Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: VX9QfjXVmgVWYOA0m9ve9S6mwFAMKyjLoLqGikAVpyA=
Subject key identifier: B2:13:F4:41:F0:C1:4D:3D:4A:2A:81:07:BC:0F:D3:92:19:CC:7D:E8
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 0194BD17E54977A180554B8D063222633A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: DBXYEcRKqG9TE7D7t30yvl3s7BU.roa (hash: mCooDNiO1ZqwllyH5Jkb8uGbf1FrnJydalex/jIta2I=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: /n9m0HfuoXT01R2JjfRon7Eml23hFssqy505nQXjACk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e5:49:77:a1:80:55:4b:8d:06:32:22:63:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=b213f441f0c14d3d4a2a8107bc0fd39219cc7de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:40:0b:62:7c:dc:70:53:34:8d:89:6e:e9:
54:bd:f7:31:2c:3b:41:13:17:94:27:5b:fc:02:a5:
22:05:da:22:9d:07:ca:65:5f:d1:b0:c3:c8:06:08:
e8:28:1d:fa:e2:88:d0:68:33:02:75:74:9b:f7:5d:
63:db:e6:04:08:3a:7b:0e:10:8a:b7:d0:7a:61:69:
d8:83:0d:83:83:c0:54:4c:fc:13:71:fd:2f:44:f7:
d6:a7:02:7e:21:bc:4d:6e:89:68:54:4a:c0:b9:a4:
f4:e6:fb:8e:e8:8e:b2:85:ee:8f:5e:47:01:f6:11:
c9:c6:92:71:2a:1a:9a:ed:b3:b7:ac:c0:a9:89:10:
71:09:b0:71:ff:75:b1:de:38:0c:81:e7:fc:50:70:
63:76:a3:ed:5a:5b:5a:27:2e:ec:6f:56:4e:56:66:
79:7b:44:20:a5:63:46:6b:6e:0e:96:bb:bb:c5:4d:
3e:71:90:5a:4c:87:b2:d5:c9:80:29:ff:88:45:92:
2a:93:0c:e6:3a:aa:48:d9:1a:da:d1:fb:60:6f:ae:
0c:a1:1d:e6:69:20:57:46:61:e3:81:b6:c7:89:d5:
cd:31:0f:af:08:71:4f:46:fd:04:af:08:fd:5b:72:
42:0b:84:25:c5:37:2d:ac:e2:48:f1:26:de:71:42:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:13:F4:41:F0:C1:4D:3D:4A:2A:81:07:BC:0F:D3:92:19:CC:7D:E8
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1e:90:b6:83:3b:2d:81:37:68:cf:7e:27:a5:48:a1:f3:7d:
ed:d5:8f:46:06:10:e3:a4:db:1b:b2:e4:6e:f8:ea:86:6f:7d:
5c:8d:65:c5:27:c6:c6:00:b8:f7:9a:39:6d:1a:13:54:2a:ad:
29:a4:18:75:c4:74:67:74:c3:6b:23:73:e1:6c:77:a6:8f:32:
cd:38:6b:40:de:e0:8d:a2:ca:e1:72:9c:68:9d:34:f5:bf:26:
cd:02:56:7c:28:fe:01:a1:b0:8e:b0:f6:91:b5:8f:86:70:2d:
23:8c:a4:3b:48:cc:ef:81:e9:bf:c0:75:d5:a1:11:d2:62:b5:
a7:78:34:84:16:dd:f2:9d:c7:e5:6d:d1:91:59:bf:24:7b:ca:
d4:04:f5:58:de:55:f5:0b:f9:a7:f7:d7:b6:90:b7:50:86:b2:
b6:3d:9d:e0:f4:65:04:3a:34:51:50:0b:bf:0f:48:e6:d9:99:
2e:47:08:52:e0:2a:98:9d:bd:01:d1:dc:94:5e:50:07:fa:32:
4a:ff:35:3c:30:ad:7b:0a:44:5e:2e:5b:7f:da:9d:39:87:89:
85:63:87:88:09:d8:bb:bc:ac:f0:b5:20:98:a5:6a:67:1f:59:
da:4c:cb:94:03:32:2c:45:24:c0:70:29:2e:a9:93:b5:d1:64:
58:5b:7f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:50 2025 by rpki-client