Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
File: ILgwgzh4tshhJpoOKkWDeqlIW-E.mft (raw, json)
Hash identifier: m7mcb96QajF5ljOeLk0Q+MbotvIIlwfprHiMtWxFP78=
Subject key identifier: 9E:48:8E:AC:AC:76:C0:8B:88:B7:BA:C2:BA:5E:D7:F3:37:C7:2B:C1
Authority key identifier: 20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
Certificate issuer: /CN=20b830833878b6c861269a0e2a45837aa9485be1
Certificate serial: 0194BCA9F0269EDACC9113C6312B34E7332F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
Manifest number: 045A
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: ILgwgzh4tshhJpoOKkWDeqlIW-E.crl (hash: nDNkKVx0ETsHilqqtmClYnu2BMqAavTZ3Yu6YYLtsmE=)
2: Ykp7B25gotnyLx9mDtSzNq96W6k.roa (hash: NIlK9x59nPV4O79DLDS8wTUzWHzJ4y+mS34Pzan31ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:26:9e:da:cc:91:13:c6:31:2b:34:e7:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b830833878b6c861269a0e2a45837aa9485be1
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=9e488eacac76c08b88b7bac2ba5ed7f337c72bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:bc:9b:00:cb:9e:5b:ab:cb:d4:e3:d4:bc:
9f:22:45:5d:5c:ac:dd:47:33:1c:e1:75:55:90:ea:
69:0b:ba:9b:a4:0a:21:af:74:0f:2c:7c:bd:6e:1e:
a3:da:d2:79:9b:e5:92:31:0a:8b:95:6b:1a:5f:85:
19:04:c9:de:0b:ea:2e:d8:63:45:c4:6f:c4:89:44:
bc:87:08:28:0a:36:73:63:cd:96:7c:ae:d2:8a:bf:
d0:66:eb:67:74:ff:04:6e:8d:0e:9d:28:02:88:35:
87:40:1f:a1:5d:e6:e9:79:62:be:dd:3a:79:25:6d:
8e:f1:24:ac:73:0d:f7:55:4e:88:18:ee:ba:11:0d:
0c:a5:fa:11:9d:01:06:19:9e:da:27:96:ea:73:48:
d5:4b:78:e5:82:bf:e5:77:76:5c:1d:f5:78:51:f5:
e5:d1:40:d4:8f:eb:7e:e4:ac:fb:a2:4c:e4:d2:b5:
7d:fb:54:37:f3:41:14:45:92:17:3a:85:ce:14:8b:
52:35:2e:f6:08:ec:7a:a5:f4:2e:fe:ad:a9:d5:11:
85:b3:71:5b:a2:82:0a:56:45:42:26:42:14:3b:05:
a7:d9:9f:4a:97:85:f4:d1:0b:3d:b9:f7:8a:70:09:
09:fa:5c:7f:8c:6f:c3:c4:8e:48:ed:16:de:58:df:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:8E:AC:AC:76:C0:8B:88:B7:BA:C2:BA:5E:D7:F3:37:C7:2B:C1
X509v3 Authority Key Identifier:
keyid:20:B8:30:83:38:78:B6:C8:61:26:9A:0E:2A:45:83:7A:A9:48:5B:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILgwgzh4tshhJpoOKkWDeqlIW-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/64ff0f-e356-48b3-830f-156497bfe93f/1/ILgwgzh4tshhJpoOKkWDeqlIW-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5d:a7:3c:b4:06:41:84:c3:4d:34:53:9d:20:51:16:86:5b:
d2:6c:7b:56:f5:db:6e:97:82:59:6a:fb:bd:89:6c:3e:25:84:
68:29:2b:6f:68:12:7a:79:7f:b8:83:4d:be:8b:11:d8:21:67:
3a:fe:ff:6d:9e:d5:c7:5e:31:f2:ff:1c:c0:b4:11:fa:a8:46:
87:73:e8:42:f9:c4:ee:3b:5a:e4:bf:3e:7c:db:7e:1c:04:70:
11:9a:18:6a:39:e8:b3:28:96:fb:d2:dd:5b:de:7c:ce:7e:2f:
96:84:2c:5b:fd:65:53:5a:ba:a1:f3:fb:ea:f0:29:3f:16:4c:
1c:cf:72:eb:d4:4c:70:24:79:a6:fa:17:13:75:c4:d0:73:b3:
28:85:ba:49:cb:42:1f:82:a7:03:0d:de:d5:79:ac:40:02:aa:
b0:28:61:3c:51:bc:dd:32:e1:73:d8:7e:97:a2:16:4b:32:ee:
ca:06:30:c8:0c:ab:c7:27:ac:68:17:5d:d8:48:44:3b:e3:ea:
e7:f1:89:b6:52:ba:81:13:b1:e6:51:b1:e8:2d:f2:1d:f1:4d:
a2:85:22:fc:7e:47:80:cb:83:c4:6f:d5:af:c0:24:bb:19:d1:
d7:91:22:22:b0:3f:20:71:34:69:af:0f:a7:f4:ba:37:5d:7f:
81:d0:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:34 2025 by rpki-client