Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: MgTpeVjOvf/ohzlE7KjmWXgYD5xBboeZvTrB9EqaDP0=
Subject key identifier: F9:6E:76:63:D5:2A:A3:5F:DD:7B:01:AF:49:40:2C:5C:28:16:EC:F6
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0194BCAA0C51B77017BCA3F19CDB13920613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: bMJdGCQvlFXFamUtyf9F0CZfi0fVDK4CDWGQDc4X62Y=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:51:b7:70:17:bc:a3:f1:9c:db:13:92:06:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=f96e7663d52aa35fdd7b01af49402c5c2816ecf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:51:56:47:d6:90:dc:ad:8a:2e:9f:3d:d9:
1c:34:97:7b:fc:6e:91:20:1b:e0:71:4a:6c:50:2d:
cf:ff:9a:75:19:7b:b9:34:0c:e0:ee:c4:d7:f8:5f:
63:84:ec:1f:8c:13:89:b4:09:32:b2:71:b3:a7:c5:
c7:96:1c:29:ff:b4:7d:7c:2c:91:e8:71:e4:11:52:
7a:43:d9:1d:9d:6c:31:52:2f:ef:5b:d3:19:a8:a2:
70:4a:b5:80:20:f1:bb:fa:32:9a:4b:9a:33:4b:25:
5c:7b:d0:30:07:f4:f2:51:8e:67:16:c4:f5:d8:f2:
35:26:5a:a5:8a:97:3d:0a:67:68:e6:64:d1:57:96:
ed:ae:13:f8:19:e8:5d:53:98:4e:c7:ec:ec:40:23:
ac:2b:c1:11:ab:df:d9:43:8a:70:28:7f:26:5d:d7:
0c:6b:84:af:79:54:9b:bb:95:76:80:d8:2e:80:2f:
5b:c9:ba:58:1d:5d:48:94:0a:23:62:2b:b9:86:3b:
0d:18:bb:e3:d0:7f:0b:09:99:e5:97:c0:19:4a:a1:
9c:46:76:49:2c:3f:42:c7:a1:5f:c7:71:f3:2d:2d:
74:5c:fd:f5:f8:94:b5:a4:88:66:c3:a2:8f:a7:e9:
64:64:41:ac:6e:42:2b:72:2f:05:6a:d5:bc:6e:db:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6E:76:63:D5:2A:A3:5F:DD:7B:01:AF:49:40:2C:5C:28:16:EC:F6
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:20:14:8e:db:01:bf:8d:9c:45:f1:b6:03:6b:8f:53:5c:0a:
99:17:88:df:d6:77:10:6c:8e:ca:02:13:55:ac:45:3c:65:ac:
ce:76:47:24:61:c6:4e:0b:1e:23:5f:31:dc:b8:31:64:44:b5:
aa:b6:b0:12:43:62:e8:01:46:bf:99:f6:72:9b:64:ef:08:a7:
f1:6d:0f:2f:06:68:e1:c7:e0:fa:d9:d2:a7:74:b5:c6:6f:6e:
b3:0a:8c:f7:ae:ee:75:09:99:c7:2b:3f:bb:a6:b3:53:1f:1f:
ad:9f:0e:52:62:0e:3e:08:ee:d3:92:5b:04:f5:ff:d6:85:8e:
9f:14:73:4c:c4:bf:3a:86:95:6a:a8:8c:39:67:1e:71:26:c6:
22:cf:eb:ed:a9:cc:fd:65:51:98:d4:d2:49:0e:02:9b:0f:89:
f6:c2:d0:33:f8:35:75:e9:4f:e0:9e:30:3b:d3:aa:b3:cd:d3:
e9:d9:9e:96:3f:b1:e9:29:ea:ca:47:63:22:33:86:a9:83:ec:
c0:a6:0d:8f:e1:fb:de:24:37:0d:20:87:44:9f:8c:9a:1f:1a:
d1:72:26:75:3c:57:07:f9:2c:f2:bd:4a:6a:40:6c:f3:a9:b2:
4e:9a:e7:b2:05:59:05:51:05:ff:4a:14:a2:36:16:5e:01:b6:
e5:5e:1f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client