Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
File: i70nOhRTYWFVEmDYSNdvomRGzUY.mft (raw, json)
Hash identifier: UNOIANKPe9aMNF271iaEL3N+9X/4GqH9y9pgIcfA/Rk=
Subject key identifier: C2:22:6B:AD:37:08:CF:4E:46:20:F8:83:02:DA:63:3B:EF:16:91:B2
Authority key identifier: 8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
Certificate issuer: /CN=8bbd273a14536161551260d848d76fa26446cd46
Certificate serial: 0194BC19E89FD47E04F748A6FEEB56D30374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
Manifest number: 02
Signing time: Fri 31 Jan 2025 11:23:22 +0000
Manifest this update: Fri 31 Jan 2025 11:23:22 +0000
Manifest next update: Sat 01 Feb 2025 11:23:22 +0000
Files and hashes: 1: i70nOhRTYWFVEmDYSNdvomRGzUY.crl (hash: fbK3gEEEHXrTq+Z4sHD3TzY9I/ZJ3ZFSwdzwxXdFPf4=)
2: iW3M8w8EnOfRKmq5UL0Jzk_nXrc.roa (hash: vQxUQ/gQ4diOyDGNSgt4mcIRpvqTprh0PY77byZ05KY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:19:e8:9f:d4:7e:04:f7:48:a6:fe:eb:56:d3:03:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bbd273a14536161551260d848d76fa26446cd46
Validity
Not Before: Jan 31 11:23:22 2025 GMT
Not After : Feb 1 11:23:22 2025 GMT
Subject: CN=c2226bad3708cf4e4620f88302da633bef1691b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:50:34:d7:07:2a:46:43:56:12:88:86:b4:
50:d9:e1:5f:f4:9e:60:6f:f0:50:de:bc:67:8f:47:
ea:80:5c:7c:94:b1:de:ae:b9:8c:ee:5f:4d:37:ba:
c5:8e:6a:9a:52:27:45:fa:64:86:19:74:96:6b:a2:
94:af:68:69:2f:61:3e:46:de:9d:59:74:fd:42:1a:
3f:66:a9:3e:89:ba:e4:ff:0a:80:25:84:a9:2c:e6:
e6:62:70:d5:79:33:90:47:ba:43:e5:8e:5f:af:56:
c9:08:0b:d9:d0:45:8b:f4:63:b8:e5:76:aa:75:18:
f5:e9:9c:97:21:0c:fa:4a:b4:62:9a:d0:5c:68:c0:
36:eb:22:9c:38:a4:28:ce:ca:05:60:23:7b:c2:13:
b2:1e:f7:19:5e:9c:76:f0:60:ca:63:7b:d5:17:cd:
a5:e6:f0:6c:54:39:75:7a:b7:b9:78:5a:80:d2:d6:
9a:84:33:f0:b9:93:88:65:de:32:1a:6d:84:fd:22:
14:1b:61:1d:f2:43:cd:ed:cd:58:54:72:07:07:6a:
01:e5:fd:e6:2b:08:18:bd:18:79:62:72:a0:6a:6c:
cd:a2:e4:01:d4:8d:44:d9:fb:d7:8d:47:83:6c:b3:
5e:88:66:4c:1c:62:84:2c:be:fd:50:08:9b:b1:eb:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:22:6B:AD:37:08:CF:4E:46:20:F8:83:02:DA:63:3B:EF:16:91:B2
X509v3 Authority Key Identifier:
keyid:8B:BD:27:3A:14:53:61:61:55:12:60:D8:48:D7:6F:A2:64:46:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i70nOhRTYWFVEmDYSNdvomRGzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a733f6-09ad-4f1a-a357-e162203296bb/1/i70nOhRTYWFVEmDYSNdvomRGzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:26:a9:80:43:8b:2f:22:84:39:0d:88:fe:38:15:d8:48:c1:
2a:d9:e7:18:04:9f:f7:c1:44:1c:87:e5:26:9b:0b:cd:a3:10:
bb:df:64:16:fc:20:e0:d7:b4:ff:d8:95:c2:44:e1:64:aa:a0:
2e:48:5d:5a:50:65:1c:83:da:f9:38:d0:41:cd:83:ca:75:51:
ca:ba:79:50:1c:82:43:7b:02:7f:4c:e9:93:d9:ca:6c:ed:0c:
33:e9:fb:95:37:b6:1f:52:f7:1e:07:7e:79:c9:74:37:05:72:
bb:f2:f9:3e:7d:21:15:5f:b7:65:d3:e1:d7:d8:9d:6a:f1:c5:
fd:9f:52:a4:55:ed:98:71:15:62:3f:08:cf:bb:fc:03:c2:4f:
86:90:ee:5a:81:98:1d:f5:14:9d:53:79:ab:22:ac:09:2e:c4:
c1:cb:4e:6c:74:a4:91:47:86:f4:b1:16:8b:81:84:f9:4b:0b:
e2:83:26:99:a8:5a:97:cf:b6:d5:1a:07:f0:bf:63:49:a6:d4:
15:77:00:77:e2:0b:8b:a8:71:31:bd:17:84:1c:b0:f4:8f:36:
28:35:3d:70:d6:ef:8b:bc:8d:08:d5:42:19:cd:b5:92:2b:bd:
b2:b7:1a:eb:78:5e:b4:1e:27:7b:ba:e5:73:78:5f:fd:7b:c1:
6c:fe:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:59 2025 by rpki-client