Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
File: IhkMJolAk9xkoF7yz9NUoGz_A50.mft (raw, json)
Hash identifier: Dywo2KbxAOfIE4yio2hACmgnnAY3MciQp4BjhYMffzA=
Subject key identifier: 81:EA:15:2F:03:91:2F:61:22:B7:09:4E:B9:09:40:C1:25:A0:11:B2
Authority key identifier: 22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
Certificate issuer: /CN=22190c26894093dc64a05ef2cfd354a06cff039d
Certificate serial: 0194BBCDDFFCF0BC29C410F684F90C23A67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
Manifest number: 0D5A
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: IhkMJolAk9xkoF7yz9NUoGz_A50.crl (hash: q6bebT4l34cTwTV1LK2+IzZjdsCpH9y+8qHAHRilgxc=)
2: VDBLRqMYCjpj60SbvjVrCA9rAtA.roa (hash: JKDK4eegAuzQo0SHJPfDcx6+y5omzYtOGcHgfrvk3wU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:df:fc:f0:bc:29:c4:10:f6:84:f9:0c:23:a6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22190c26894093dc64a05ef2cfd354a06cff039d
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=81ea152f03912f6122b7094eb90940c125a011b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2a:64:22:6b:53:b2:a7:8f:41:dd:5e:04:ab:
10:20:a5:6a:41:40:0b:c0:e5:40:04:e7:e8:9e:ac:
04:6d:ec:e2:fc:fe:5a:ed:e9:a2:94:57:32:a0:bd:
60:4e:f3:b2:15:78:fa:99:1f:ef:9e:97:14:ca:63:
0d:8e:ac:6b:52:f9:bc:b8:46:83:07:3b:09:3a:61:
40:af:ac:b9:fb:25:47:f1:f5:34:a4:77:44:f9:57:
a2:6d:2c:bd:78:0d:6b:95:c8:42:ee:a0:0f:d2:35:
dd:03:ea:18:ea:27:93:7b:71:18:00:7f:a7:65:cd:
bb:98:9c:1d:c8:2d:65:8b:3e:c4:f8:59:1f:6a:36:
0d:e0:4a:6b:c8:c6:4f:ee:d2:a6:36:1f:8a:3d:31:
18:83:46:59:bc:5c:4f:21:ae:83:82:4b:d3:18:99:
65:a1:3a:be:33:87:f4:f1:06:67:ea:b6:63:2e:b2:
8a:25:e1:98:d6:75:97:f0:3a:46:7d:71:7c:bd:85:
a5:92:30:70:d9:8b:28:d2:37:ad:fb:d4:71:34:1c:
48:9d:14:09:e9:f5:54:c4:8f:73:aa:ba:1f:0b:d1:
e3:fa:dc:78:71:17:43:f7:c7:84:87:1f:7e:7c:76:
fd:25:07:44:48:d4:48:ad:0b:25:f5:37:d0:54:c5:
df:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:15:2F:03:91:2F:61:22:B7:09:4E:B9:09:40:C1:25:A0:11:B2
X509v3 Authority Key Identifier:
keyid:22:19:0C:26:89:40:93:DC:64:A0:5E:F2:CF:D3:54:A0:6C:FF:03:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhkMJolAk9xkoF7yz9NUoGz_A50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3a96fa-90de-460c-bea6-ec10ebe4fccf/1/IhkMJolAk9xkoF7yz9NUoGz_A50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5f:8e:fc:01:82:00:00:e5:a2:96:e2:f1:51:82:ab:49:89:
86:8a:6f:b1:08:84:29:ec:59:4a:41:53:50:a0:12:f9:cd:3e:
ae:be:60:d5:e5:e5:28:a1:fa:26:c8:7a:0e:6f:a8:0a:e3:0a:
8c:ca:12:2e:ed:53:1f:ea:33:09:e8:fd:58:46:01:1c:57:18:
3b:08:e7:da:d8:f5:9c:b4:b3:92:13:ef:ce:78:ab:ba:0b:d0:
4d:f8:9c:d5:41:b7:c5:3a:f1:37:1b:99:68:79:db:e8:6e:8a:
18:52:b2:a3:ef:e7:f8:fe:91:22:4c:66:b1:84:52:8a:d5:8c:
46:6a:d1:82:af:8e:74:23:5d:89:bd:0c:85:1d:0d:57:d2:c6:
74:48:e8:aa:41:79:ec:bb:91:df:3b:93:52:f4:38:2c:2f:7e:
83:46:7f:42:17:ae:c9:a2:08:9e:e2:f5:0f:6c:24:1c:83:ba:
a1:73:f1:10:ca:51:35:dc:60:00:81:90:90:8b:a9:ab:42:d1:
7b:ef:2a:70:45:84:8d:ec:ba:b8:66:70:43:e3:96:c6:23:cb:
8e:85:3c:e5:4e:6c:4b:e7:63:2b:0a:2f:aa:bc:bc:66:5c:65:
7e:fa:7a:34:bf:9e:0b:0c:63:53:11:ea:88:de:63:ec:aa:20:
dd:47:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:30 2025 by rpki-client