Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier: V+9RuShjlTRwZ2if80jTkK3GcX0BmW6Cusrgi9L/QR8=
Subject key identifier: 16:C2:10:9C:B9:EC:A4:AE:EC:04:EC:87:39:8D:EB:74:28:14:A9:4D
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 0194BD853A4FF4D3952AE3D798940235ED1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number: 0466
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: yyBR0It5YRJ2K7DrEq6JrC7urtQl3SmWI2GUU3sD6VU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:4f:f4:d3:95:2a:e3:d7:98:94:02:35:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=16c2109cb9eca4aeec04ec87398deb742814a94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:14:e9:f3:e0:97:6b:58:31:15:63:c0:da:
a8:ea:e7:6c:a5:0a:16:8e:b8:06:91:91:7d:b3:ad:
f5:27:a7:f3:be:3e:d5:91:6e:35:85:2a:35:81:b1:
e1:43:6d:95:fa:5a:36:d4:d2:ac:c4:d3:7a:df:6a:
49:10:ae:a2:6f:a6:3d:01:d4:04:d3:02:41:9c:cb:
5b:fa:33:68:37:6f:d4:70:27:fc:d4:9b:83:26:cd:
ba:cb:de:fb:09:7f:0b:63:7c:fb:ec:1d:99:26:3f:
1a:1f:52:b9:a5:5f:5e:72:d6:43:f7:be:62:a9:5d:
94:f4:09:e8:0e:03:87:58:c1:ea:3c:26:3d:e5:01:
29:80:f2:de:70:a0:cf:f7:ed:c1:45:18:37:69:ae:
2e:d1:ed:f7:3c:bf:09:ad:33:7c:12:1d:b1:54:69:
18:f8:4f:04:66:2b:81:8a:f6:42:e3:d2:3d:f7:f9:
28:9a:74:84:0a:64:b3:80:aa:7b:07:99:6c:32:c1:
a2:40:2e:a0:41:2b:5b:84:f0:ac:dd:9c:5e:89:bf:
e4:cc:87:50:23:f2:ee:6d:3b:f8:33:8b:37:57:30:
38:7c:1a:4f:12:de:55:2f:33:e3:45:28:44:d7:bd:
be:0b:e3:3c:df:16:f2:0e:e4:92:ed:40:71:78:41:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:10:9C:B9:EC:A4:AE:EC:04:EC:87:39:8D:EB:74:28:14:A9:4D
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:78:8b:5a:95:0a:3e:09:a0:60:4b:55:8b:9d:d8:10:01:40:
2c:eb:11:d5:b5:d6:ae:20:f1:04:31:0c:33:e3:b2:6f:a6:9f:
d6:5f:d7:ec:1c:a3:d1:c8:5f:86:64:7b:23:57:ac:7d:ea:1d:
c6:54:94:50:b4:b5:ec:7c:7e:97:f5:5a:78:2f:47:ca:8c:6a:
71:da:34:9a:17:0d:99:cf:62:b3:02:8b:03:e3:72:b3:97:5f:
f9:60:96:6e:38:f1:94:d8:94:f3:a3:48:44:1c:9c:5a:40:3b:
75:0e:4f:ae:39:79:ab:23:86:93:28:d3:d5:d7:5c:d3:a1:fe:
8a:32:c1:57:74:19:02:22:eb:c3:01:d0:6c:f8:f9:91:54:2e:
ea:4c:1a:47:85:e3:60:75:8b:10:6a:f6:75:d3:4d:b9:23:5c:
bb:88:68:53:50:24:b8:09:98:b4:65:67:de:24:c5:60:14:78:
5f:62:8e:34:6f:73:ce:3c:94:34:b6:6b:f4:09:f5:4c:26:0c:
5e:8e:da:24:41:70:aa:53:b0:19:84:62:2b:48:9c:a2:57:a9:
bd:a8:92:2d:a5:7f:06:0f:e8:24:81:67:5a:c1:cd:d5:b8:c3:
01:ed:ed:02:d0:33:02:ce:66:92:67:11:5a:ab:06:c2:8e:de:
88:ea:dc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:58:56 2025 by rpki-client