Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier: 2+cZN1gZxWNrQAEVlz0WWgbtmyxTftDxCBqR3IOeKsU=
Subject key identifier: 7D:8E:18:B0:A4:98:26:98:0A:FB:28:B8:C7:B4:C4:CA:20:4C:FC:BF
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer: /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial: 0194BC72B0BA29B0EF41FC8242755038ACDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number: 0BDF
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: bkUO9YFFVcyzuJuKsYfAFEiFXEoODnMO0sQjysdzp1E=)
2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:ba:29:b0:ef:41:fc:82:42:75:50:38:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=7d8e18b0a49826980afb28b8c7b4c4ca204cfcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:da:bc:2a:f5:a4:97:c9:dd:d7:f8:e1:9a:16:
4b:b6:7e:cf:b4:94:2c:08:c9:25:d2:5b:7a:e7:6f:
d1:4b:c8:e3:3f:60:1f:4b:21:ba:ce:f7:d6:ca:44:
32:42:27:3c:d0:a4:d7:16:58:ee:eb:c5:26:a3:55:
03:3c:aa:81:5a:df:ce:cf:29:6c:57:38:f7:91:13:
7d:2a:c2:94:6d:27:f1:b3:8b:3d:dc:d3:56:91:f9:
ba:f2:c3:55:3e:51:65:2b:8c:a1:93:83:f2:22:09:
14:e8:49:4f:25:9d:52:78:78:85:f0:20:4d:2e:8f:
26:04:7c:93:0e:87:c0:be:79:39:76:6d:6b:f7:d4:
2b:2c:8b:1e:50:3c:8e:ce:82:42:e2:86:a4:17:ca:
19:e6:b5:02:d4:7f:cc:73:5d:00:f4:f0:41:64:84:
35:0d:fd:cf:49:af:de:2a:41:a8:b0:6a:66:cd:c9:
62:8d:f6:07:4d:2a:41:57:4d:12:36:63:30:0a:69:
f0:12:81:0e:40:fc:07:91:55:6c:ef:40:ee:cf:89:
7b:22:e8:dd:70:bd:fe:ce:5c:7d:7f:da:8b:e9:57:
30:7a:50:ef:e4:e0:ff:1d:d5:34:5a:23:6a:53:82:
09:74:9d:70:46:f5:f5:8f:27:69:4b:b5:b8:43:23:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:18:B0:A4:98:26:98:0A:FB:28:B8:C7:B4:C4:CA:20:4C:FC:BF
X509v3 Authority Key Identifier:
keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8e:e2:a2:38:5b:52:8c:ff:c5:30:1b:73:2e:98:9b:34:24:
12:a7:9d:a5:ba:35:e0:de:95:70:6d:41:69:54:c8:2e:15:db:
77:65:d7:66:4d:0d:9a:ac:6d:75:63:5e:99:d2:8c:fe:e6:bd:
25:86:34:d2:4c:b3:15:01:5d:a6:7e:09:27:80:ae:43:fd:38:
6e:39:e2:75:37:9d:f2:3f:f8:7e:40:a5:e3:79:8c:61:0d:9d:
c6:6b:44:38:8a:00:df:08:87:71:21:00:f3:b2:8e:bc:05:98:
16:52:94:3b:37:e4:09:56:83:b9:8d:94:52:62:43:17:7e:71:
2a:7b:a0:da:21:d3:77:eb:64:2e:6f:06:c5:2a:80:12:1b:4d:
84:e4:cb:7d:8e:62:cd:fd:dd:a4:bc:6d:35:85:4e:dc:23:19:
53:5a:1c:6f:35:f2:43:f9:77:2f:75:96:53:f5:0e:23:ac:64:
59:47:f8:f1:b3:b3:8c:18:a1:cc:19:77:a8:b7:f6:e5:3c:26:
93:61:92:2b:fc:a9:bc:bc:b4:22:de:e6:94:a4:e8:d4:06:ca:
ca:79:ac:e4:db:8a:14:e8:4d:c5:ab:ba:34:93:98:04:43:2e:
a6:3b:c7:c6:e1:ba:fa:20:31:e7:86:d9:ee:44:76:ba:88:84:
9a:05:0a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:08 2025 by rpki-client