Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: GqPd5GRPId9X7N3ZR/0Lvr2XrcqY37hgdJBMcf5J1qY=
Subject key identifier: 30:43:32:26:87:D5:12:B2:69:90:A2:A5:25:44:C3:36:92:50:83:26
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 0194BCAA20631FF05D4EEC7FB40B92BCA573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: B2ABrzcTmYrrc98N9mWgTDWTQQgOLMBg4lBYWMehkbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:20:63:1f:f0:5d:4e:ec:7f:b4:0b:92:bc:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=3043322687d512b26990a2a52544c33692508326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:0d:99:ad:81:37:fe:b8:27:1c:72:2c:93:
b4:1c:88:9c:04:e5:94:b6:fb:5d:4a:85:c5:5c:33:
91:20:40:a0:76:de:26:a6:f8:67:a3:00:c5:c2:d3:
af:44:62:ab:ec:33:d4:86:d4:ad:fd:36:67:f9:1a:
94:fb:5e:72:a8:09:ad:29:6d:0c:b9:10:63:ae:ff:
b0:06:e2:ff:93:3d:3e:d3:37:62:8f:31:54:b6:50:
fe:e4:91:d3:95:b2:4c:49:c7:22:26:47:d7:25:7f:
32:81:c6:85:1b:7e:18:e0:f6:97:2e:5f:fd:43:23:
60:ba:34:7f:c0:45:6f:b3:8b:04:69:6b:42:55:ba:
88:42:b0:98:7b:f6:88:1a:03:40:5b:c6:f8:ae:fa:
6e:e5:8e:64:4f:07:49:a1:1a:09:1c:2f:d2:f2:b8:
9b:78:0b:fa:6c:cd:f4:4b:ee:cf:a6:cc:d4:6a:50:
00:b9:77:57:7a:61:e3:03:fa:63:fa:5f:47:33:04:
db:62:b2:41:57:26:ac:b4:c4:06:1b:aa:3d:b4:05:
08:b2:81:29:e5:54:bb:62:e3:0f:b3:d2:3d:7b:51:
db:aa:e1:e0:ea:65:5e:72:8f:69:db:58:56:94:e0:
5c:d3:cd:18:54:20:8d:42:9d:77:37:52:ad:ca:a6:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:43:32:26:87:D5:12:B2:69:90:A2:A5:25:44:C3:36:92:50:83:26
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:b4:12:24:08:d4:df:ec:75:f9:1e:08:1e:54:ca:a3:22:
ba:14:98:0c:21:6a:d2:af:f3:5f:ff:2e:49:2c:b2:2c:a8:7d:
ac:ad:15:46:5e:ad:1d:c6:85:23:34:a3:1d:d2:32:d4:51:92:
2d:34:76:53:1c:88:f1:ed:2f:57:52:07:63:d1:fc:c3:b4:ce:
0b:97:23:33:98:c8:56:11:11:df:64:36:a3:18:b8:4d:98:0a:
19:c2:70:77:51:7b:a6:6e:21:bc:d0:26:64:ba:a9:34:ee:e0:
b8:f9:45:20:ea:ff:8c:72:6a:26:3d:a4:cb:d7:a2:97:01:8c:
8c:70:2e:66:1e:d1:f1:a8:be:04:e8:f7:f8:aa:29:9d:a5:4a:
96:53:70:d5:fc:94:44:40:98:f5:8f:fb:15:d2:d3:7b:f5:bf:
08:90:e6:3a:5b:21:f2:24:c4:a8:f9:c7:63:bd:d2:98:3d:b4:
b9:09:f3:8b:cb:ee:ef:ec:41:4b:d0:93:ea:d5:85:c1:02:4a:
b9:a7:b0:e9:aa:52:f5:a9:18:bb:e2:3c:03:38:61:0b:9a:b5:
3f:e6:76:ca:af:46:cc:ff:3b:2b:ed:c1:54:99:a9:d8:47:30:
c6:d1:ef:1e:91:13:a5:50:c3:f5:4f:63:ea:e8:7f:25:c1:48:
d3:b6:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:41 2025 by rpki-client