Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: sOnPmEExYcsC987TFcTbo76L5BGPZ31SFH2tH1hE3LQ=
Subject key identifier: CB:31:AB:2E:90:09:DD:EA:5D:99:6E:0B:E3:C1:6A:0C:56:50:59:A4
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0194BD8550814662866EED76A11E3C899875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: 8IEvzDRKV8FUmQ7aId5ty6Ov_PY.roa (hash: I32uleE4Av8XgX83NqfWdh3aihxwYbG5ZyiK9uOIWlM=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: DaAsVRO4jEwcP2YgHUZf+J4Albmtd1eWMerCDK6l1qs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:50:81:46:62:86:6e:ed:76:a1:1e:3c:89:98:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=cb31ab2e9009ddea5d996e0be3c16a0c565059a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:88:51:35:ce:4e:30:b4:bc:ff:f0:f4:e6:92:
be:ee:3a:2d:e3:65:19:ec:e0:13:e0:45:b0:36:ae:
6a:a8:7b:4b:8a:30:aa:02:8f:58:e2:33:ea:04:75:
88:81:18:bc:d9:fe:ae:8f:0e:82:dd:1b:2c:d8:80:
0e:4e:8b:0a:bc:59:e0:af:ae:74:b7:99:56:76:2b:
40:87:45:97:b9:ce:98:31:08:8e:bf:cd:de:99:78:
bf:66:a2:cf:2f:df:2a:79:7c:1c:d1:a2:11:ef:14:
fc:0d:db:0a:2f:7d:34:87:da:13:74:4c:94:89:7e:
e5:a5:0c:a5:06:3b:32:04:45:be:80:2e:49:93:df:
4f:ec:2c:c0:c2:34:3e:1a:a2:ba:97:55:0d:6c:8b:
c6:3c:96:87:51:2c:1b:2c:38:27:68:ae:45:b9:39:
d3:38:0f:23:9d:91:e6:1e:d1:ef:ae:19:9a:ee:df:
bd:de:6e:9c:27:80:e2:7f:c1:2a:0a:1c:e6:a6:cf:
41:34:9a:e9:ab:b7:92:04:41:20:e4:c4:3b:fb:b9:
00:d8:e8:99:54:45:eb:8f:3f:02:2d:74:3e:4a:fd:
ca:69:3b:41:ce:a3:a2:56:58:51:58:35:23:eb:c0:
a1:33:54:2a:73:fb:ee:93:6d:30:7e:bf:7d:b4:d4:
e3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:31:AB:2E:90:09:DD:EA:5D:99:6E:0B:E3:C1:6A:0C:56:50:59:A4
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a1:51:af:f5:49:e9:1f:c2:72:d0:04:a9:ac:05:e4:87:d5:
2c:a4:ba:c6:da:b2:5b:3e:00:22:e3:a0:b9:a4:56:d2:28:8f:
1a:8b:4c:69:a4:9e:c0:d6:15:a2:83:7c:31:3a:df:32:41:9a:
22:9c:78:74:f2:ff:00:96:a8:f3:3c:df:64:40:b4:17:7d:07:
e6:02:a9:af:69:34:06:13:14:73:62:16:48:f7:3c:f5:c8:b1:
d0:ee:5e:fc:46:65:87:57:a4:23:cc:36:60:36:e7:b8:a0:74:
b2:63:c1:b6:29:66:08:c1:16:4d:15:20:5a:dd:79:24:7d:13:
38:2f:48:9c:7d:6c:bd:53:f5:cb:96:4f:f5:d5:4f:a3:c4:52:
7c:7e:13:75:77:0a:49:60:2e:b8:63:88:91:a9:2f:61:38:3d:
3e:0c:c3:c8:44:94:6f:f3:4d:b7:ff:fb:d6:0a:51:40:1d:93:
e0:d1:a6:cf:50:cc:8f:c9:fe:b2:0e:c3:83:d0:af:1e:46:7f:
07:7f:d9:f8:59:fa:fb:75:cf:aa:cf:3d:5f:b0:85:55:40:b3:
14:2b:cd:92:5f:c5:d4:4a:07:b9:a2:23:dc:3f:65:fe:2d:4a:
15:2b:9d:9c:ab:18:52:7f:7d:07:ca:a5:45:57:84:50:de:d8:
e4:c0:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:42 2025 by rpki-client