Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier: g5iq9aIJMWNH9YAqrbK/s4FHbPGgytpkUkeiHUxY7n0=
Subject key identifier: A4:0E:AF:67:7E:08:DD:21:1F:04:00:82:72:B6:86:8A:3A:A9:7C:93
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial: 0194BC731E60EC3FA44CB4C3F3F1DAD53A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=)
2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: cqJ5u1U44hPNLIqdBTpLIkFsl1CJgvwT2yf+a3r5qe0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1e:60:ec:3f:a4:4c:b4:c3:f3:f1:da:d5:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=a40eaf677e08dd211f04008272b6868a3aa97c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:91:d6:08:2b:de:43:73:6f:26:e7:7b:50:
7c:ac:21:02:40:c2:70:b0:17:8a:ad:5b:5f:c8:56:
af:dc:fd:78:15:65:d1:c3:8d:81:11:5e:1b:6a:7a:
12:c9:3f:cd:fa:06:fa:7c:7e:19:86:93:be:26:d7:
d0:6c:86:2d:84:3f:a6:4a:b7:a3:a2:53:91:c3:b2:
2e:19:cc:13:7f:6d:10:a7:7b:d8:1f:e8:e3:e0:5b:
61:8e:30:0c:0c:12:d6:eb:e8:16:1a:2e:0b:90:5c:
0c:0b:2e:ee:a0:58:47:47:dd:af:9e:40:25:55:26:
f4:e2:e9:e4:d7:7c:1f:de:7e:bd:4a:4e:57:74:04:
f6:03:10:7d:e0:c0:f6:f3:8a:1a:d4:f2:ab:f0:ba:
c8:61:1c:03:96:77:1b:90:5d:03:e2:7d:25:11:13:
69:75:79:e3:28:31:eb:18:09:ff:e0:be:38:17:fb:
c9:89:08:23:f5:66:3f:6a:c8:ee:d2:0e:26:fd:9c:
30:ac:83:0e:a4:47:5c:26:93:69:1b:e4:12:f7:ce:
cd:da:4f:34:77:6e:fd:79:9d:4a:56:3e:b7:3c:f3:
f0:e1:02:87:f8:29:56:72:a5:55:ac:d6:a5:11:ee:
6d:8a:0a:75:3c:f6:21:c6:b9:c3:d5:1a:99:c6:54:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:AF:67:7E:08:DD:21:1F:04:00:82:72:B6:86:8A:3A:A9:7C:93
X509v3 Authority Key Identifier:
keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:80:77:78:62:a9:59:00:61:98:a7:02:61:82:e7:cc:42:d1:
b8:ea:82:b8:a1:4e:0d:4c:8c:d5:61:64:27:9d:a4:c7:66:7f:
18:15:d7:fb:c0:5f:69:c2:3d:a4:3a:06:47:a7:46:58:b6:ba:
18:c5:b7:c9:7b:6a:66:f0:31:2f:27:2b:04:d4:2c:36:9a:68:
a8:8c:56:bd:46:bd:0a:d7:1b:2f:84:16:12:25:51:1d:d2:b1:
ad:e3:55:27:c6:d9:2d:70:94:d0:67:cd:df:3b:a9:0e:28:66:
be:83:7a:ad:cd:33:7e:de:d2:f5:f9:ce:92:0c:9b:a9:86:d0:
92:2c:ac:1b:9c:a7:6c:61:d7:66:66:08:ff:d3:be:c5:c2:90:
8e:c7:34:6a:b2:1f:8c:01:cc:01:ad:0d:dc:7c:9e:4b:e3:03:
9a:67:ea:b0:bd:c0:57:89:df:7c:91:b9:5b:3a:d9:e2:06:34:
2e:90:49:88:de:2b:81:b8:10:ac:28:67:7e:aa:d6:40:50:44:
d0:33:30:e8:1c:cb:75:a3:7e:a9:da:b9:25:40:28:fd:05:93:
2a:4b:0b:26:eb:d9:20:a7:12:31:50:22:eb:54:89:c5:21:d9:
e4:86:94:dc:48:04:cc:7d:9b:3e:a2:ee:4c:07:5c:97:9d:39:
af:3c:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:13 2025 by rpki-client