Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File: iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier: Ysjlb9jnFrJEvL/3lvSrFP8GO+5weuM7iBmxTUMsqFA=
Subject key identifier: C8:30:AF:E4:60:3F:83:27:C2:B2:F3:49:19:8F:FE:89:02:4C:BB:A4
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 0194BD4EC132EB34BBF0B99DAB44F77742D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: 1-dqt2rN6d4zMTr30hL21uHD8mgs.roa (hash: 9J3OxeItEP/tcUsxKEYBHkcY9sk3+Jl9zYiOLoIv6HY=)
2: Rci7eL5oGCzv6_tfiW1PmTeawXg.roa (hash: 3Pq4pZ2HNSo1E8MLs1V/VYEm7An/GW4ggGPzeCvBY/A=)
3: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: s/HJzYSVpgff/YW5EzWNDOKY0HVcqcOOxg6/pzX9MFE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:32:eb:34:bb:f0:b9:9d:ab:44:f7:77:42:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=c830afe4603f8327c2b2f349198ffe89024cbba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:bf:8b:98:17:54:f2:a6:55:ee:9c:e4:87:
1b:fa:e0:20:fb:be:11:d6:5d:1f:1d:07:90:27:cc:
4d:21:78:ff:6a:29:6b:bf:dc:76:94:a4:a5:46:f3:
6e:25:27:a9:73:92:0c:59:a8:6f:19:63:3d:12:0e:
7f:be:91:2e:84:e9:f9:43:4a:05:7a:15:0c:19:9f:
f4:06:0a:6c:30:88:62:a4:ec:d6:85:38:c2:b6:62:
47:06:29:76:18:fb:7f:b2:26:26:f6:76:05:06:3d:
8b:2f:ee:8c:62:19:ec:67:fa:8f:31:85:f9:3f:9a:
66:bc:e2:1b:9e:15:9b:52:49:42:75:33:b5:7f:8e:
f3:3a:91:64:19:e6:a6:e3:f0:72:cb:66:3c:0b:c1:
3d:01:7c:26:4e:09:67:c3:1f:6a:7f:f9:10:a1:8d:
d3:c3:65:1a:0f:26:41:e9:26:b9:97:99:1f:eb:7d:
bd:10:67:e6:40:1a:0e:07:88:ee:87:f2:a8:2c:aa:
a3:eb:f9:2a:d1:73:36:e2:dc:24:8a:bf:36:16:d4:
71:84:71:21:b2:43:b7:1a:55:dc:73:df:eb:08:07:
0b:d8:1d:e1:b0:f2:92:3d:86:09:f2:15:ef:9d:24:
f4:41:2d:f5:75:42:63:25:cf:d1:67:1f:34:f0:32:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:AF:E4:60:3F:83:27:C2:B2:F3:49:19:8F:FE:89:02:4C:BB:A4
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0d:d6:57:9c:5d:00:32:c1:6c:64:ca:04:df:6e:c4:fa:61:
0f:81:05:9a:e6:73:af:91:93:3b:94:d2:19:51:69:c4:53:07:
2f:ae:04:53:8a:47:91:7e:ca:f4:d4:81:16:c7:2d:97:ba:ff:
8e:c3:84:fe:69:3d:e3:8d:87:63:c9:cf:17:06:69:2f:58:c8:
06:62:28:b8:e3:19:0c:89:b6:19:28:e2:84:b9:6d:cd:ca:c7:
04:6f:55:af:77:0c:98:c0:2b:d0:54:10:a6:44:25:d4:25:02:
36:95:97:65:c5:29:b8:16:35:c9:ca:90:44:3e:87:d3:8a:a6:
df:f5:0a:b4:c5:89:ed:1e:11:15:76:26:56:44:83:38:15:f8:
65:87:2c:8d:b9:6d:71:e4:89:cd:e9:34:c7:73:5a:a4:69:7a:
d4:65:b8:71:55:7a:d7:15:3f:be:29:74:9f:02:c6:7f:9e:d1:
7e:00:48:e2:43:d4:af:d9:23:52:20:e7:11:00:ee:61:95:68:
02:48:3b:bc:0d:7e:fc:e3:21:b7:d6:2a:13:71:05:83:50:15:
5e:2d:e7:cb:65:65:ee:28:98:6b:c6:db:58:4d:db:f9:52:6a:
6c:68:5e:31:d3:72:fa:8c:fb:30:0d:74:e2:27:8c:58:d2:29:
1d:a1:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:00 2025 by rpki-client