Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
File: IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft (raw, json)
Hash identifier: tPzPzkS5MLxX5+lIGa+Lw2Qbv3zh/92xLoOe9YAbiRs=
Subject key identifier: 41:45:78:D9:E1:39:18:05:B8:33:C5:12:3A:3C:81:89:D2:67:DA:CB
Authority key identifier: 22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
Certificate issuer: /CN=229a038176c796ea4f2769f6be3cace1a3597634
Certificate serial: 0194BCE098D0FF234EB4DEB4068A4C92EC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: Hix749q65sYikumyIiO2w3pF6Ac.roa (hash: N0R4AArriY/KzHOEs+CuI34MlSMnkBHaO9k0W7jdIBQ=)
2: IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl (hash: CnY40pLYpEoKSKG+D7WodiWGdMzC9lhGh8nLAlgCV1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:98:d0:ff:23:4e:b4:de:b4:06:8a:4c:92:ec:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229a038176c796ea4f2769f6be3cace1a3597634
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=414578d9e1391805b833c5123a3c8189d267dacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ad:aa:a5:2c:04:3a:32:f7:c8:0c:5a:97:b1:
4b:3f:af:1d:43:db:18:d1:f8:2f:da:ab:bc:f2:01:
fe:54:71:e4:29:8f:40:42:3c:59:e5:7a:ca:e6:67:
33:0b:58:7f:76:11:76:7b:14:f9:b1:15:eb:8b:af:
7d:b0:44:57:39:e0:f5:cd:73:6b:8f:ee:59:3a:61:
9b:90:17:31:05:a6:34:7a:f9:6d:3f:1c:63:de:f7:
a3:26:ff:c3:34:c8:0c:3d:e5:9e:7c:5e:2e:18:2b:
e4:32:f7:03:03:01:4c:00:5f:03:a2:df:e0:68:a8:
28:2d:a4:a6:4f:8a:77:1a:f1:0e:ff:d9:f0:27:2b:
b2:53:5a:38:e4:4a:e0:e4:1f:37:65:40:69:40:44:
80:22:17:69:8e:d2:80:40:d7:79:aa:74:48:3b:1b:
43:ff:90:3f:84:c7:84:5e:d2:0c:a8:44:d5:70:87:
5e:e3:f1:4f:73:0f:74:4f:8c:a2:1d:b1:68:ca:88:
62:ff:a2:88:35:15:2f:a2:60:b7:5a:ce:0c:42:fe:
d4:63:11:66:9a:64:36:b1:29:56:18:d3:7c:8a:03:
5f:27:63:36:66:bd:33:92:cb:0d:c4:95:f2:af:3a:
14:90:90:ef:e0:b0:e7:5b:3b:c6:2d:8e:f8:8e:01:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:45:78:D9:E1:39:18:05:B8:33:C5:12:3A:3C:81:89:D2:67:DA:CB
X509v3 Authority Key Identifier:
keyid:22:9A:03:81:76:C7:96:EA:4F:27:69:F6:BE:3C:AC:E1:A3:59:76:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpoDgXbHlupPJ2n2vjys4aNZdjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3b5f4e-93ff-4dfb-b02d-dc2301fbbb7c/1/IpoDgXbHlupPJ2n2vjys4aNZdjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:28:bb:4f:84:96:48:21:17:ad:8a:3b:de:28:40:5a:8e:
b0:ad:ed:1c:0c:81:60:54:ea:98:e9:b9:79:72:fe:27:e3:07:
e8:ce:7c:79:f0:e2:fa:54:2a:bd:6c:11:29:21:a0:99:d1:bc:
27:71:5e:8c:59:94:7f:0d:74:4b:26:c8:85:47:aa:5b:ea:f0:
7a:1a:9c:5a:20:46:18:5f:29:ac:44:2e:12:ce:83:df:95:3e:
23:b4:7e:14:0f:e4:41:ae:ec:93:d9:48:93:ad:90:7b:02:de:
66:73:14:e9:75:c9:09:70:a7:3b:10:d9:af:16:c5:a3:d9:9c:
1f:2f:3b:d0:43:ec:b7:02:91:b4:fe:ef:fe:3e:98:8e:0d:a3:
14:51:4a:8b:22:86:b7:13:6f:6d:ed:3a:a5:ab:f4:be:4e:3a:
e4:65:02:2a:e0:5c:94:e6:23:20:bc:00:4c:0b:78:a8:7d:3d:
17:5b:50:04:37:96:0c:d9:fb:5f:65:b1:1f:d1:79:d8:c4:98:
c2:87:8b:64:13:78:51:e5:6f:cd:a1:fb:9e:aa:c5:3e:cd:4d:
49:ae:e3:25:17:04:e8:77:c8:16:ff:7f:d5:b6:8c:93:c9:de:
ba:9b:4f:9c:f9:06:af:71:74:10:d4:f8:2f:69:1f:29:f9:22:
bf:2c:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:02 2025 by rpki-client