Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier: hx8HiQ/RvRfWCKQUFzjQIICS7jOfufbOsUKa+WPBuyw=
Subject key identifier: 7A:6D:59:86:AD:14:C3:DF:50:64:F6:92:DB:90:40:5F:8B:73:73:F2
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 0194BC3C6435F8849E39F06274F279D3B90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: AZ7v9Ep+fiUECfTxcQ6rL07UhPqH1o4ALNZLkEA/4LQ=)
2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:64:35:f8:84:9e:39:f0:62:74:f2:79:d3:b9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=7a6d5986ad14c3df5064f692db90405f8b7373f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:dd:44:21:4b:c5:d5:51:f5:ff:e7:db:94:
35:b2:7c:8b:56:40:71:71:55:ba:a7:ac:f5:b4:11:
6b:4b:0b:50:a1:60:7b:1d:93:3a:a8:23:9f:37:8b:
38:7b:54:f1:c6:c9:b6:26:65:84:26:a2:fe:fa:bb:
02:d2:5f:ab:e9:58:9c:89:f8:13:00:85:f7:a9:af:
ec:b5:32:e0:39:f4:0c:28:33:55:b3:cb:74:6e:5d:
93:c0:1c:88:39:74:6a:87:a5:c3:4f:d0:30:b4:9a:
2a:f8:d1:a4:bf:c1:94:bb:d3:32:59:d9:67:e9:8a:
ce:ab:80:30:13:a8:03:bb:64:d5:13:32:c0:07:25:
a2:58:48:3c:d3:5b:00:f6:d7:ba:10:d7:38:fd:3d:
4e:6b:9d:bf:93:54:75:9c:96:d6:cd:21:d4:2b:ee:
fd:ce:10:86:75:ab:03:2d:75:d9:fa:cd:95:35:73:
0f:12:dc:a5:08:c9:17:c7:76:17:b8:e1:92:06:49:
05:b1:2d:b7:84:0a:c0:07:02:8b:17:51:65:14:d3:
b1:89:53:c6:da:46:ed:90:5c:30:de:4e:fc:c1:f8:
26:eb:d0:47:4a:3a:5a:9a:00:6e:6c:e6:d7:1f:3b:
3e:69:05:bd:da:19:c5:63:78:81:12:a0:fe:f7:09:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6D:59:86:AD:14:C3:DF:50:64:F6:92:DB:90:40:5F:8B:73:73:F2
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7d:c0:db:ac:05:99:d6:b3:c7:71:54:39:37:e1:7b:2e:fe:
ec:90:dd:6d:5d:e0:f9:93:be:3e:50:f3:85:95:56:67:9c:5a:
9b:f2:64:26:cf:7e:da:b6:55:7c:d2:08:c8:54:8c:ee:6f:a4:
1c:95:16:ea:1d:d4:02:18:3f:88:e7:93:58:6e:d1:34:6a:72:
7d:83:e8:95:37:8f:01:1b:5d:38:0b:f7:d2:3f:e7:40:eb:0f:
5a:fd:59:25:9a:33:23:ba:6b:45:c5:03:ba:1f:43:32:50:5f:
19:4a:62:25:72:ce:d4:34:8b:12:f0:7b:49:52:66:20:58:f3:
5f:8e:ff:08:3a:0e:46:8b:a1:e5:4a:73:2a:4a:40:58:55:57:
75:21:68:66:53:a3:e3:02:e2:8f:a5:86:44:15:4f:cf:88:be:
ee:8b:87:f4:6f:a9:87:ac:60:31:01:5f:5a:8a:97:d2:8c:69:
c0:b8:b9:e8:1d:f4:ba:44:c0:30:ed:a2:bb:9e:e7:70:dc:24:
97:7e:29:31:b7:ec:b7:62:5f:24:2e:23:71:44:46:c9:43:15:
c8:8f:7c:f5:d7:13:70:3e:5a:2b:d9:55:b3:0d:f0:f8:b2:dd:
ae:be:93:ae:fd:09:d6:2c:35:84:df:44:33:6a:9d:99:c3:e7:
63:c4:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:38 2025 by rpki-client