8e:35:eb:60:b6:00:22:9d:f6:02:
7e:0c:8f:62:e8:fb:dd:78:f9:1e:04:ef:d6:89:47:
0d:8d:31:98:72:31:33:c3:2c:f7:34:2c:4a:ae:0f:
28:85:0a:0c:65:f4:bb:e9:10:b8:b5:71:ae:ee:a7:
1e:63:df:ca:6a:a1:7a:6a:e4:e1:83:93:26:81:9e:
30:6d:9e:64:e5:4d:79:92:75:a4:42:41:73:02:bd:
21:92:1c:cd:06:f3:57:49:ab:79:77:97:5c:82:53:
ef:cd:17:3c:b0:38:47:18:37:5d:3b:4a:1f:e9:b0:
14:d8:24:49:f8:d5:94:bc:34:25:96:5c:c1:58:13:
99:2d:04:81:2b:fa:f3:af:da:b8:6e:a2:5f:4b:ff:
29:15:3f:e3:56:43:b2:0f:f8:26:7b:30:9c:26:f2:
9b:19:e1:f5:bb:1e:a7:52:d5:99:c7:43:bb:15:c2:
52:aa:af:38:c0:87:c6:e6:4b:7f:e2:a8:ff:f7:7d:
b7:28:cf:4a:a9:eb:9e:15:67:e8:3f:13:a6:c4:b9:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:1C:9E:2D:DB:FA:25:EA:1C:C4:92:0B:32:EF:1C:4F:16:D3:A5
X509v3 Authority Key Identifier:
keyid:89:3A:FE:CD:71:17:05:C4:76:B7:85:D0:C8:6E:F5:4C:21:24:35:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr-zXEXBcR2t4XQyG71TCEkNUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ca3b5f-0221-43ad-8abd-1c13206a8123/1/iTr-zXEXBcR2t4XQyG71TCEkNUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:6d:db:e9:5d:71:04:b9:e5:38:b9:6e:4f:5a:11:25:88:2e:
cb:01:33:5a:2c:b0:00:d1:d9:da:76:3b:63:01:4c:d2:5f:11:
c9:bc:6a:fb:c8:b3:2d:4b:29:37:23:e1:2a:8b:a9:e6:0c:36:
50:aa:b9:56:67:fe:83:9f:d8:f8:e9:50:9d:40:5f:92:80:d4:
b8:e5:d5:64:f4:80:6e:a6:a7:4e:53:3d:a9:49:35:8f:8c:9e:
aa:54:cb:3c:4e:f0:ab:25:c6:c0:e7:16:dd:e7:7d:df:b4:f8:
d9:1e:35:9a:bb:a3:9c:38:c2:a7:97:39:b7:46:5b:4f:48:72:
68:9d:03:53:d6:b8:ca:f7:87:a8:91:93:0c:2c:a3:d8:56:ba:
90:66:fa:21:44:40:23:77:c5:26:e5:ac:c6:12:81:ed:87:1f:
73:df:1a:9f:6e:d0:8b:df:50:8e:ae:4d:f0:3e:4a:ce:1f:ac:
bf:75:e1:de:af:7d:f5:4b:39:0b:ed:be:ce:76:6d:7e:e7:9f:
85:35:2b:29:39:95:4f:d2:53:f1:ac:f5:d4:36:f5:66:80:fd:
6d:21:d9:63:5d:d7:db:d1:c0:2f:68:b7:50:0a:22:c3:9d:13:
f2:5b:11:08:93:d7:14:f6:67:79:d3:25:88:77:50:15:3d:ca:
3b:de:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:00:41 2025 by rpki-client