Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
File: IGfzCg2Q0tFymS6a6m9znQGyh5I.mft (raw, json)
Hash identifier: bg9shJJwGnpAPYryXgkHIh2CoBFIXgSvl93SWBGP0jk=
Subject key identifier: 4D:22:AE:37:B0:7D:63:96:1F:C2:94:50:9F:A4:BB:DA:9B:BD:55:D4
Authority key identifier: 20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
Certificate issuer: /CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Certificate serial: 0194BBCE388799DF8B2122B63B2186515939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
Manifest number: 06F1
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: IGfzCg2Q0tFymS6a6m9znQGyh5I.crl (hash: 2goy5h2NfLFowbJfKSJ6As1DyilAtKAzwbb4+WUu59c=)
2: tYexsQdQ-bwy8SQ16CJTCKZPCX8.roa (hash: 4iRrkMtR/RQqmCmFoKMuS1dWTtpIHivuyEUKzRu+I4I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:87:99:df:8b:21:22:b6:3b:21:86:51:59:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2067f30a0d90d2d172992e9aea6f739d01b28792
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=4d22ae37b07d63961fc294509fa4bbda9bbd55d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:f4:2e:2d:a1:5d:23:12:d2:80:32:58:de:
31:13:c4:20:ed:4e:e9:98:9f:5b:43:28:a2:e7:ce:
7f:03:d4:9a:a0:33:06:a4:64:1b:08:7e:40:dd:9d:
35:d5:fa:9f:fe:07:b5:41:16:62:93:d6:2b:78:b9:
c6:49:d9:c5:29:a1:14:0b:d6:87:9d:f0:8a:45:d6:
a8:a4:11:f3:9f:3c:04:74:1f:5d:9c:d9:6a:40:57:
2d:ca:c7:d9:21:9e:74:75:ae:d6:a9:6f:e4:39:ff:
9b:0e:88:f5:21:79:85:1b:a0:eb:74:2b:06:98:7e:
20:ff:c7:68:61:dc:1b:cf:4c:92:37:cd:61:9e:8d:
6e:67:d2:ba:2e:f2:18:f9:24:63:af:b2:1b:32:6a:
ae:7c:db:9f:9b:eb:f3:1c:f4:a5:94:79:a4:c1:a6:
c5:82:b9:f9:d9:fd:c6:db:55:ca:65:e1:43:06:cb:
15:4c:a9:08:d4:d8:61:de:aa:e0:db:4d:b0:64:2e:
88:bb:b5:b3:6e:2b:b1:10:4d:c1:28:17:77:25:ae:
7b:e7:a2:68:c8:7c:a0:6f:9b:a1:68:3d:5c:6f:df:
8c:81:3c:4a:b7:78:36:09:a6:01:f2:8c:2e:57:26:
2d:a7:13:fc:69:a3:f4:7c:d2:e6:78:c5:ad:b5:51:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:AE:37:B0:7D:63:96:1F:C2:94:50:9F:A4:BB:DA:9B:BD:55:D4
X509v3 Authority Key Identifier:
keyid:20:67:F3:0A:0D:90:D2:D1:72:99:2E:9A:EA:6F:73:9D:01:B2:87:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGfzCg2Q0tFymS6a6m9znQGyh5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f45bda-786e-41e9-8323-ba4926e965e8/1/IGfzCg2Q0tFymS6a6m9znQGyh5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b8:a6:b0:14:17:d3:f7:e1:7f:3c:c6:bb:e7:50:47:45:fb:
31:b4:33:c1:31:1a:83:d4:74:62:eb:ac:26:97:0b:e6:a4:9b:
22:a2:32:4d:a8:37:76:4a:07:3e:c9:4b:88:89:6d:ad:0d:d2:
98:75:26:96:a2:a2:ad:3d:62:ad:c6:65:94:7a:57:a0:e7:43:
d2:bd:66:c6:33:7b:ad:fc:52:19:1b:d2:09:ba:81:90:d9:32:
c3:00:09:a5:36:c0:0e:4a:3d:7a:7f:4a:c5:f2:42:26:a8:21:
9e:ab:ba:c3:5d:b2:bd:d6:f6:91:1b:11:c1:c0:df:8e:d4:33:
3e:95:3b:09:4f:1c:dd:fe:d7:ba:1b:36:77:7a:d1:23:41:2f:
c6:7a:0f:20:d9:28:e3:f9:65:5a:61:5e:d7:ee:bc:fc:41:7b:
c4:ea:b5:c4:2b:3c:9a:57:c0:f4:13:65:e0:6d:b1:1a:0b:08:
0d:10:d0:23:4e:1b:59:78:54:f9:6c:c3:d7:7a:8d:88:f6:fa:
6f:cb:2f:54:43:4b:93:32:d4:1b:84:9b:ba:43:70:34:1d:0b:
f0:9d:dd:a2:c7:a6:39:e8:c1:66:4e:f4:71:59:c2:a8:7d:4a:
7a:ba:b8:02:85:3a:1c:2a:40:d7:32:59:10:89:cf:94:32:87:
96:16:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:42 2025 by rpki-client