Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: abt5WSas+0P1OLuWhL28T8ydaWJyXq8/P+S+ltSU5vk=
Subject key identifier: BA:E4:59:AE:54:4C:CB:69:54:88:F8:41:6A:36:89:C8:D4:76:C5:9E
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 0194BC3C68D796FB8F3990D93E6DE4608573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 0398
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: 4pLeV1pmd6Mq3xs4I9MXP6CiOTmD+r+3VS+Y7qncmfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:d7:96:fb:8f:39:90:d9:3e:6d:e4:60:85:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=bae459ae544ccb695488f8416a3689c8d476c59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:5f:cf:2b:42:49:a5:c2:a3:8a:62:be:19:
73:c4:e0:dc:9c:48:9d:ff:7f:d2:a5:c2:80:7d:3d:
c5:27:e3:51:9b:d9:99:80:49:93:4b:86:10:bf:31:
0a:53:57:b5:b1:61:8e:c3:bf:3b:db:bb:e2:08:fd:
bb:8e:ee:63:41:bf:16:20:5d:77:67:d8:93:22:c3:
e9:f9:a9:18:a8:b6:36:80:82:0c:9c:5a:b1:06:f3:
07:33:2f:3e:8d:46:ad:7b:c1:ab:ab:bb:17:33:7c:
34:a6:e8:cc:11:8e:bb:0e:e8:eb:d5:2c:ba:80:d0:
0a:c8:44:a1:ee:d6:7e:27:22:0c:bb:d2:aa:72:de:
93:ca:ab:96:a4:3c:fd:a0:85:0a:e8:37:0a:b1:49:
74:5b:13:80:9e:4e:06:d4:e2:6f:3b:bf:e1:1c:3a:
7e:d4:b0:e8:22:23:e3:86:23:8c:fb:05:85:bd:d8:
56:0d:05:03:cf:9e:42:05:9e:cf:a9:bc:17:b8:33:
8f:9b:41:60:e4:77:1d:48:c0:88:a8:e1:ab:5f:f5:
f4:67:2e:6e:0c:05:1d:94:62:c0:d5:fc:51:99:e7:
24:53:75:e6:d5:37:5c:9e:7e:5e:7c:f7:10:3c:90:
c1:94:68:61:ee:3a:e0:d4:0a:b7:28:1b:41:3c:24:
ac:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:59:AE:54:4C:CB:69:54:88:F8:41:6A:36:89:C8:D4:76:C5:9E
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4d:04:3e:db:6a:dc:44:95:67:43:3a:e0:21:c6:47:fa:a1:
10:7c:5c:8e:55:58:af:b9:41:b2:cd:cc:74:87:eb:0e:a5:4e:
55:9e:02:1a:dc:77:78:e1:7a:96:85:50:c7:b5:ab:80:a6:1d:
c1:0a:e1:50:6b:fa:dc:b7:8e:24:07:5a:cb:df:7c:e2:72:32:
dc:56:c9:e5:f2:c1:95:0b:50:b9:7d:c7:67:bd:1f:02:b7:a1:
1c:51:a2:b0:f4:4f:5b:75:55:65:68:32:02:2e:5b:8b:d7:7a:
ed:81:40:78:98:f5:e2:33:db:3f:7d:05:33:a0:7e:10:ac:95:
6a:4d:56:fa:e9:72:0c:0f:5f:17:82:84:19:83:19:3b:b8:94:
9d:e0:3f:7d:01:80:00:5a:01:83:24:55:3f:6b:14:9d:df:98:
5c:ad:55:54:5d:d6:ac:73:f1:4e:4a:6e:d4:85:f6:66:9f:6b:
7e:c2:bd:4c:3b:be:cf:f5:e0:5b:6b:d9:04:4f:ab:ea:4c:dc:
46:b5:f4:19:3b:39:03:a2:f2:3d:ea:bb:39:96:13:0b:7d:53:
92:06:82:a6:e4:b5:4c:ab:a6:d5:52:10:4e:c3:d2:5e:1a:da:
cf:4f:4f:33:ad:f6:bd:db:25:60:bc:45:8a:0f:4b:b7:96:96:
eb:36:d7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:08 2025 by rpki-client