Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
File: IMC5sz3OXroK6mSJFY0_snAirOc.mft (raw, json)
Hash identifier: 2wb065uJ+XinMZS9ybTrPehKNYQogYOYo/HEaEAAvwE=
Subject key identifier: 1C:23:C0:3B:56:F9:34:E1:90:40:62:C4:42:48:74:F2:37:D8:7C:30
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 0194BCE0E3F0C482557C8D3EBC263F5A4212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
Manifest number: 0D51
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: IMC5sz3OXroK6mSJFY0_snAirOc.crl (hash: xUBu566IWkHSyggewSik3KsY94fM0SO1TbiYTjJnXnQ=)
2: _t0G-nTb4aukqy0OCUwpkcnZ1II.roa (hash: KNLLqIEJ5dlRl5uPgTAYCRT2GgZHFc+269aOuK3BWNQ=)
3: iIfA58agMV_RqJ74K2RRl6EqU28.roa (hash: lku32PUlX5LHQflLOMldhRZ2jvWTzkqH2DWG39ZWQfM=)
4: tPeq-jjd1LfJCGPS7kRFioCnf1s.roa (hash: IHjSVV+vrTNKBQIJ5PbeYeBS76QGn2Ghw7Cv5izSDhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:f0:c4:82:55:7c:8d:3e:bc:26:3f:5a:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=1c23c03b56f934e1904062c4424874f237d87c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:b5:cb:ae:a5:34:c6:82:40:15:4f:ba:1a:
1f:29:ec:39:75:f7:01:89:1c:bf:a5:ed:7b:f9:65:
ad:12:f5:66:2e:8c:12:c0:b5:45:92:e2:f9:5b:e0:
05:92:57:72:00:30:45:39:1e:61:c8:a1:4a:07:a2:
94:6f:6b:86:f5:6b:a6:57:3e:ed:03:6e:52:82:b4:
e4:2b:47:61:52:89:eb:79:08:05:4e:a3:2d:35:38:
79:36:ca:b7:9a:80:23:d6:bc:ff:9a:18:d5:ac:39:
e5:ff:93:73:3c:4c:21:d6:d3:95:94:3a:a6:4e:2c:
c3:73:f3:96:31:13:ba:7c:f3:9e:0c:7a:96:e8:e1:
7f:21:ad:80:00:54:b6:86:e2:c0:30:4c:1f:1b:99:
1b:dd:53:09:c9:41:c8:cc:ff:4e:a0:ef:1f:4d:3e:
e8:4c:96:e1:ab:e9:3c:d6:62:7d:ca:22:0a:45:cb:
6c:a0:9c:27:3c:c5:9a:58:82:fe:df:ca:f1:46:65:
4a:f6:6a:07:59:ee:38:2d:39:0f:7f:63:42:48:13:
62:65:20:6e:a7:8d:15:aa:eb:da:36:8e:ee:03:c5:
bb:89:3a:a1:10:a1:62:5f:a4:63:cc:49:ac:36:ed:
11:03:b8:00:8e:3a:f2:b0:a6:a5:69:3b:41:c2:f4:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:C0:3B:56:F9:34:E1:90:40:62:C4:42:48:74:F2:37:D8:7C:30
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:10:67:9e:90:fb:b8:21:c3:3b:7d:f1:b2:54:3b:a4:ee:
76:94:90:5d:6d:98:c2:a2:c8:f5:14:93:c8:75:d9:c2:8e:4e:
d4:89:89:93:8e:22:59:1d:7b:ba:3a:ac:07:cd:5e:64:d1:7b:
28:b5:ef:0d:6c:3a:fe:df:c6:b3:a1:51:52:fe:e3:b2:aa:41:
fc:fe:39:de:ce:91:ef:79:fb:a7:9d:6e:85:cf:de:e6:e4:37:
de:1c:7a:17:99:bc:30:5c:34:e6:4a:f4:fc:f2:89:fa:35:bb:
58:a9:b3:7e:3b:fb:00:7c:29:b7:60:6e:f2:75:c9:60:f2:ce:
ca:18:61:62:c3:83:6b:59:0c:c9:4d:b5:c8:87:15:9a:e6:bc:
7d:aa:ef:65:b3:79:f6:da:72:3e:e8:e8:6c:09:3c:66:43:79:
e5:12:6f:e7:97:9b:03:a6:40:34:75:4a:c9:32:80:18:ce:fc:
5f:f1:6d:5b:30:c0:d8:a0:c3:d6:c2:8d:24:d9:8b:94:58:34:
0d:4a:40:04:9e:df:77:c7:5e:cd:44:39:74:88:e7:0a:7a:3c:
cf:e2:c0:68:12:53:ea:46:3a:54:42:71:c5:56:82:00:e6:c0:
e7:89:57:54:c3:da:5c:61:94:d6:7e:f7:87:8e:0a:21:31:1b:
71:13:e9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:17 2025 by rpki-client