Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
File: IW66tPRvJU2V9JZbhKjPJBlrnJU.mft (raw, json)
Hash identifier: /XOFvArznRYV7EtLeqvp8wsn9TM7UGlah5kr5A/CQpQ=
Subject key identifier: 0E:F4:F2:CE:A3:9C:77:8A:22:D8:90:93:A5:E8:B2:08:F0:05:57:36
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 0194BD8591F4D1FC2C92BDEE34350BB4BB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
Manifest number: 0344
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: IW66tPRvJU2V9JZbhKjPJBlrnJU.crl (hash: vgt+i3TwefPzNJ2X4cqucZ+AmZlRoIZMecn/KOXvbcY=)
2: jevuz_hOgaa6W3MBuj-Sool4n-A.roa (hash: US9acN1N+sUj9TGOZu9sAfJQOkLuvKlT0/RKaeqAgXI=)
3: luM_lJTE2hly8-J3vWjwvVwVcis.roa (hash: GZ+X8TMn7AtOBR08KIlVoGK4dcs2JQzhXXW1m64U66U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:91:f4:d1:fc:2c:92:bd:ee:34:35:0b:b4:bb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=0ef4f2cea39c778a22d89093a5e8b208f0055736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:42:2f:d0:27:e3:fe:71:d8:11:4d:81:4b:0a:
83:25:76:40:5a:e2:1b:e2:f6:9b:09:6d:08:42:2d:
be:b8:e0:6f:a3:da:f2:e1:de:71:5b:e3:6f:34:03:
73:2e:5c:52:e4:77:5d:14:f2:ee:e3:20:ae:35:2a:
22:15:8c:b0:51:a6:ae:fe:7a:62:e8:d6:30:a1:e6:
29:00:09:1f:36:b5:60:ce:ef:13:f6:b1:a1:11:c3:
d5:ca:83:ad:20:87:88:71:f9:1e:28:f8:bf:b0:6b:
43:97:c6:e1:46:42:f3:86:b8:95:5a:48:2a:a3:1f:
b3:4d:55:e2:ed:b8:1b:42:49:76:57:e6:bb:d4:1c:
74:9f:68:89:76:6f:be:53:d7:1d:3a:bc:2a:05:e9:
4f:40:bd:16:a4:3e:5b:c9:e2:34:1e:5f:44:ba:2c:
64:7c:96:22:2d:4f:47:69:be:b7:f4:11:a3:2c:40:
e1:71:9f:41:12:f9:7b:da:6f:a3:0e:79:03:b7:66:
15:96:f2:eb:b6:8e:72:75:f3:cf:a1:61:ac:26:20:
46:d5:34:87:0f:af:e5:7e:5f:65:6b:8b:ed:56:9d:
3e:16:8d:8c:d3:9c:61:75:21:91:6d:90:07:68:1a:
7e:cc:8f:24:69:32:f9:b9:d7:cc:53:16:b5:b6:b4:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F4:F2:CE:A3:9C:77:8A:22:D8:90:93:A5:E8:B2:08:F0:05:57:36
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c7:7f:62:56:52:1b:fc:c6:c4:d6:58:20:af:67:a1:c1:0f:
58:c6:6a:53:7c:9f:c3:e6:b8:6a:83:e9:36:b4:60:79:d7:3e:
5f:cd:53:c4:03:4a:36:9c:5f:ca:88:b9:c4:b6:30:a9:67:e9:
ab:3d:3a:8d:e6:e0:cc:cb:7f:a9:5e:c0:52:68:03:e0:55:65:
e5:0a:c0:61:de:35:97:99:7d:6e:3b:9a:ca:2a:0e:f5:4f:ad:
a0:0c:63:74:af:68:5f:55:d0:f0:bd:13:3e:2d:c9:50:3f:f8:
2f:d9:f4:18:4b:1a:a3:17:b8:f6:ca:50:ab:c1:b2:13:b4:5d:
bb:be:fe:6b:f9:e1:61:1f:fe:38:68:51:47:d0:7c:5f:87:de:
8b:fb:17:93:18:cd:7c:64:c3:88:ab:71:ea:1c:da:23:18:fa:
dd:26:ed:a3:45:1e:63:ea:11:fe:8b:7e:f1:98:a0:2f:9c:1c:
49:5b:e7:bc:24:9e:99:29:55:60:88:df:84:bf:35:4a:29:af:
5f:e9:dd:46:e7:9e:d5:81:ad:e3:19:b5:c7:47:42:b5:e1:72:
3e:11:1a:7d:d8:2e:0d:e0:2e:93:06:21:44:5c:ed:42:61:67:
86:a8:1f:96:4f:4a:7f:64:87:8f:b2:35:30:98:60:4e:37:09:
37:a0:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:28:15 2025 by rpki-client