Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: evj0dUPl6n0jrzLmwXxNoX53BVyvd4tCoz5CTSm3Vic=
Subject key identifier: 74:3A:4C:10:CC:94:46:9D:BC:D7:52:39:93:FC:C6:1D:00:E2:8A:68
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 0194BCAA3F6AD1A16910DF47ADCB41FDA0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0838
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: E3NTURVmlVvPExTzSoWNFRw0pXye1JNDiHVhUgEDj8s=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:6a:d1:a1:69:10:df:47:ad:cb:41:fd:a0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=743a4c10cc94469dbcd7523993fcc61d00e28a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:4c:ec:b7:99:b6:a6:b9:71:08:4b:9e:7d:
13:3d:2f:6a:0c:a5:76:b3:b1:7c:d9:f3:ad:6c:c5:
0a:a6:b8:a3:ee:70:ca:71:33:30:8d:7b:48:8e:fe:
d5:58:f1:fe:c4:6a:45:c6:84:2a:49:79:14:7a:4a:
2e:51:73:62:b9:e1:eb:67:7f:d0:78:43:da:ef:ba:
2d:c8:ee:1e:b7:b9:cc:cc:d1:b4:d6:b9:7a:f3:a5:
b2:e5:0e:18:24:73:f3:06:2e:3a:aa:a9:94:bd:b3:
ce:a6:72:a3:18:81:00:b9:0a:d9:de:6f:8e:71:66:
ff:55:30:03:b9:32:50:16:e1:17:03:7d:7f:0b:1b:
dd:7f:b7:90:4e:c7:6c:fc:6f:93:09:c1:74:11:6d:
09:b7:83:42:d1:57:45:58:be:db:fc:61:d1:b0:a9:
1b:8f:63:e4:43:aa:ce:4b:51:2f:c1:64:75:f3:ae:
89:e8:d0:47:f6:cb:a4:c2:bf:e2:8a:df:f0:b8:c0:
76:c3:80:2a:57:6f:aa:31:4c:29:83:5d:00:ab:a2:
06:a1:83:95:06:90:ac:85:54:4d:af:ee:4b:6d:e2:
89:4e:58:67:fb:00:54:99:0a:dd:7f:f6:3e:0f:23:
2f:78:b8:c4:d2:cb:ac:72:db:66:2f:b5:82:b4:f3:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3A:4C:10:CC:94:46:9D:BC:D7:52:39:93:FC:C6:1D:00:E2:8A:68
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9a:d9:79:60:e0:4f:24:dd:e0:35:db:63:9d:1f:fd:e9:db:
26:13:0c:0f:44:22:6c:e5:ef:6b:df:07:98:c9:bd:65:a3:2b:
60:5c:2d:f6:04:48:57:a0:1d:37:f6:17:8f:0d:76:16:92:ab:
23:1a:94:10:90:08:d9:f1:71:df:60:35:f3:5d:3f:e3:f6:18:
c9:23:dc:c1:da:a5:a9:22:4d:2a:3f:9b:4a:4d:e4:f7:5b:51:
69:1e:f2:ff:21:6e:b9:d4:4e:e9:a7:9a:37:81:76:2a:3d:f7:
e9:df:e8:0d:ae:5b:6b:b8:1d:e7:91:b2:63:e5:0e:4d:b8:2a:
a9:21:f6:8f:d0:39:f4:ea:fb:02:e5:20:e7:41:85:00:2d:f0:
6a:b6:52:d9:43:14:b5:79:9f:ed:d6:9a:7f:81:88:ce:6a:ba:
1a:c7:1d:78:5a:e5:1f:ab:0c:ec:d8:83:6e:6c:57:71:26:66:
da:19:46:02:f6:c9:56:a6:c2:9c:df:67:32:93:f1:48:01:b1:
21:fc:0c:57:81:e1:ce:22:e6:c6:95:57:9b:a4:42:a5:04:c3:
e7:e0:d3:1e:3f:5a:b1:05:93:3e:32:3c:bb:70:ce:ac:c7:70:
59:25:0a:00:7f:c6:98:ff:47:69:04:2e:9d:58:9e:9f:db:27:
d2:30:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:40 2025 by rpki-client