Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: ocpr5EUIsIU8ry0Lw6ek9VKsZLXjaUReU3XDEjZnob4=
Subject key identifier: 8E:66:13:FC:43:91:1A:6D:7A:45:27:88:7D:01:E4:82:A9:5D:B7:22
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 0194BBCECCDDABC547997B652E2838576278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: K+P78vpOUv9+kcKBBWO5gRbINTMeSHcxE2H246am5q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cc:dd:ab:c5:47:99:7b:65:2e:28:38:57:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=8e6613fc43911a6d7a4527887d01e482a95db722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:57:0e:20:d7:c4:b6:26:2c:c5:0d:de:5e:
d6:e7:8f:1d:b6:49:19:93:13:04:ec:4e:18:92:e4:
8c:e7:cb:9c:c1:9c:59:5f:ea:5c:6d:d3:ce:12:bd:
ca:73:21:00:1f:6e:9e:e8:40:3f:b5:6e:68:61:a3:
9c:bd:c1:a6:29:9b:68:92:23:93:0b:17:cd:94:df:
e5:ed:84:38:fd:a6:9f:d5:09:09:fc:83:33:4d:e6:
9d:6e:e0:ae:e8:f5:44:6a:20:f4:49:85:e8:fd:de:
93:27:7c:9d:84:4e:79:48:75:28:72:76:4d:48:5b:
b7:0e:91:93:65:12:ca:56:50:52:c5:b0:da:ba:42:
c9:47:eb:a3:e5:32:fa:e0:ce:d9:9a:6b:3a:7b:f3:
69:c5:6f:a3:64:60:d3:c5:df:69:82:ff:88:a9:2b:
b1:e2:37:c1:e0:9e:1d:ec:2c:df:ac:f9:12:20:80:
dc:bd:ec:aa:c5:f9:61:94:f9:ab:f0:60:10:8f:48:
4d:9b:a0:fb:44:2e:0b:f0:68:63:53:e9:ae:4e:9d:
40:ba:95:da:80:c8:77:5e:02:78:91:66:2c:0b:f4:
ed:3b:5b:57:8f:99:41:ab:fa:d3:01:79:22:cf:86:
0a:66:a8:1d:c4:39:6a:1c:05:41:c5:29:14:44:4b:
a6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:66:13:FC:43:91:1A:6D:7A:45:27:88:7D:01:E4:82:A9:5D:B7:22
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0d:c2:28:28:3e:10:5b:70:71:86:c7:84:76:80:38:13:ed:
6a:88:8c:b1:11:dc:48:6d:ce:04:a7:42:5e:0b:e5:bf:5e:70:
02:05:43:6e:03:fa:90:56:52:ec:77:f5:3f:ce:46:20:2b:8c:
be:b5:7c:bd:9d:40:1c:27:a1:d6:20:08:2c:10:32:91:c2:70:
aa:46:26:2b:de:a1:a5:a3:7c:03:21:6a:a9:01:65:f1:91:5c:
b5:57:d6:d6:df:f2:11:1b:5b:16:c3:ee:41:4e:e0:e7:ff:ae:
ac:3c:c0:22:ff:89:74:34:56:d5:3a:0c:e7:08:80:02:bf:15:
25:49:82:1b:b6:31:65:3e:bd:28:fc:72:2b:4b:a1:14:c0:c6:
9f:7e:89:41:6e:22:f5:06:c9:b8:6f:11:f2:a4:f5:50:f8:50:
af:f0:d1:ff:70:74:97:2e:74:f7:8e:16:13:dd:17:b5:c5:8e:
5f:0e:d9:c1:96:37:33:ba:e4:b3:1b:12:f4:63:54:82:42:80:
64:e8:04:9c:11:ba:2d:1b:8b:94:07:a1:bd:8d:58:a2:86:02:
b2:5d:cc:40:27:9b:27:57:9e:2b:26:b5:ed:2e:78:54:a5:b0:
9b:34:6d:47:b3:b6:17:ed:45:d9:8c:d1:cc:5c:0b:c0:e2:61:
81:f3:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:01 2025 by rpki-client