Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: 2Ujj+oUNKoPduj/4C/lYdngSlGfKTuU5lhKZC2fMd8E=
Subject key identifier: A5:BB:72:3A:50:35:D0:23:7A:F9:42:F3:C1:E6:B9:31:70:2D:D7:D7
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 0194BC72DA521BFEC8F55679F9E592F61D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: 2uSmOKJbyNEXlrg6QflxoP5B2XAOQnbr9ylTdkaN12Y=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:52:1b:fe:c8:f5:56:79:f9:e5:92:f6:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=a5bb723a5035d0237af942f3c1e6b931702dd7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:75:95:42:08:48:07:fd:9e:a7:9f:2a:32:
a6:87:7c:37:fa:3b:08:b6:f8:7a:29:9b:d7:0c:ec:
38:2e:78:5b:fe:31:55:95:41:91:c5:d1:b2:cc:f5:
93:66:aa:ca:a7:e5:0e:12:34:86:2e:f2:c3:f9:21:
24:56:de:98:b1:40:be:0a:3d:45:66:5a:9d:1e:b2:
55:c6:11:58:c2:1d:e7:3c:5c:29:b7:b0:1f:66:c9:
57:f4:87:95:23:03:64:de:ba:fb:e7:1d:a8:93:6d:
79:86:2e:80:3a:41:e3:f4:df:fa:35:23:26:b3:7d:
91:71:c7:34:87:75:f7:48:b1:93:dc:62:dc:ec:a6:
7f:e3:2a:84:49:63:98:fc:51:14:f4:51:67:d7:96:
41:62:41:2e:7c:53:38:7f:1a:45:74:83:26:8e:ea:
38:7b:e4:3d:a5:e3:d3:43:42:f2:32:35:4a:a2:b5:
53:02:77:ff:af:f6:91:eb:40:fe:9a:5f:11:5c:2e:
08:8f:a0:28:c8:65:b6:48:f2:01:ee:0f:87:9a:74:
53:8a:c6:b9:e0:2f:d7:79:ec:bf:1c:b8:bb:ee:55:
48:4e:8a:b8:d1:22:2d:c1:e5:a8:16:c6:c7:df:69:
f0:57:5b:21:14:10:73:a6:c3:d8:fa:1e:fe:d9:c2:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BB:72:3A:50:35:D0:23:7A:F9:42:F3:C1:E6:B9:31:70:2D:D7:D7
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:82:1d:fb:90:7e:a4:55:36:ff:38:31:29:a4:48:07:43:5c:
34:91:14:3c:d8:97:ff:f8:df:5e:3f:ba:21:70:5d:12:5f:0a:
a7:b5:79:86:73:dc:89:25:04:d4:de:84:33:41:f4:bc:17:06:
da:1f:2b:47:4c:70:6e:75:09:f6:e3:f7:9a:af:0d:7d:9f:e0:
1d:a2:03:64:49:e3:b7:ee:ea:1c:23:03:aa:63:14:24:cb:98:
27:5d:2d:ea:69:6b:16:8f:a5:d7:2b:19:07:2c:3b:6d:5b:f6:
ea:e9:5b:36:0e:a9:05:74:f7:0a:81:10:ab:00:07:4c:38:60:
b8:c0:76:7d:e3:5d:ca:cd:58:02:9f:1d:1b:62:5d:57:5d:87:
01:6e:61:61:1c:c6:a5:d0:f0:cc:1f:f0:ea:8c:43:16:2b:6e:
95:33:11:94:a9:f1:13:1e:d5:a1:1c:f0:1f:3b:a9:d5:9b:08:
55:d6:f7:55:ab:8c:0c:fe:e9:41:04:e5:4e:39:25:5f:f4:9d:
51:4f:c8:d4:47:de:a9:41:bd:aa:37:81:4a:bf:35:e5:4c:84:
19:0e:2b:07:b7:5f:bd:ca:af:54:85:d1:17:18:1b:27:b6:62:
f7:10:04:bc:0c:8e:25:5e:33:7a:9c:07:73:a8:14:3b:3e:64:
b1:7f:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:21 2025 by rpki-client