Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: Gt3uBfTBs1HuxnqIFSgfbLz3YjRCeO9mpXkHbCKx0Rg=
Subject key identifier: E4:50:EC:BC:4A:72:FA:85:A5:72:BD:26:0A:73:C5:0A:4F:0F:6E:A7
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 0194BD4E482927A9D0789A6BF99D073DC6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 0E47
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: 0qBj2rIltJHMgSSf25EHtppLkQeD2Gp2YeSzI7IDix4=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:48:29:27:a9:d0:78:9a:6b:f9:9d:07:3d:c6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=e450ecbc4a72fa85a572bd260a73c50a4f0f6ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:df:47:bf:d6:aa:50:36:29:8d:c9:25:c9:
d9:90:2e:cd:79:61:82:02:48:7c:7d:1d:27:36:dd:
ad:ca:8a:10:8d:80:09:42:b7:47:d8:2a:4d:85:b3:
2c:c1:75:7a:0c:b2:62:60:ae:4b:21:9b:4a:d6:9e:
9b:77:94:e3:6f:0e:20:38:d4:57:c9:9f:0d:25:c4:
21:b6:46:9d:b1:ab:97:cb:e0:8a:ba:02:c0:91:9b:
98:c0:e6:27:0d:a2:dd:f4:a3:f9:91:4c:20:22:05:
0c:2b:e8:b9:7a:80:13:43:4e:a3:04:24:17:b1:8b:
0b:ba:e9:b5:b8:0c:d1:a5:25:48:be:5b:5a:97:92:
0b:49:95:db:ab:6c:c0:5b:af:ce:aa:93:0b:f3:fd:
61:ef:98:6c:8d:cf:ca:02:de:96:6e:37:3c:de:bf:
28:e1:55:00:25:18:bf:98:c3:70:14:f0:37:52:aa:
c7:8f:ac:8e:e8:58:8d:bb:35:3e:70:b5:46:97:19:
89:6b:3f:13:47:3b:ad:0f:ab:a0:53:7e:95:be:82:
fa:8f:16:0c:2d:91:e1:23:f5:61:80:97:e5:3e:2b:
c7:0f:d8:fa:89:5c:58:e5:60:b1:9a:e7:5a:d4:51:
95:01:84:6d:36:ef:67:4c:2b:8a:8c:4a:55:34:a8:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:50:EC:BC:4A:72:FA:85:A5:72:BD:26:0A:73:C5:0A:4F:0F:6E:A7
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2f:5d:a3:d7:ce:65:3f:c0:34:f7:19:17:a8:31:b0:b2:ea:
78:a9:c9:05:46:e9:58:e5:14:6d:b2:66:67:9f:c4:f0:aa:22:
d7:50:3d:01:45:97:b6:68:c4:c1:18:3e:a1:a9:5b:1d:e9:0e:
bc:d9:b4:f5:47:b6:95:84:d1:e4:7d:a6:e2:a5:a6:e3:1f:4e:
b8:77:37:66:a5:6a:47:a7:eb:ca:b0:76:63:11:0f:f3:b6:7f:
51:46:4b:b7:f3:f6:19:c2:d9:e3:ff:16:d8:52:89:12:20:7e:
a7:c1:67:b9:64:7d:58:83:a1:ad:48:64:35:11:92:7f:14:3e:
b8:3e:c7:0e:71:7f:85:88:98:4c:a9:fc:c4:e0:10:81:09:ec:
d4:45:3a:73:c7:3e:95:b0:aa:4f:10:de:72:3d:62:9f:4e:fe:
a0:15:19:a3:e1:24:4e:b0:4c:e0:3a:2e:4d:f8:51:43:39:c0:
14:ca:c6:87:31:2c:8a:96:d2:fa:aa:e9:aa:89:71:8c:f0:31:
a2:79:bc:64:08:f2:7e:47:ca:22:2a:06:19:b8:df:f0:10:63:
a7:c6:fe:8d:51:20:15:1c:ce:23:37:8b:0e:ab:7b:1f:7d:e4:
bd:99:e2:2b:65:57:1d:ae:7e:ce:7d:72:69:e6:3f:e1:c0:f8:
04:b3:c6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:33 2025 by rpki-client