Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
File: IzTauoEYy0Grds1CEQT8xnTDgbE.mft (raw, json)
Hash identifier: QxmZsdeCd10yXJlayVb+Rq6V3ZizeMLOm4PGvdA2XmY=
Subject key identifier: 80:50:29:5F:2E:8B:20:85:B6:79:CF:9A:78:9C:FC:B7:42:C4:E9:06
Authority key identifier: 23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
Certificate issuer: /CN=2334daba8118cb41ab76cd421104fcc674c381b1
Certificate serial: 0194BD4E8B6A82DA44985C60AB49BCCF6B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
Manifest number: 079E
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: IzTauoEYy0Grds1CEQT8xnTDgbE.crl (hash: kNxs41GakEy6GCJAq7ggjM2jbzEl2xnHa+9GuwtWqWw=)
2: uhZZK-akbGhVsLyi-kTQNWEWPvk.roa (hash: ePeZw4AnAegBtNEJLSSS+Zd6GcJPtfuz8f+2h2Jk608=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8b:6a:82:da:44:98:5c:60:ab:49:bc:cf:6b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2334daba8118cb41ab76cd421104fcc674c381b1
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=8050295f2e8b2085b679cf9a789cfcb742c4e906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:ae:16:4d:82:ed:49:de:f9:70:25:d6:e6:
e1:14:af:b6:55:0a:b1:cb:79:ea:9f:35:da:64:14:
43:0a:f2:9d:b7:dd:47:3d:34:da:0d:d1:43:90:4f:
3a:25:0c:ae:35:2f:cc:03:32:6e:f1:f3:b9:a0:59:
77:d3:27:b1:9f:84:1d:e4:9a:a4:c4:54:ed:63:51:
d7:8f:ed:2a:9b:97:3e:bc:80:38:eb:0d:da:cf:d7:
36:16:56:9f:85:62:02:80:e7:91:2a:57:c8:90:60:
d0:f2:fb:86:8e:0f:fe:a0:18:00:64:f8:73:b8:ca:
ae:68:8b:4e:3e:40:42:1c:33:69:24:84:06:4d:71:
7e:50:67:64:ff:a5:bd:50:91:9d:01:ac:4f:af:e9:
a8:3b:d4:22:c4:2d:f4:97:84:1d:6b:f5:84:d2:71:
2b:ec:79:17:2c:13:6b:2a:96:21:42:43:ae:97:a6:
0a:0e:81:0a:f1:f4:c8:19:e1:e7:4c:53:5c:9e:f7:
2f:e7:56:a2:72:5d:d5:d1:ff:34:85:a2:f2:c6:8d:
4f:89:49:4b:c8:64:7e:b4:b0:4e:2c:5a:44:72:c5:
90:d2:2c:ba:f7:e9:71:61:3e:6f:e6:29:f3:48:57:
40:46:c3:00:08:cc:58:da:1f:25:37:64:24:e0:c3:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:29:5F:2E:8B:20:85:B6:79:CF:9A:78:9C:FC:B7:42:C4:E9:06
X509v3 Authority Key Identifier:
keyid:23:34:DA:BA:81:18:CB:41:AB:76:CD:42:11:04:FC:C6:74:C3:81:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzTauoEYy0Grds1CEQT8xnTDgbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d11b44-beeb-45e5-b6a3-82d490a33aa6/1/IzTauoEYy0Grds1CEQT8xnTDgbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2d:ea:68:e2:41:4e:77:3a:b0:42:c0:4f:a7:e6:86:e0:32:
ac:b5:31:5a:17:18:2f:90:25:a7:79:70:80:ac:29:4e:e3:ed:
10:fd:f3:5f:31:37:b0:3e:fe:07:8b:61:6d:0c:94:22:cd:c6:
fe:b3:78:79:48:d4:09:8c:42:75:b7:bc:ed:63:06:e1:d9:a2:
eb:37:df:9f:e7:32:2c:94:d0:de:85:97:8a:7e:0d:cc:cb:4a:
28:63:62:85:f1:c6:4f:8c:c8:6f:d5:38:8e:58:cb:e8:89:26:
35:ac:fd:17:6f:34:4d:a8:34:d4:5b:85:88:21:07:05:d5:bb:
f5:57:0b:06:55:d6:9d:5f:35:3a:c6:25:8a:40:d5:db:60:4f:
d9:82:73:9a:ba:42:99:53:92:7c:1a:ec:a2:6b:d2:18:ae:29:
ac:68:58:e3:1d:78:c2:08:5f:e9:f1:3e:67:17:92:8b:fa:00:
81:17:b2:03:77:b9:45:2a:b7:a1:3c:3e:89:b6:ae:d2:a3:b7:
51:f5:e7:d9:0d:c4:0f:c1:a0:8c:48:70:ad:15:b9:28:96:80:
85:68:75:51:ac:e5:43:e2:2d:de:bc:7f:7e:ba:4c:94:0a:3c:
fc:69:ed:85:f8:1f:bc:58:83:40:92:97:c4:b7:d3:c7:22:d1:
7f:c1:64:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client