Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
File: iJiSZOUPOa6IiuMnYQm7qALkWAE.mft (raw, json)
Hash identifier: fES2SnJLmXdA8ykUi/64FPFAtdXcpL62gHPWgOe+QTA=
Subject key identifier: 47:A7:E7:1E:A3:80:B1:3E:1C:9C:85:8A:A5:DA:36:85:80:FC:70:02
Authority key identifier: 88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
Certificate issuer: /CN=88989264e50f39ae888ae3276109bba802e45801
Certificate serial: 0194BD1808144DA7C56CFE82B97D93335BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
Manifest number: C2
Signing time: Fri 31 Jan 2025 16:00:56 +0000
Manifest this update: Fri 31 Jan 2025 16:00:56 +0000
Manifest next update: Sat 01 Feb 2025 16:00:56 +0000
Files and hashes: 1: e7H9B5-pB3ikZ5-oh15fm0ggCqI.roa (hash: We6P0vvIkU060wWseVebnunaD4trxKPA+u+6dudIhmU=)
2: iJiSZOUPOa6IiuMnYQm7qALkWAE.crl (hash: JYyvUAeavfNAtPF0vyuHHXIrsAX6vGkHrf7DSUtcz8Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:08:14:4d:a7:c5:6c:fe:82:b9:7d:93:33:5b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88989264e50f39ae888ae3276109bba802e45801
Validity
Not Before: Jan 31 16:00:56 2025 GMT
Not After : Feb 1 16:00:56 2025 GMT
Subject: CN=47a7e71ea380b13e1c9c858aa5da368580fc7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:21:0b:7b:74:53:83:c9:16:45:e8:cb:94:
67:08:22:ab:85:6c:be:68:4c:df:88:12:62:bc:ef:
12:cd:8d:f0:06:2b:f7:55:62:a7:73:0f:d9:0a:ed:
42:59:42:c5:79:b3:53:f2:eb:88:6c:d6:57:60:8c:
b7:52:ea:0a:a2:32:7e:c6:69:3a:2e:72:a1:cf:f8:
7a:b9:7f:53:71:53:eb:c0:e0:5f:6d:5a:48:f2:59:
1e:ea:3d:61:eb:3e:8e:8c:fc:02:93:d4:ef:72:72:
d3:f6:56:f1:f4:8b:ea:e4:ef:de:65:da:a0:cd:b4:
25:09:1f:40:19:2e:a3:bb:c2:1b:ee:4f:9d:46:11:
c2:e3:ab:7e:29:b5:fd:36:f5:60:5a:53:1e:75:84:
79:a4:15:a7:f8:eb:1d:0b:5d:2a:36:3b:c4:97:35:
01:c7:e4:69:13:6f:c4:40:5d:41:ed:35:98:5d:b6:
03:4c:64:ff:fe:74:02:0b:15:28:e5:fe:0c:a5:79:
85:b5:6a:3e:26:b9:d1:3d:0e:70:4f:2a:a8:51:8a:
48:1b:11:66:32:fc:81:97:e4:4e:4b:de:92:14:62:
cb:09:b8:7d:e1:0f:52:28:54:1b:13:63:4b:0c:74:
10:b1:7c:dc:79:9c:ce:a8:ca:ea:e1:36:ce:3d:96:
6c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:E7:1E:A3:80:B1:3E:1C:9C:85:8A:A5:DA:36:85:80:FC:70:02
X509v3 Authority Key Identifier:
keyid:88:98:92:64:E5:0F:39:AE:88:8A:E3:27:61:09:BB:A8:02:E4:58:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJiSZOUPOa6IiuMnYQm7qALkWAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/571244-9c9a-43ac-930c-370c80769831/1/iJiSZOUPOa6IiuMnYQm7qALkWAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:33:2a:d8:a0:7e:b3:fd:75:c5:18:cb:35:09:65:ce:91:92:
35:b1:3c:1b:ed:18:bd:b8:c3:26:fd:7c:63:12:0f:1f:f5:41:
99:9a:22:7b:bb:aa:34:81:84:74:16:f6:88:99:78:9a:71:0f:
00:de:de:a6:78:10:af:d7:91:7a:94:01:f6:59:fd:f5:9b:d8:
a1:3d:b2:70:ab:a4:60:c8:d9:11:e0:b4:92:02:22:4a:c4:98:
ab:a1:17:c5:6c:a5:35:13:72:f5:6e:40:e6:7c:50:57:aa:c9:
43:57:1b:74:06:35:0c:cb:7c:0c:6a:8e:59:40:bf:50:a3:fd:
bb:77:63:48:ca:65:6e:ce:e6:43:9a:f9:10:a6:9e:e1:6c:7b:
81:c3:16:f9:25:37:07:d8:03:73:40:07:e6:33:7b:89:d5:d5:
51:32:70:84:88:54:d7:e1:13:38:97:59:8c:e2:ae:50:6d:a0:
3e:81:34:a6:07:e5:88:f2:04:90:11:55:57:b6:f6:79:09:29:
24:a3:75:c9:63:57:51:07:ef:cb:f0:41:2d:77:e7:25:c8:97:
d4:34:91:c2:99:2f:eb:68:0f:89:14:90:ac:f8:a5:47:47:50:
29:a6:6f:56:f6:91:b0:1a:2f:fe:4b:57:f8:b9:3d:ee:69:e5:
62:9b:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:19 2025 by rpki-client